$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d534827b-a5b6-3c2e-ac50-7368a73e3c2b.roa File: d534827b-a5b6-3c2e-ac50-7368a73e3c2b.roa (raw, json) Hash identifier: eX9aye3Km3AarFDuAzvqu1IEJOCoJ4zqDOAY54ORtCc= Subject key identifier: BB:17:ED:02:0B:C8:C9:24:00:AF:21:FD:1C:75:44:DA:2E:06:FB:83 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C36F9B9BE6DFCD2E1F3F6F0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d534827b-a5b6-3c2e-ac50-7368a73e3c2b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397239 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:f9:b9:be:6d:fc:d2:e1:f3:f6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=90fab976-7f65-415d-8b28-414e40281dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ee:99:2b:f3:2b:91:53:97:9c:ac:94:98:34: 6b:6c:37:a0:ab:f3:a1:db:34:53:f0:9b:8b:5a:f6: d0:f8:47:7a:bb:7a:7e:37:94:3e:37:d0:86:e3:a2: 7a:6a:70:4a:a2:b3:48:b3:42:62:7d:50:89:74:1c: 02:d6:4e:c6:ba:1c:50:f0:03:35:14:86:1a:82:2c: fc:82:bc:a6:4f:59:e4:b4:d8:24:4b:f8:73:c3:53: 46:6f:c4:5a:1f:70:f7:7f:b7:5f:b7:6c:16:c4:f2: 8f:43:4a:08:ec:ab:43:d2:cc:cb:24:25:7b:0d:0f: c0:c0:0d:69:db:e0:d9:d2:46:6c:90:62:a9:7f:19: 0f:9c:9b:3e:a7:49:1a:c7:72:ea:11:a2:ab:23:84: 8a:56:3d:f1:21:65:0c:1f:ba:c3:a8:86:31:4b:cf: de:ad:4a:fd:85:f2:0c:79:0c:cc:7b:0b:6f:5c:fc: 82:02:25:31:4c:5e:90:95:a4:a9:02:b7:1c:6a:8f: bb:19:54:75:63:07:96:4d:00:98:4b:35:69:8d:a3: bb:20:9c:16:d8:13:e6:9e:e7:92:70:a7:49:f7:d2: 75:2b:fd:ed:08:d2:2a:0b:b7:b2:2f:56:67:a6:cf: fb:83:e4:76:2a:df:2f:7c:44:71:fc:43:12:a8:8e: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:17:ED:02:0B:C8:C9:24:00:AF:21:FD:1C:75:44:DA:2E:06:FB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d534827b-a5b6-3c2e-ac50-7368a73e3c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6d:fa:46:32:59:24:1c:00:09:3f:c3:b9:76:5e:9f:8e:36: 4e:ee:2a:28:85:a3:3b:12:1e:de:7c:c5:27:f4:e0:f9:10:cc: f6:e0:da:5f:95:03:94:4f:86:b5:c0:40:ed:ba:32:3e:ad:b9: ad:47:4f:6f:d0:c6:18:d1:7a:ac:02:e4:cd:8a:40:17:a9:a4: 7d:85:68:55:87:1f:60:67:61:2a:c7:6e:56:7b:2b:2d:36:d6: 98:fa:77:78:2a:2c:83:fa:f1:ec:19:d5:dc:55:31:6c:ef:81: 50:24:fd:40:32:e8:f4:2c:25:41:52:24:56:0c:d6:ee:fc:a5: 64:d9:d6:fc:35:91:72:d6:7d:ce:a1:8d:56:3d:95:1f:f0:c5: 8a:c9:dc:d7:05:ff:40:10:dd:1a:34:08:8b:99:d3:e9:eb:12: 98:a5:62:e2:e9:25:a4:dd:52:ed:1c:2e:c6:0b:c9:ed:03:2c: f8:82:78:04:ff:2c:ef:a0:74:ab:11:77:ad:56:18:93:89:34: e4:eb:c1:96:3b:8d:8a:f7:62:e1:b4:b1:ff:b7:c6:11:5c:02: 43:d2:78:52:a0:3e:4f:d8:a9:0c:86:8d:82:c1:f0:2c:70:50: b1:28:fc:8b:39:03:74:93:d7:22:71:b8:eb:88:4b:83:89:f7: 2e:a5:b9:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNvm5vm380uHz9vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk OTBmYWI5NzYtN2Y2NS00MTVkLThiMjgtNDE0ZTQwMjgxZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+6ZK/MrkVOXnKyUmDRrbDegq/Oh2zRT8JuL WvbQ+Ed6u3p+N5Q+N9CG46J6anBKorNIs0JifVCJdBwC1k7GuhxQ8AM1FIYagiz8 grymT1nktNgkS/hzw1NGb8RaH3D3f7dft2wWxPKPQ0oI7KtD0szLJCV7DQ/AwA1p 2+DZ0kZskGKpfxkPnJs+p0kax3LqEaKrI4SKVj3xIWUMH7rDqIYxS8/erUr9hfIM eQzMewtvXPyCAiUxTF6QlaSpArccao+7GVR1YweWTQCYSzVpjaO7IJwW2BPmnueS cKdJ99J1K/3tCNIqC7eyL1Znps/7g+R2Kt8vfERx/EMSqI6USwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsX7QILyMkkAK8h/Rx1RNouBvuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDUzNDgyN2ItYTViNi0z YzJlLWFjNTAtNzM2OGE3M2UzYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJt+kYyWSQcAAk/w7l2Xp+ONk7uKiiFozsSHt58xSf04PkQzPbg2l+V A5RPhrXAQO26Mj6tua1HT2/QxhjReqwC5M2KQBeppH2FaFWHH2BnYSrHblZ7Ky02 1pj6d3gqLIP68ewZ1dxVMWzvgVAk/UAy6PQsJUFSJFYM1u78pWTZ1vw1kXLWfc6h jVY9lR/wxYrJ3NcF/0AQ3Ro0CIuZ0+nrEpilYuLpJaTdUu0cLsYLye0DLPiCeAT/ LO+gdKsRd61WGJOJNOTrwZY7jYr3YuG0sf+3xhFcAkPSeFKgPk/YqQyGjYLB8Cxw ULEo/Is5A3ST1yJxuOuIS4OJ9y6lubc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:53:50 2025 by rpki-client