$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1606d9a0-cd0a-373d-8a6e-e5d614a96cf3.roa File: 1606d9a0-cd0a-373d-8a6e-e5d614a96cf3.roa (raw, json) Hash identifier: hyyGTDhPqgNLlR5FWrn9jMxrKay4knO9eIX8oiq6980= Subject key identifier: 56:EB:86:C9:5E:0D:62:E0:12:1A:31:C8:A7:E9:E7:C7:8B:26:C1:32 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A96369CD5B878DE4541A4612C Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1606d9a0-cd0a-373d-8a6e-e5d614a96cf3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 12008 IP address blocks: 156.154.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:9c:d5:b8:78:de:45:41:a4:61:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=5dc4ea74-7292-4c05-bfa6-122041a2cdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:84:0f:c7:c9:56:7a:ba:55:84:29:a8:c3: 66:56:82:7b:0f:2d:e0:5d:83:46:58:b0:ae:02:84: f6:56:ec:4c:c5:92:91:53:c4:c2:58:f3:d4:de:a6: 16:b2:a9:62:75:65:c5:57:02:57:d6:0a:29:56:dd: b6:c7:e7:7a:21:ea:95:bd:b7:e6:ca:c6:22:04:fc: 65:82:70:2f:c0:37:b6:35:ac:b9:a5:60:bc:41:d1: 53:73:cd:bf:d2:49:ea:6e:38:60:40:b9:66:ba:c3: 97:4e:aa:fd:3c:24:ab:e1:b1:61:7c:ae:52:ea:6e: 5c:0a:dc:58:cb:ae:f7:9b:c6:63:aa:1d:0c:ba:c5: 18:d4:0d:65:3a:8e:74:85:a4:ef:b0:f5:00:c8:00: 65:b9:d6:c7:18:5e:70:5b:87:65:e3:d0:1b:b4:85: 87:34:2d:d1:96:62:db:e4:17:c0:66:30:9d:20:4a: 32:3b:2d:75:1a:8d:d5:e1:a3:9f:df:03:2b:93:fc: f2:b0:5d:1b:a4:5d:2e:86:28:33:0c:1a:8b:ad:f5: 3c:e0:5a:19:66:d1:12:bc:b4:84:59:e9:d9:c4:09: 30:89:f3:1d:75:41:51:21:86:bb:32:a3:fb:1c:69: 85:16:f5:72:f5:38:f5:be:a5:b0:bc:c2:a0:cc:f4: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EB:86:C9:5E:0D:62:E0:12:1A:31:C8:A7:E9:E7:C7:8B:26:C1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1606d9a0-cd0a-373d-8a6e-e5d614a96cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:67:55:16:23:30:9f:9f:d2:46:b3:0f:23:d7:70:08:c0:f7: d4:88:d7:70:20:8e:7d:79:10:18:ca:cd:a9:8a:53:55:cd:d9: 24:35:86:91:e4:6c:ad:22:39:2c:84:52:af:cc:6d:db:01:f7: 43:4f:7c:ce:47:b3:ac:21:d8:cd:7f:d5:97:9f:12:27:76:20: d5:f4:3c:88:8a:53:0b:fa:8e:d8:30:92:98:ce:a3:62:a8:49: b5:4c:39:7a:b7:9c:27:58:d1:dc:e1:bc:09:49:3a:16:d7:6e: 8a:49:12:27:54:20:07:87:32:28:c5:24:74:d8:16:ae:46:eb: ad:1b:69:ab:20:6f:7f:7b:c2:08:93:29:12:3a:07:35:6c:5a: c8:45:de:51:65:fa:a0:b8:c5:48:3a:02:0b:df:10:2f:c7:f0: 1d:19:a3:89:1e:27:39:3a:1c:1a:bf:dd:44:99:64:33:91:a1: 62:5a:64:7a:c9:19:3d:e9:5f:eb:06:8a:21:e8:31:6f:14:3f: 40:7c:a2:26:26:45:b9:fd:f1:50:fe:12:07:4e:7e:b4:e7:2f: cb:42:cd:8e:ba:72:39:66:3f:e2:a4:f2:3d:5c:ee:0b:be:13: c6:a3:a8:af:6e:d6:6c:0a:09:e5:57:f6:7c:f5:63:9d:54:4e: 58:3d:d5:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpzVuHjeRUGkYSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NWRjNGVhNzQtNzI5Mi00YzA1LWJmYTYtMTIyMDQxYTJjZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsASED8fJVnq6VYQpqMNmVoJ7Dy3gXYNGWLCu AoT2VuxMxZKRU8TCWPPU3qYWsqlidWXFVwJX1gopVt22x+d6IeqVvbfmysYiBPxl gnAvwDe2Nay5pWC8QdFTc82/0knqbjhgQLlmusOXTqr9PCSr4bFhfK5S6m5cCtxY y673m8Zjqh0MusUY1A1lOo50haTvsPUAyABludbHGF5wW4dl49AbtIWHNC3RlmLb 5BfAZjCdIEoyOy11Go3V4aOf3wMrk/zysF0bpF0uhigzDBqLrfU84FoZZtESvLSE WenZxAkwifMddUFRIYa7MqP7HGmFFvVy9Tj1vqWwvMKgzPQQywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbrhsleDWLgEhoxyKfp58eLJsEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTYwNmQ5YTAtY2QwYS0z NzNkLThhNmUtZTVkNjE0YTk2Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJopMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJnVRYjMJ+f0kazDyPXcAjA99SI13Agjn15EBjKzamKU1XN2SQ1hpHk bK0iOSyEUq/MbdsB90NPfM5Hs6wh2M1/1ZefEid2INX0PIiKUwv6jtgwkpjOo2Ko SbVMOXq3nCdY0dzhvAlJOhbXbopJEidUIAeHMijFJHTYFq5G660baasgb397wgiT KRI6BzVsWshF3lFl+qC4xUg6AgvfEC/H8B0Zo4keJzk6HBq/3USZZDORoWJaZHrJ GT3pX+sGiiHoMW8UP0B8oiYmRbn98VD+EgdOfrTnL8tCzY66cjlmP+Kk8j1c7gu+ E8ajqK9u1mwKCeVX9nz1Y51UTlg91cw= -----END CERTIFICATE-----Generated at Wed Aug 6 04:06:22 2025 by rpki-client