$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95349438-4c9c-30e9-b94b-6dde4b41b703.roa File: 95349438-4c9c-30e9-b94b-6dde4b41b703.roa (raw, json) Hash identifier: CAG8zOOOTZ3hhMe8fjn+bB/nmRpAQiz7e1WKk4KeQNI= Subject key identifier: A6:C2:5C:3D:DC:44:00:07:8A:0D:22:91:C8:E3:BB:B5:51:48:D2:06 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B48E1ECB485ACB005A61B1CC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95349438-4c9c-30e9-b94b-6dde4b41b703.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 397235 IP address blocks: 156.154.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ec:b4:85:ac:b0:05:a6:1b:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=349f2649-9bd3-4ef2-bea1-5d52732cee56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:d1:b2:f7:13:17:7b:c4:f0:0a:93:9e:0f: d4:8b:44:72:45:0e:35:76:a6:0e:a8:41:90:bd:1b: 8f:57:0c:f7:18:96:24:bc:36:65:b0:cb:d1:b1:87: 91:07:07:27:42:6e:1b:f6:64:97:0f:3d:bb:b9:37: 47:35:fe:78:a2:90:44:29:d6:7b:a3:94:cc:8e:61: 25:f3:d6:e8:12:cd:f6:f8:9c:8d:63:45:dd:fd:d7: be:0b:b1:0b:0c:6e:71:c6:d9:88:ef:de:16:32:8b: 3b:68:4a:8b:d9:dd:a5:1a:19:55:21:55:5b:7a:10: a4:ab:bb:04:b2:6b:09:4d:df:d9:b0:61:2c:9d:d2: 41:02:2e:6c:96:36:48:35:65:51:9f:51:d5:3e:5d: a4:70:85:6b:d8:07:7a:9c:0f:79:7f:de:e1:0a:41: 35:9c:5c:b8:49:15:eb:cf:41:9f:94:cf:8c:e2:88: 1f:e4:8d:e7:82:69:e1:0c:dc:d2:4d:47:94:ff:61: f2:18:d8:a8:76:42:d4:3d:93:22:d9:63:5f:45:73: 57:48:d6:df:8b:d6:d8:31:04:4c:dd:bc:89:29:45: 79:c4:67:a0:96:6d:cf:4b:13:8e:95:9b:ed:21:9c: fe:54:51:98:31:ac:97:36:fa:d6:d2:d6:0d:28:62: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C2:5C:3D:DC:44:00:07:8A:0D:22:91:C8:E3:BB:B5:51:48:D2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/95349438-4c9c-30e9-b94b-6dde4b41b703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:99:c4:af:e4:b8:e9:29:ba:1f:3c:b4:02:2d:04:c8:f1:f1: 3f:bd:0b:72:f9:c4:59:c5:e2:66:14:24:c7:e3:b8:58:a4:59: e1:a8:5f:38:fc:0e:5e:aa:0e:33:d3:10:79:04:63:35:e7:ed: dd:59:e4:c2:1a:d7:75:76:2e:49:b7:63:cd:bb:0c:ec:ae:3e: 82:81:ad:1b:fe:c9:67:73:a5:b2:78:68:af:14:2a:a3:c8:71: 57:99:67:74:8a:61:50:ff:64:9a:69:c2:c7:f4:02:32:f5:23: cc:1b:78:1d:c8:1e:4a:b0:80:2d:01:4e:57:ea:57:80:b3:1a: 42:0d:62:4f:ed:3f:12:cd:e7:4d:26:c1:df:56:8c:ce:99:18: 6a:54:7d:1a:50:b4:35:e6:ee:ca:31:a8:3d:89:cc:35:85:75: 53:72:3e:49:53:b7:2a:5d:21:f5:ac:9d:66:cb:21:2e:a9:c5: 78:54:69:22:d8:e6:8d:ce:a7:6b:cd:eb:6b:c4:4d:7e:4f:8c: 9e:3e:2e:5d:a6:45:20:ac:80:f1:db:4d:20:c0:6a:1f:ed:55: e3:be:c6:c3:c8:d7:35:50:4a:0d:a9:73:f4:56:25:60:6b:e3: b0:90:ae:ed:5e:3f:e3:e0:2a:4f:d0:9d:2e:1c:3d:32:69:4b: f5:a9:2f:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4ey0haywBaYbHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzQ5ZjI2NDktOWJkMy00ZWYyLWJlYTEtNWQ1MjczMmNlZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bDRsvcTF3vE8AqTng/Ui0RyRQ41dqYOqEGQ vRuPVwz3GJYkvDZlsMvRsYeRBwcnQm4b9mSXDz27uTdHNf54opBEKdZ7o5TMjmEl 89boEs32+JyNY0Xd/de+C7ELDG5xxtmI794WMos7aEqL2d2lGhlVIVVbehCkq7sE smsJTd/ZsGEsndJBAi5sljZINWVRn1HVPl2kcIVr2Ad6nA95f97hCkE1nFy4SRXr z0GflM+M4ogf5I3ngmnhDNzSTUeU/2HyGNiodkLUPZMi2WNfRXNXSNbfi9bYMQRM 3byJKUV5xGeglm3PSxOOlZvtIZz+VFGYMayXNvrW0tYNKGIJwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbCXD3cRAAHig0ikcjju7VRSNIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTUzNDk0MzgtNGM5Yy0z MGU5LWI5NGItNmRkZTRiNDFiNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuZxK/kuOkpuh88tAItBMjx8T+9C3L5xFnF4mYUJMfjuFikWeGoXzj8 Dl6qDjPTEHkEYzXn7d1Z5MIa13V2Lkm3Y827DOyuPoKBrRv+yWdzpbJ4aK8UKqPI cVeZZ3SKYVD/ZJppwsf0AjL1I8wbeB3IHkqwgC0BTlfqV4CzGkINYk/tPxLN500m wd9WjM6ZGGpUfRpQtDXm7soxqD2JzDWFdVNyPklTtypdIfWsnWbLIS6pxXhUaSLY 5o3Op2vN62vETX5PjJ4+Ll2mRSCsgPHbTSDAah/tVeO+xsPI1zVQSg2pc/RWJWBr 47CQru1eP+PgKk/QnS4cPTJpS/WpLw4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:37 2025 by rpki-client