$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33ffbbf1-5980-3e5f-b7e1-8454275b6cd7.roa File: 33ffbbf1-5980-3e5f-b7e1-8454275b6cd7.roa (raw, json) Hash identifier: jDj2nLkUL1lVgdmPTJoy/Yi9kUR71EnoosEhuIghjHU= Subject key identifier: 1D:4D:75:DA:F9:99:C6:20:CA:A8:A1:25:D6:2F:24:67:C2:51:5F:46 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D0615F0621875E277CE0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33ffbbf1-5980-3e5f-b7e1-8454275b6cd7.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397219 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d0:61:5f:06:21:87:5e:27:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=36020d28-4956-45c3-9a95-3fb27eeef17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:2b:13:c9:0f:71:12:ec:9a:27:17:f9:d7: 3d:f0:9a:1e:09:76:2d:18:d6:5f:84:01:0e:72:93: 28:e8:b4:7e:d4:b2:18:d8:2d:33:8d:8e:d3:a5:f2: 5d:80:c4:0f:48:df:cd:11:0d:a7:ce:47:a1:04:e3: 12:4f:f3:ac:5e:f2:15:44:ad:37:a8:88:88:9b:23: d6:d2:7f:a9:a2:c4:da:f6:6b:50:a7:4d:89:e0:76: 6e:70:7e:b7:02:1a:11:d8:4d:46:6e:bd:9f:b8:3b: 0e:f5:4a:19:46:f0:d1:50:f4:0e:3c:8d:d4:73:86: 78:0c:9d:1a:ba:b9:e6:53:14:74:85:de:83:11:e2: 43:2f:a3:c3:bc:84:1c:18:32:6a:2e:e4:3a:c9:90: c8:87:76:75:d5:60:d2:10:b1:6a:1b:7c:c8:f9:52: eb:fd:62:46:de:10:e2:a1:4c:80:e9:14:6d:46:37: dc:6f:3d:00:8a:c8:5c:41:b6:a7:73:1d:50:9a:a6: a3:b5:25:bc:cd:21:eb:68:71:27:a5:48:67:d5:56: 34:cf:64:00:20:56:57:d8:16:b4:7e:07:be:11:27: ee:c8:2c:a8:8a:ff:c2:3d:dc:21:1f:c6:3d:2f:d2: cb:8a:8d:a3:2e:5f:a9:50:a5:8e:40:a0:0f:87:1d: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:75:DA:F9:99:C6:20:CA:A8:A1:25:D6:2F:24:67:C2:51:5F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33ffbbf1-5980-3e5f-b7e1-8454275b6cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:09:ec:48:fb:73:03:48:f6:90:b2:e7:25:0d:63:cc:2f:cb: 06:d5:93:07:53:ac:0e:b8:33:ec:ee:f7:f1:00:45:69:02:82: d5:a6:07:49:9f:b7:8e:58:d0:4b:94:14:fb:61:96:c2:c6:3c: 1e:e3:6a:d4:aa:c6:35:8b:1a:a0:34:a5:f2:39:a4:32:17:c1: 27:4f:90:be:09:5d:62:64:67:b5:9d:60:20:69:28:82:0e:dc: dd:3c:eb:37:fb:8c:e1:ef:48:52:eb:32:07:4c:94:69:10:d0: 63:70:38:f4:a2:63:d0:11:ac:86:05:ea:49:2b:23:dd:f4:20: 07:48:21:de:b6:9d:29:bd:9f:8b:57:43:f4:2c:20:fb:d5:29: 88:7c:e8:4c:93:4e:91:15:3f:cc:15:8c:5b:61:7f:b6:c4:61: f0:3d:b9:c8:0f:f3:f8:94:1a:f7:3a:dc:f4:53:e6:95:b3:ab: 02:a0:c0:91:db:7b:30:69:8f:85:0c:fc:34:5d:3d:cd:fb:fa: f3:80:ec:68:9e:fc:e7:85:be:3a:7c:dd:04:a6:c1:5a:3a:aa: 5e:5d:3d:0e:ae:f0:e8:b8:2f:5b:79:fb:57:92:27:a5:d8:00: 61:28:ca:80:8c:f8:6e:1f:05:d6:a4:5b:0b:d0:b8:cc:4a:bc: e3:16:06:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dBhXwYhh14nfOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzYwMjBkMjgtNDk1Ni00NWMzLTlhOTUtM2ZiMjdlZWVmMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSkrE8kPcRLsmicX+dc98JoeCXYtGNZfhAEO cpMo6LR+1LIY2C0zjY7TpfJdgMQPSN/NEQ2nzkehBOMST/OsXvIVRK03qIiImyPW 0n+posTa9mtQp02J4HZucH63AhoR2E1Gbr2fuDsO9UoZRvDRUPQOPI3Uc4Z4DJ0a urnmUxR0hd6DEeJDL6PDvIQcGDJqLuQ6yZDIh3Z11WDSELFqG3zI+VLr/WJG3hDi oUyA6RRtRjfcbz0AishcQbancx1QmqajtSW8zSHraHEnpUhn1VY0z2QAIFZX2Ba0 fge+ESfuyCyoiv/CPdwhH8Y9L9LLio2jLl+pUKWOQKAPhx0h6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1Nddr5mcYgyqihJdYvJGfCUV9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzNmZmJiZjEtNTk4MC0z ZTVmLWI3ZTEtODQ1NDI3NWI2Y2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0J7Ej7cwNI9pCy5yUNY8wvywbVkwdTrA64M+zu9/EARWkCgtWmB0mf t45Y0EuUFPthlsLGPB7jatSqxjWLGqA0pfI5pDIXwSdPkL4JXWJkZ7WdYCBpKIIO 3N086zf7jOHvSFLrMgdMlGkQ0GNwOPSiY9ARrIYF6kkrI930IAdIId62nSm9n4tX Q/QsIPvVKYh86EyTTpEVP8wVjFthf7bEYfA9ucgP8/iUGvc63PRT5pWzqwKgwJHb ezBpj4UM/DRdPc37+vOA7Gie/OeFvjp83QSmwVo6ql5dPQ6u8Oi4L1t5+1eSJ6XY AGEoyoCM+G4fBdakWwvQuMxKvOMWBnY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:05 2025 by rpki-client