$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffe5f1b6-dff1-3c98-9b53-045c152e51f8.roa File: ffe5f1b6-dff1-3c98-9b53-045c152e51f8.roa (raw, json) Hash identifier: uo/Vy3Ndzjn/PlJ2ISdKGAQZhEJIwemtvqv060L1j9I= Subject key identifier: 30:43:E3:38:D8:25:8B:7F:A3:72:6D:6F:D4:60:40:6F:64:DB:2B:63 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B5C6CA4F9AA8E4E2995DE1900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffe5f1b6-dff1-3c98-9b53-045c152e51f8.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 397215 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:a4:f9:aa:8e:4e:29:95:de:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=233ecb6e-6cdd-4357-af31-539ee404f0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:58:fa:94:4b:5e:c6:1c:fb:a0:01:0e:a0: b9:17:20:eb:84:5f:22:05:42:e4:bb:ec:0d:98:30: 6b:ee:23:e1:ac:8f:5a:67:9e:91:e1:08:ba:ab:78: 5b:a5:d8:61:e8:4c:12:e7:3b:c8:9d:e0:c7:9c:3a: 34:3e:35:1d:12:c7:4d:53:76:71:95:4a:fb:c0:ff: d8:3a:fc:0f:a5:e4:88:0f:d5:01:3a:59:b2:60:a0: a8:4c:2a:74:86:a3:fa:52:70:64:49:7c:05:5c:bf: 10:54:18:ba:3c:79:35:d8:0a:d2:6b:50:3f:53:bf: 97:91:aa:59:53:3e:23:7c:b3:2d:11:be:63:28:b8: 93:d5:bd:97:bb:01:c5:4a:5e:2e:11:da:31:d2:2c: 6c:eb:d0:db:d3:f1:80:32:bd:8d:25:51:9a:34:21: b5:7a:dc:97:96:a0:0a:82:69:1d:97:b2:6e:6f:4a: 0d:58:ab:f2:8f:45:6b:e5:23:ff:50:f7:4a:9d:a0: 4b:7a:2c:af:a0:44:5c:26:7e:61:88:f4:b0:53:46: 5e:c3:7b:5d:b1:ab:7c:87:86:0e:d4:5f:a1:58:b7: e0:49:09:89:12:af:72:c8:1f:6a:42:d1:dc:8a:14: 85:9c:7e:24:de:2a:71:d3:e2:fe:fb:5b:7c:b0:27: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:43:E3:38:D8:25:8B:7F:A3:72:6D:6F:D4:60:40:6F:64:DB:2B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ffe5f1b6-dff1-3c98-9b53-045c152e51f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:33:f7:03:a3:19:ee:bf:a8:93:8c:59:6f:5e:92:38:64:d9: 7d:72:c8:e9:b9:3e:dc:f2:c0:b8:be:4a:05:88:74:65:bf:8c: b4:73:e8:f3:f6:47:ee:03:f5:a5:97:6d:f3:ef:9d:2c:6d:fe: 1f:21:65:5b:45:25:df:4a:63:b3:61:f1:69:32:0c:48:8f:4a: fb:65:ab:5f:62:67:35:df:d6:4e:2b:5b:09:8d:42:bd:11:e2: 8d:66:7b:9b:c6:6a:ad:c7:89:ca:d9:20:27:bf:18:53:9c:15: 06:3c:2d:81:bd:76:ae:ae:cd:32:43:0d:ba:be:8b:3c:3b:78: c1:b5:8f:26:f1:87:7f:b6:7f:ed:71:f3:d4:9e:f9:38:c0:95: 84:c3:1c:8b:fb:ee:4d:46:1e:c1:12:27:91:21:60:2a:83:b0: 2a:fd:e5:0d:a8:5f:2c:65:1b:da:9e:7b:3d:54:47:15:c6:8d: b3:4e:a1:07:14:b1:0a:b3:fe:62:21:3a:73:a9:8a:ef:e4:7f: 82:5f:3a:0c:ee:dd:1d:8c:2e:d4:a8:47:aa:bb:94:01:8f:f9: 96:d4:dc:3f:08:cc:b0:cc:b7:75:1d:e0:92:8c:4f:7b:1b:e4: 1a:b8:2d:e7:29:9c:f9:07:2e:4b:6c:de:40:c7:ba:8e:c6:3c: 64:09:21:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbKT5qo5OKZXeGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MjMzZWNiNmUtNmNkZC00MzU3LWFmMzEtNTM5ZWU0MDRmMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ytY+pRLXsYc+6ABDqC5FyDrhF8iBULku+wN mDBr7iPhrI9aZ56R4Qi6q3hbpdhh6EwS5zvIneDHnDo0PjUdEsdNU3ZxlUr7wP/Y OvwPpeSID9UBOlmyYKCoTCp0hqP6UnBkSXwFXL8QVBi6PHk12ArSa1A/U7+XkapZ Uz4jfLMtEb5jKLiT1b2XuwHFSl4uEdox0ixs69Db0/GAMr2NJVGaNCG1etyXlqAK gmkdl7Jub0oNWKvyj0Vr5SP/UPdKnaBLeiyvoERcJn5hiPSwU0Zew3tdsat8h4YO 1F+hWLfgSQmJEq9yyB9qQtHcihSFnH4k3ipx0+L++1t8sCeo1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBD4zjYJYt/o3Jtb9RgQG9k2ytjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmZlNWYxYjYtZGZmMS0z Yzk4LTliNTMtMDQ1YzE1MmU1MWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAz9wOjGe6/qJOMWW9ekjhk2X1yyOm5PtzywLi+SgWIdGW/jLRz6PP2 R+4D9aWXbfPvnSxt/h8hZVtFJd9KY7Nh8WkyDEiPSvtlq19iZzXf1k4rWwmNQr0R 4o1me5vGaq3HicrZICe/GFOcFQY8LYG9dq6uzTJDDbq+izw7eMG1jybxh3+2f+1x 89Se+TjAlYTDHIv77k1GHsESJ5EhYCqDsCr95Q2oXyxlG9qeez1URxXGjbNOoQcU sQqz/mIhOnOpiu/kf4JfOgzu3R2MLtSoR6q7lAGP+ZbU3D8IzLDMt3Ud4JKMT3sb 5Bq4LecpnPkHLkts3kDHuo7GPGQJIes= -----END CERTIFICATE-----Generated at Mon Oct 20 15:17:05 2025 by rpki-client