$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9bffa0-bf70-32b5-a6a4-6df8c0cd60b6.roa File: ff9bffa0-bf70-32b5-a6a4-6df8c0cd60b6.roa (raw, json) Hash identifier: QPKci7iA6xL/nmiJcrcELZaMkRJ0avkYoWmv7MUHweI= Subject key identifier: 3C:79:9F:F1:4D:C2:67:0A:24:A9:74:78:30:5F:5B:A4:F8:0F:4A:49 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584BB2F7FFA74C4B5D9CC636D080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9bffa0-bf70-32b5-a6a4-6df8c0cd60b6.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 397231 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ff:a7:4c:4b:5d:9c:c6:36:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=b4f181f1-0cd4-41c2-a31c-21ecf710b2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:da:d8:e7:3c:03:af:16:40:d7:de:f3:11:76: 63:42:10:77:ec:f5:f6:e9:0e:87:21:d4:1a:10:fd: a6:9f:e6:ef:04:f0:27:20:80:49:b2:4c:be:2e:4b: 4c:18:9b:00:c1:91:26:de:6e:5c:e5:fa:4d:88:9e: bf:ad:80:8d:e9:76:b7:98:91:0c:c9:4f:09:ad:a4: 3c:9a:fd:0a:92:e9:42:4f:59:b8:62:93:03:a3:59: 58:fc:0e:75:66:d1:89:18:90:b4:58:e2:db:70:e2: 7f:23:3b:ac:10:8e:1f:84:69:ea:74:e4:3d:19:95: 70:ff:3e:0a:cb:52:03:2c:e6:54:8a:9d:12:1e:2c: 8e:05:02:a0:4e:1b:ed:10:00:4e:6a:5f:67:4f:f1: ad:5f:78:4c:92:99:2a:b5:4f:9a:cf:e2:f0:7c:91: 62:e4:db:89:72:f6:ca:4e:b4:1b:88:a1:53:4e:7c: e5:3d:99:ff:3e:46:ca:f7:85:3d:fc:5d:28:48:5d: 37:26:c2:db:59:3b:9e:ff:7d:db:08:29:84:2a:c1: 11:55:37:75:e7:30:d7:ec:58:c9:99:a8:0b:b2:51: 0d:72:bc:0a:64:61:dc:8f:e8:c6:c3:e6:61:50:8e: d8:69:79:9d:cc:71:be:e6:92:3e:e8:8c:d5:2f:5d: b8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:79:9F:F1:4D:C2:67:0A:24:A9:74:78:30:5F:5B:A4:F8:0F:4A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9bffa0-bf70-32b5-a6a4-6df8c0cd60b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b2:59:95:08:b3:90:3f:2e:5a:ee:1c:c1:e5:de:d6:c1:07: 41:fe:91:ac:f0:ac:74:cf:f5:74:48:27:5a:20:30:5b:b5:b3: 26:cf:7b:73:77:aa:d7:ad:c1:b6:22:82:de:d4:b7:4d:9b:53: 10:03:fa:06:27:f1:46:18:a1:47:58:7a:09:4f:2e:44:b6:5c: 67:66:77:a7:8e:a0:45:f5:1b:4c:d5:12:e0:73:50:33:29:3d: 73:4f:e4:f6:86:b2:31:60:47:6d:86:27:73:07:58:c1:d5:3e: 33:90:20:d2:be:7c:0d:4f:ca:fe:3b:bd:75:e2:1f:51:1d:06: 3e:2d:ea:15:31:e2:90:d3:78:1e:ca:8f:fd:96:84:bd:5e:6e: 00:3b:de:a0:26:45:c6:89:de:d2:02:c9:3f:c6:17:8c:7b:88: f9:f7:06:06:a1:f4:88:8e:56:8d:7c:d4:bf:d3:ea:f0:f8:c4: a7:e9:ae:86:1c:08:b7:cc:e0:fa:81:e9:1d:96:7e:fc:6b:94: a7:ea:1c:ef:6b:c0:37:13:72:ec:e7:fa:d2:aa:03:85:9f:8f: aa:c2:61:d8:d3:4a:81:b3:a1:24:91:b7:f1:25:7b:b8:69:e3: ac:30:52:63:48:ee:27:37:8f:bd:23:90:f4:8f:56:27:ca:c4: 97:6b:4b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9/+nTEtdnMY20IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YjRmMTgxZjEtMGNkNC00MWMyLWEzMWMtMjFlY2Y3MTBiMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtrY5zwDrxZA197zEXZjQhB37PX26Q6HIdQa EP2mn+bvBPAnIIBJsky+LktMGJsAwZEm3m5c5fpNiJ6/rYCN6Xa3mJEMyU8JraQ8 mv0KkulCT1m4YpMDo1lY/A51ZtGJGJC0WOLbcOJ/IzusEI4fhGnqdOQ9GZVw/z4K y1IDLOZUip0SHiyOBQKgThvtEABOal9nT/GtX3hMkpkqtU+az+LwfJFi5NuJcvbK TrQbiKFTTnzlPZn/PkbK94U9/F0oSF03JsLbWTue/33bCCmEKsERVTd15zDX7FjJ magLslENcrwKZGHcj+jGw+ZhUI7YaXmdzHG+5pI+6IzVL124+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx5n/FNwmcKJKl0eDBfW6T4D0pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmY5YmZmYTAtYmY3MC0z MmI1LWE2YTQtNmRmOGMwY2Q2MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOyWZUIs5A/LlruHMHl3tbBB0H+kazwrHTP9XRIJ1ogMFu1sybPe3N3 qtetwbYigt7Ut02bUxAD+gYn8UYYoUdYeglPLkS2XGdmd6eOoEX1G0zVEuBzUDMp PXNP5PaGsjFgR22GJ3MHWMHVPjOQINK+fA1Pyv47vXXiH1EdBj4t6hUx4pDTeB7K j/2WhL1ebgA73qAmRcaJ3tICyT/GF4x7iPn3Bgah9IiOVo181L/T6vD4xKfproYc CLfM4PqB6R2WfvxrlKfqHO9rwDcTcuzn+tKqA4Wfj6rCYdjTSoGzoSSRt/Ele7hp 46wwUmNI7ic3j70jkPSPVifKxJdrSzE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:39:12 2025 by rpki-client