$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3da5e597-bcdc-3224-a1aa-9d2888a70f0b.roa File: 3da5e597-bcdc-3224-a1aa-9d2888a70f0b.roa (raw, json) Hash identifier: lTYV6Z6opeR+EwU/QpHN1JrJDgzBTQi/pQdMgQ+JJLg= Subject key identifier: 29:C0:F6:83:E7:1A:40:2A:4C:50:F9:28:8E:15:C0:97:16:A5:05:7C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1D152A4B78D7948C1A900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3da5e597-bcdc-3224-a1aa-9d2888a70f0b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397232 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:d1:52:a4:b7:8d:79:48:c1:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e2c4872f-451a-4ff7-b177-87678f6735c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:f9:1b:ee:0f:cc:44:3b:12:63:48:5e:43: 96:d5:45:9a:d1:76:08:4d:c7:1d:5c:d5:0e:ed:af: 3c:dc:78:07:74:0a:65:67:d0:d8:ff:92:04:01:3e: 1d:f5:5d:05:77:61:bc:1a:e6:a4:88:7c:41:f3:a6: 37:bf:9b:8f:1a:5a:b1:16:a8:89:a1:d8:cc:6d:d1: 26:b2:8c:b0:cd:4b:da:9a:16:75:59:1b:52:f9:d4: f3:13:91:dc:9f:50:b1:e7:50:df:98:99:9e:24:51: 73:fc:c7:ef:7d:c5:d1:36:c5:25:38:ae:c2:e0:46: de:68:0e:46:40:0c:cc:c4:7d:46:40:11:b9:40:99: 2f:3d:ff:b5:67:40:51:7b:d2:46:f5:72:6b:6a:f9: 61:4d:d0:be:08:25:c2:54:53:39:7f:54:0f:90:bf: db:b6:62:c7:5d:b9:f2:31:c5:d3:06:8b:c3:e3:9d: 00:59:09:c6:bb:17:e3:e5:49:d7:82:15:3f:9c:0d: f3:f9:6b:43:89:1d:e8:15:e0:c4:d5:64:99:0d:0c: bb:ce:17:3c:82:06:72:61:f9:68:da:07:6b:13:dc: ee:3e:5e:3a:a2:e3:9d:b6:11:72:11:9b:fd:e8:0d: 8b:2c:a2:12:87:56:04:88:6b:c3:44:9d:08:05:c5: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C0:F6:83:E7:1A:40:2A:4C:50:F9:28:8E:15:C0:97:16:A5:05:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3da5e597-bcdc-3224-a1aa-9d2888a70f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:19:4b:68:2f:d5:a1:63:d3:c8:cb:cd:15:d6:fa:3a:7a:bb: 46:3e:95:38:24:34:e3:d1:bd:c3:84:39:d7:46:ad:ca:d8:3b: 4b:c2:45:57:7a:f4:79:bf:81:24:97:e2:a3:32:a7:f8:e0:a7: 6b:ea:85:42:49:3c:93:f9:4c:0b:76:20:c6:eb:57:b7:f5:23: 39:df:01:e3:c0:d2:c5:22:d2:14:38:fc:58:89:30:fc:b7:f5: 7e:22:5a:dd:a7:b6:e0:42:3f:8d:d4:b6:d2:76:85:95:a1:29: e6:e1:ca:4a:b4:02:a6:b5:32:f1:9d:96:9b:9c:53:85:e3:5b: 65:ab:89:20:4f:09:1a:94:06:f5:8e:ee:ba:4c:46:36:53:8e: 53:83:af:16:b7:94:9a:eb:c1:7f:f2:10:95:1b:88:ca:03:25: f2:3b:6e:02:2b:54:fc:2b:e9:f3:e5:23:0d:20:35:bf:0d:8f: 4b:f6:a0:a8:e6:2b:ed:3a:58:ad:a7:02:d4:34:66:46:5c:ef: 3e:25:13:fd:6c:c6:e9:45:4f:6c:a4:ac:ad:ac:0c:6f:23:39: 6f:45:9f:97:eb:69:04:92:54:4c:ed:8f:43:da:75:0b:15:15: bb:45:77:6b:a9:36:77:31:ce:b0:bf:f6:94:d8:b4:07:11:f4: 56:f8:8f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4dFSpLeNeUjBqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTJjNDg3MmYtNDUxYS00ZmY3LWIxNzctODc2NzhmNjczNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCf5G+4PzEQ7EmNIXkOW1UWa0XYITccdXNUO 7a883HgHdAplZ9DY/5IEAT4d9V0Fd2G8GuakiHxB86Y3v5uPGlqxFqiJodjMbdEm soywzUvamhZ1WRtS+dTzE5Hcn1Cx51DfmJmeJFFz/MfvfcXRNsUlOK7C4EbeaA5G QAzMxH1GQBG5QJkvPf+1Z0BRe9JG9XJravlhTdC+CCXCVFM5f1QPkL/btmLHXbny McXTBovD450AWQnGuxfj5UnXghU/nA3z+WtDiR3oFeDE1WSZDQy7zhc8ggZyYflo 2gdrE9zuPl46ouOdthFyEZv96A2LLKISh1YEiGvDRJ0IBcUyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnA9oPnGkAqTFD5KI4VwJcWpQV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2RhNWU1OTctYmNkYy0z MjI0LWExYWEtOWQyODg4YTcwZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0ZS2gv1aFj08jLzRXW+jp6u0Y+lTgkNOPRvcOEOddGrcrYO0vCRVd6 9Hm/gSSX4qMyp/jgp2vqhUJJPJP5TAt2IMbrV7f1IznfAePA0sUi0hQ4/FiJMPy3 9X4iWt2ntuBCP43UttJ2hZWhKebhykq0Aqa1MvGdlpucU4XjW2WriSBPCRqUBvWO 7rpMRjZTjlODrxa3lJrrwX/yEJUbiMoDJfI7bgIrVPwr6fPlIw0gNb8Nj0v2oKjm K+06WK2nAtQ0ZkZc7z4lE/1sxulFT2ykrK2sDG8jOW9Fn5fraQSSVEztj0PadQsV FbtFd2upNncxzrC/9pTYtAcR9Fb4j1M= -----END CERTIFICATE-----Generated at Mon Oct 20 06:36:15 2025 by rpki-client