$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb0350c6-a642-38b0-b19f-3072e3cd04f5.roa File: bb0350c6-a642-38b0-b19f-3072e3cd04f5.roa (raw, json) Hash identifier: 6JK7o50hXIwmOtdCd8pVQ5YoP3tHO9+ceq6unW26a2k= Subject key identifier: AB:4B:0C:D7:06:56:D9:E8:FD:66:16:26:91:54:F6:D3:CE:82:55:10 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B2FC1A9BA87B6652002E1A780 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb0350c6-a642-38b0-b19f-3072e3cd04f5.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397223 IP address blocks: 156.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:a9:ba:87:b6:65:20:02:e1:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=9ade15a4-bc8b-4861-9542-2bbb59d5fdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:c5:0a:33:8c:cc:a7:e8:2c:0d:21:71:be: 3f:33:ac:12:48:e3:0f:59:b7:c4:12:52:6a:e1:fb: 8b:c5:6f:99:52:d7:d5:f6:fd:5c:85:e9:5d:cd:f0: 9c:13:08:6f:c4:12:7d:8c:ae:a1:03:3c:ac:b6:79: 97:5d:6b:90:16:ec:e7:02:98:9a:ef:1c:b4:eb:d1: 45:c9:c9:77:3e:52:2e:0a:96:6d:f3:d8:3d:3b:e4: 59:03:a5:c9:55:4d:04:db:17:69:1e:ef:00:8c:b9: 74:c1:05:a3:75:ad:49:e5:f6:96:1b:2b:9c:09:24: d4:3d:27:55:6d:e3:f4:df:f4:9d:d5:a8:bf:b2:fd: f1:68:24:6c:bb:e4:b2:b3:c2:10:bc:47:83:41:9f: 94:93:c9:0a:8d:c0:eb:40:2c:f4:78:28:8e:6a:32: 2a:86:73:4d:26:76:6e:bb:4f:9e:85:e9:d9:4f:1b: 97:6d:e1:bd:d2:f4:e2:ea:ce:a1:0d:f1:1f:46:be: fb:33:5b:8c:ad:ab:a8:ca:53:44:a9:86:fe:67:95: d4:92:3e:27:8f:54:8d:3f:72:5d:f7:96:e3:94:ac: 7d:53:f3:9d:93:d7:1d:c1:39:96:ee:c7:1b:63:0b: 03:b3:d1:52:ed:ea:93:b7:5b:ab:01:72:ee:84:23: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:0C:D7:06:56:D9:E8:FD:66:16:26:91:54:F6:D3:CE:82:55:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bb0350c6-a642-38b0-b19f-3072e3cd04f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0a:10:31:15:10:30:c6:3c:71:5b:18:0f:4c:8d:92:dd:c4: b1:6b:8e:88:bb:c2:29:fb:22:3f:ae:81:59:dd:a8:47:d5:c8: 44:d3:ba:92:00:c3:bb:ff:13:f4:88:85:c3:9a:e4:f6:94:cf: 6c:b2:af:4d:54:5d:38:26:00:be:56:ce:23:69:4c:4a:88:4e: 72:e7:18:22:54:84:cc:7c:b4:88:a9:83:73:28:1b:d8:10:f6: 8b:8d:11:1d:9a:c2:b0:3c:46:6e:27:29:22:85:9b:41:ec:c9: 66:1a:85:d9:77:e3:32:99:c0:a6:46:a3:b1:13:6f:22:95:6e: be:a6:0f:01:92:46:23:fa:45:67:df:94:90:0c:60:51:c3:31: 4c:15:0c:32:5e:2b:23:d3:4b:dc:ce:4f:ba:d2:48:5d:54:b3: 6c:bb:ff:ba:fd:8a:23:53:43:46:d5:77:16:9b:b6:af:3c:fc: f7:79:c5:d8:e3:4f:b2:00:e0:da:9c:e8:91:d5:e3:1c:f6:38: 12:3f:02:7a:4a:9e:ed:63:f6:8c:2a:68:e8:6c:b9:9f:05:ec: b7:5b:41:ac:e5:d1:f8:4f:dd:d5:a5:23:10:ac:09:c5:f5:62: 02:04:7e:30:e5:d9:08:1d:d0:2d:41:9c:5d:b2:b2:03:91:bd: 8a:64:f5:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwam6h7ZlIALhp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk OWFkZTE1YTQtYmM4Yi00ODYxLTk1NDItMmJiYjU5ZDVmZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/FCjOMzKfoLA0hcb4/M6wSSOMPWbfEElJq 4fuLxW+ZUtfV9v1cheldzfCcEwhvxBJ9jK6hAzystnmXXWuQFuznApia7xy069FF ycl3PlIuCpZt89g9O+RZA6XJVU0E2xdpHu8AjLl0wQWjda1J5faWGyucCSTUPSdV beP03/Sd1ai/sv3xaCRsu+Sys8IQvEeDQZ+Uk8kKjcDrQCz0eCiOajIqhnNNJnZu u0+ehenZTxuXbeG90vTi6s6hDfEfRr77M1uMrauoylNEqYb+Z5XUkj4nj1SNP3Jd 95bjlKx9U/Odk9cdwTmW7scbYwsDs9FS7eqTt1urAXLuhCNFewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtLDNcGVtno/WYWJpFU9tPOglUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmIwMzUwYzYtYTY0Mi0z OGIwLWIxOWYtMzA3MmUzY2QwNGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUKEDEVEDDGPHFbGA9MjZLdxLFrjoi7win7Ij+ugVndqEfVyETTupIA w7v/E/SIhcOa5PaUz2yyr01UXTgmAL5WziNpTEqITnLnGCJUhMx8tIipg3MoG9gQ 9ouNER2awrA8Rm4nKSKFm0HsyWYahdl34zKZwKZGo7ETbyKVbr6mDwGSRiP6RWff lJAMYFHDMUwVDDJeKyPTS9zOT7rSSF1Us2y7/7r9iiNTQ0bVdxabtq88/Pd5xdjj T7IA4Nqc6JHV4xz2OBI/AnpKnu1j9owqaOhsuZ8F7LdbQazl0fhP3dWlIxCsCcX1 YgIEfjDl2Qgd0C1BnF2ysgORvYpk9Zk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:38 2025 by rpki-client