$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e4e477c5-a582-3633-8e7e-3bda78ef9590.roa File: e4e477c5-a582-3633-8e7e-3bda78ef9590.roa (raw, json) Hash identifier: 5QAHkKOsiWBeTZamH8McMBGGKCbgrbtMD9gblBS6C1A= Subject key identifier: EC:10:4B:90:B9:3A:C1:19:15:25:2B:B3:DC:68:18:3D:8C:F7:6B:D0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B1C3709B2D71C9E5CAA466580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e4e477c5-a582-3633-8e7e-3bda78ef9590.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 397230 IP address blocks: 156.154.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:09:b2:d7:1c:9e:5c:aa:46:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=d1a14e38-2faa-4e63-95ae-414617d6e137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:ac:71:b1:57:8c:df:b1:e0:f8:9f:12:10: f5:5b:e6:63:d9:9a:dc:b9:1a:57:5e:da:fb:65:74: cb:87:2c:72:6b:d1:86:7a:80:78:12:96:b9:ef:10: c1:a3:1e:af:38:e6:1f:dd:22:d7:df:ee:1e:6b:41: 3f:a9:c5:da:8d:78:6b:0a:79:a8:f4:7d:ce:12:0b: ee:de:e8:c2:c6:0a:63:dd:39:57:2a:07:83:a3:b2: 68:39:05:f8:8c:1f:7f:25:36:49:cc:31:36:3d:d4: a0:1b:9e:22:c6:94:25:ef:ca:3f:62:e7:fc:43:23: 5f:48:38:4b:d2:a6:cc:0a:de:6f:73:94:91:6c:17: 73:28:0e:27:c4:10:0c:ce:dc:d9:ef:1a:03:a8:21: cc:e5:64:8c:af:56:2c:25:e7:92:3d:14:97:4e:5b: 0f:0c:4a:7e:c3:2d:09:4d:65:fe:03:5f:37:d0:7e: fc:22:2d:4d:c4:62:3d:e7:c3:9a:3f:ff:8c:df:e1: 0e:42:31:4f:9a:ae:18:96:81:0c:62:5b:f6:04:04: 6a:10:44:21:fa:aa:d9:59:cb:37:4e:9d:27:ae:33: 3b:fa:f5:fd:77:0d:01:9b:b9:31:f9:ad:e2:b3:d1: 91:b3:ca:70:34:cb:a6:60:70:a1:7f:88:8f:40:f0: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:10:4B:90:B9:3A:C1:19:15:25:2B:B3:DC:68:18:3D:8C:F7:6B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e4e477c5-a582-3633-8e7e-3bda78ef9590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:88:f1:ff:8e:9e:13:98:11:c8:5a:66:3d:67:80:02:d5:52: 06:2a:45:61:81:17:d2:00:e5:3d:c4:42:d1:3b:d4:c8:1f:5d: fd:8d:75:e3:82:bf:bd:19:32:68:8c:94:d8:15:d7:51:10:8b: 28:e2:b8:47:e0:63:6e:5d:94:86:3a:10:41:ef:20:2e:98:69: 79:86:c7:a2:04:42:b8:49:74:54:ea:86:24:c4:ce:57:7f:02: 07:fe:3f:24:50:55:a3:54:eb:d3:16:cb:44:51:3d:b1:62:6b: ee:67:c8:55:b5:9f:94:47:59:2c:1a:26:85:71:c0:6b:07:c6: 9a:30:2f:9a:32:04:9d:f0:7e:5c:5b:77:22:bc:03:4f:4e:d5: 9e:a5:1d:b2:c9:2d:68:44:19:34:99:dc:74:3a:5f:1a:9a:2a: f4:b1:74:a1:82:cf:c3:6f:1e:78:77:9d:f5:25:6c:42:b2:ad: 8f:c1:dc:2b:54:23:23:dc:81:f7:0f:18:f4:1f:0a:a8:da:e9: f0:fa:e6:3c:4b:e3:14:9f:f1:df:b0:a9:93:c0:41:34:5d:85: 81:dd:ef:fa:b4:a3:60:a1:5e:23:15:7e:15:e3:1d:fa:12:e6: 3c:35:91:d7:e9:b8:b5:9c:ae:6d:a6:b4:49:42:8f:62:fa:25: 97:52:48:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNwmy1xyeXKpGZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDFhMTRlMzgtMmZhYS00ZTYzLTk1YWUtNDE0NjE3ZDZlMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7WscbFXjN+x4PifEhD1W+Zj2ZrcuRpXXtr7 ZXTLhyxya9GGeoB4Epa57xDBox6vOOYf3SLX3+4ea0E/qcXajXhrCnmo9H3OEgvu 3ujCxgpj3TlXKgeDo7JoOQX4jB9/JTZJzDE2PdSgG54ixpQl78o/Yuf8QyNfSDhL 0qbMCt5vc5SRbBdzKA4nxBAMztzZ7xoDqCHM5WSMr1YsJeeSPRSXTlsPDEp+wy0J TWX+A1830H78Ii1NxGI958OaP/+M3+EOQjFPmq4YloEMYlv2BARqEEQh+qrZWcs3 Tp0nrjM7+vX9dw0Bm7kx+a3is9GRs8pwNMumYHChf4iPQPDjFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwQS5C5OsEZFSUrs9xoGD2M92vQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTRlNDc3YzUtYTU4Mi0z NjMzLThlN2UtM2JkYTc4ZWY5NTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaI8f+OnhOYEchaZj1ngALVUgYqRWGBF9IA5T3EQtE71MgfXf2NdeOC v70ZMmiMlNgV11EQiyjiuEfgY25dlIY6EEHvIC6YaXmGx6IEQrhJdFTqhiTEzld/ Agf+PyRQVaNU69MWy0RRPbFia+5nyFW1n5RHWSwaJoVxwGsHxpowL5oyBJ3wflxb dyK8A09O1Z6lHbLJLWhEGTSZ3HQ6XxqaKvSxdKGCz8NvHnh3nfUlbEKyrY/B3CtU IyPcgfcPGPQfCqja6fD65jxL4xSf8d+wqZPAQTRdhYHd7/q0o2ChXiMVfhXjHfoS 5jw1kdfpuLWcrm2mtElCj2L6JZdSSLg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:16:44 2025 by rpki-client