$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a88af20-9dde-31a0-9bf5-829e231fbacf.roa File: 5a88af20-9dde-31a0-9bf5-829e231fbacf.roa (raw, json) Hash identifier: PUbbNXvWSw6p7dzOj2r6NDpFH7rfi4dWq1ig/Ed+9p0= Subject key identifier: 53:9D:CD:6C:76:6A:CD:DF:F5:33:5B:04:29:53:3D:82:A5:4E:94:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1A8DF860A89001532EE00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a88af20-9dde-31a0-9bf5-829e231fbacf.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 12008 IP address blocks: 156.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:a8:df:86:0a:89:00:15:32:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=b488f452-a825-4c80-bad9-b933e8f09335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:b1:93:ec:e2:87:45:50:dd:c9:2d:9b:9f: 88:e5:1d:56:fa:67:06:6c:a8:ce:07:48:96:cc:98: ae:f5:06:e7:bc:53:ce:03:9b:6c:3e:3d:64:1f:a1: 7a:b8:95:2c:56:72:11:35:1d:3a:59:3c:8a:e8:30: 82:de:1b:83:d0:cc:c0:dc:89:86:b8:ad:86:a4:ba: ca:d0:d9:36:91:5b:3e:c6:2f:7c:c3:a8:9b:ff:83: ff:e7:35:42:14:30:27:ec:31:45:d7:ba:9c:fb:c5: b1:dc:68:0f:14:3a:93:a6:d8:a1:fc:ae:a2:e9:38: d7:69:5d:7d:d0:cc:d6:db:b1:7a:70:16:c2:bb:4f: ea:38:5a:36:0e:d2:57:c7:d9:3b:7d:6d:72:e3:39: 93:55:3d:1d:24:af:6e:56:76:78:9a:cf:a3:27:b4: e3:f0:00:89:7f:81:fe:c9:f2:dc:a0:a2:66:88:26: cd:a1:ed:5e:f0:2a:da:27:1f:ba:37:e4:e9:76:f8: 81:95:8f:2d:4e:b9:b0:c7:3d:82:8d:b4:60:e5:cd: 7f:e8:e7:e7:ae:8d:ce:1e:0e:1e:08:a5:45:7a:d4: e4:57:8c:23:fa:09:37:ca:c8:99:e5:fd:9d:ab:85: 45:40:66:f6:69:66:93:4b:b2:8c:3c:0d:2a:cb:1e: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9D:CD:6C:76:6A:CD:DF:F5:33:5B:04:29:53:3D:82:A5:4E:94:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5a88af20-9dde-31a0-9bf5-829e231fbacf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:84:9a:49:37:fe:1f:08:76:7a:a6:84:bb:2d:7b:61:74:34: 06:77:7f:0f:bb:98:bb:6f:f8:0c:a7:1d:a6:8a:50:71:cf:64: 39:78:78:6d:e6:46:b5:2f:7f:63:02:9a:67:2f:19:89:3e:90: 36:8c:21:cb:ee:06:d1:10:33:b4:6b:57:a9:14:57:ce:9f:f0: 86:b5:e2:b4:d4:6d:53:41:7a:80:3b:b7:21:de:40:13:9a:a5: bd:b8:1e:26:4e:9d:13:a1:b3:2c:a8:70:99:59:1f:56:60:ce: 66:13:7a:54:7b:de:1c:f0:9e:4c:f7:7f:92:77:ee:dd:ec:03: 53:82:7c:01:ea:c0:d0:ce:a2:99:b7:7a:87:b1:e3:a3:1c:bb: 44:d7:d8:fc:46:c4:3f:64:09:7c:a8:10:d5:9f:e7:08:22:5d: f5:a3:c2:e4:b9:74:6a:d0:ad:bd:54:18:95:52:7f:79:2e:cd: 22:a7:ec:92:1f:b0:c1:ed:c6:92:d6:5c:bd:b0:1e:f3:dd:16: 9a:c6:47:6c:06:2e:04:14:d0:9a:c1:bc:d5:8a:40:a8:c6:8a: 14:25:98:10:e7:61:c6:b1:75:f9:33:4f:f9:eb:9d:aa:17:f2: d4:b3:05:d7:72:3e:a3:06:cb:01:1d:1d:1a:aa:fc:b4:dd:96: 32:2c:f1:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwajfhgqJABUy7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YjQ4OGY0NTItYTgyNS00YzgwLWJhZDktYjkzM2U4ZjA5MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEixk+zih0VQ3cktm5+I5R1W+mcGbKjOB0iW zJiu9QbnvFPOA5tsPj1kH6F6uJUsVnIRNR06WTyK6DCC3huD0MzA3ImGuK2GpLrK 0Nk2kVs+xi98w6ib/4P/5zVCFDAn7DFF17qc+8Wx3GgPFDqTptih/K6i6TjXaV19 0MzW27F6cBbCu0/qOFo2DtJXx9k7fW1y4zmTVT0dJK9uVnZ4ms+jJ7Tj8ACJf4H+ yfLcoKJmiCbNoe1e8CraJx+6N+TpdviBlY8tTrmwxz2CjbRg5c1/6Ofnro3OHg4e CKVFetTkV4wj+gk3ysiZ5f2dq4VFQGb2aWaTS7KMPA0qyx4elQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOdzWx2as3f9TNbBClTPYKlTpQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWE4OGFmMjAtOWRkZS0z MWEwLTliZjUtODI5ZTIzMWZiYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWEmkk3/h8IdnqmhLste2F0NAZ3fw+7mLtv+AynHaaKUHHPZDl4eG3m RrUvf2MCmmcvGYk+kDaMIcvuBtEQM7RrV6kUV86f8Ia14rTUbVNBeoA7tyHeQBOa pb24HiZOnROhsyyocJlZH1ZgzmYTelR73hzwnkz3f5J37t3sA1OCfAHqwNDOopm3 eoex46Mcu0TX2PxGxD9kCXyoENWf5wgiXfWjwuS5dGrQrb1UGJVSf3kuzSKn7JIf sMHtxpLWXL2wHvPdFprGR2wGLgQU0JrBvNWKQKjGihQlmBDnYcaxdfkzT/nrnaoX 8tSzBddyPqMGywEdHRqq/LTdljIs8Tw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:49 2025 by rpki-client