$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa File: a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa (raw, json) Hash identifier: fiGvIzj4rPVmyXYFBR7hG54cn03nU3gc6JL/y5gp/D0= Subject key identifier: 3D:31:06:32:3B:B1:67:D4:B4:4D:20:8C:CC:BD:B5:3F:68:5D:95:85 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6C85277A8180263214D000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397236 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:85:27:7a:81:80:26:32:14:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=6711e71a-d297-4df2-bd59-4866db9d1c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:e3:94:85:c8:39:01:13:c2:a0:33:78:88: 69:de:18:a0:2d:ef:46:17:a2:db:4b:ad:f8:2c:11: da:4d:a9:e2:fd:b7:a1:84:bc:cc:ee:85:ea:ee:54: bd:5f:16:41:c9:16:3a:ba:b9:16:da:ae:35:58:d5: 39:ab:26:82:03:38:8c:d8:ed:f8:41:e9:84:d6:44: 59:b8:aa:a7:dc:4b:86:85:dd:c2:ae:2c:71:b2:f0: 87:a9:ec:71:cb:d4:21:0e:04:75:62:5c:89:29:b2: e2:44:98:e8:dc:30:89:a1:73:5b:75:7c:1a:22:49: ee:d7:e6:2f:9a:6a:f5:00:e6:2a:8a:40:ef:40:e4: 16:f3:e9:b9:f0:d6:70:10:80:8a:3b:e4:ed:86:71: 90:93:55:10:ff:b2:60:8f:92:42:60:d3:39:4f:86: e6:4f:bf:2c:1f:83:8d:2a:d9:6c:3b:28:df:9e:97: f0:a4:4a:4a:55:f9:d4:77:2f:cd:79:b6:c8:c1:28: 01:46:09:93:36:4b:86:aa:8f:a8:82:02:e1:25:c3: 6b:ac:bc:12:de:05:b9:99:68:c9:6f:88:c1:30:d0: 4e:6f:65:e5:ae:82:99:ae:52:cb:d6:b7:03:1a:ef: c9:27:5c:bc:24:70:64:ce:70:04:7d:16:45:66:e5: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:06:32:3B:B1:67:D4:B4:4D:20:8C:CC:BD:B5:3F:68:5D:95:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a48f78a0-9a9a-3aa2-a837-bac842e6e25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8f:42:54:27:47:5f:11:35:fa:76:bb:42:b2:fc:99:56:0b: 2c:2c:b7:27:c9:4a:69:e1:58:39:0b:4e:d8:1c:72:d8:1b:21: 1b:d3:1e:30:e1:af:5a:f6:3d:a6:d4:58:d4:0a:67:f6:fd:bf: d9:96:18:d7:48:a4:bf:f6:1f:74:43:1f:64:17:17:7f:db:6c: 0a:11:38:30:10:c0:2d:b8:fd:c8:2f:a7:0b:83:91:97:67:96: fa:c1:b4:d6:0a:34:f7:26:5a:91:32:74:50:ed:8c:eb:08:30: 06:d1:fc:66:ac:1b:8c:76:d1:c9:56:c0:c0:94:f8:2b:88:a6: 25:b1:91:b2:c1:9f:a1:94:d8:fe:fc:79:90:0b:52:21:d6:28: ee:70:65:d7:0b:b1:0b:7b:57:48:9d:dc:e2:d3:72:01:06:a3: 3d:6e:a9:28:10:54:bd:99:2e:f8:7c:95:a6:ea:08:04:71:e1: 71:2a:97:bb:16:1a:22:82:39:6b:90:47:ba:3a:08:32:41:eb: 36:14:28:fa:4c:6b:c4:37:e8:4c:68:64:0f:22:65:92:f1:0b: 2c:af:03:e4:af:3e:5c:af:88:16:a8:68:f9:e5:22:24:24:30: e0:b0:91:9c:a7:09:b0:e5:f9:2c:94:ad:9e:63:c5:d4:95:2d: 6d:a8:20:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbIUneoGAJjIU0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NjcxMWU3MWEtZDI5Ny00ZGYyLWJkNTktNDg2NmRiOWQxYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyODjlIXIOQETwqAzeIhp3higLe9GF6LbS634 LBHaTani/behhLzM7oXq7lS9XxZByRY6urkW2q41WNU5qyaCAziM2O34QemE1kRZ uKqn3EuGhd3CrixxsvCHqexxy9QhDgR1YlyJKbLiRJjo3DCJoXNbdXwaIknu1+Yv mmr1AOYqikDvQOQW8+m58NZwEICKO+TthnGQk1UQ/7Jgj5JCYNM5T4bmT78sH4ON KtlsOyjfnpfwpEpKVfnUdy/NebbIwSgBRgmTNkuGqo+oggLhJcNrrLwS3gW5mWjJ b4jBMNBOb2XlroKZrlLL1rcDGu/JJ1y8JHBkznAEfRZFZuUulQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0xBjI7sWfUtE0gjMy9tT9oXZWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTQ4Zjc4YTAtOWE5YS0z YWEyLWE4MzctYmFjODQyZTZlMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGPQlQnR18RNfp2u0Ky/JlWCywstyfJSmnhWDkLTtgcctgbIRvTHjDh r1r2PabUWNQKZ/b9v9mWGNdIpL/2H3RDH2QXF3/bbAoRODAQwC24/cgvpwuDkZdn lvrBtNYKNPcmWpEydFDtjOsIMAbR/GasG4x20clWwMCU+CuIpiWxkbLBn6GU2P78 eZALUiHWKO5wZdcLsQt7V0id3OLTcgEGoz1uqSgQVL2ZLvh8labqCARx4XEql7sW GiKCOWuQR7o6CDJB6zYUKPpMa8Q36ExoZA8iZZLxCyyvA+SvPlyviBaoaPnlIiQk MOCwkZynCbDl+SyUrZ5jxdSVLW2oIM8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:21:32 2025 by rpki-client