$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/283a9b41-bbde-3fb0-98c1-e66b86ec8681.roa File: 283a9b41-bbde-3fb0-98c1-e66b86ec8681.roa (raw, json) Hash identifier: KHL6++GTX9IrR1xEQWXHz0357X0iUiyF+53K9Xb3Fl4= Subject key identifier: CA:F1:4A:F3:F6:91:B8:73:C9:35:2F:FF:80:E0:D1:1F:EB:E4:64:E0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682613B6467DEEB743547380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/283a9b41-bbde-3fb0-98c1-e66b86ec8681.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397236 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:13:b6:46:7d:ee:b7:43:54:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=589dbcaa-c8b2-4a08-a4ae-0ab336bfa68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:81:a9:c2:4a:84:7d:4f:cf:d2:88:1b:97:9f: d2:70:34:f0:fc:3f:29:4c:a3:69:23:27:c1:c0:fc: 30:be:5b:33:42:e9:86:c3:d0:27:77:6f:2d:e7:46: 81:8e:08:7c:a0:1d:06:b2:44:48:83:e3:c3:3a:e5: d0:57:48:59:2e:d4:29:74:a5:07:fa:8f:e8:0b:b8: 86:c0:bd:7a:0a:37:a3:a1:c5:e3:88:4c:8d:a5:29: 10:f3:e3:a1:ad:2b:ea:dd:c8:01:86:04:43:23:f5: 78:1f:f8:4e:b8:8e:bf:ff:50:f9:3f:07:bc:37:f0: 4b:26:c2:ca:b1:3b:1c:72:62:c1:a4:d8:3c:b9:b2: 46:e8:55:d2:2d:be:48:e9:46:a4:c7:f7:3d:68:bf: f4:3d:7d:56:8a:0f:ba:9f:27:9e:64:ca:78:3c:c8: 16:9c:bc:82:a5:4a:a7:80:2a:86:07:07:70:88:5d: f3:55:55:77:0c:b6:3e:a1:b6:e6:4c:be:da:60:79: cf:72:6f:d8:40:85:b4:02:a1:1f:6d:08:07:06:2a: 62:77:32:47:b8:9f:56:28:7e:a1:dd:76:9f:9a:d2: 67:f8:12:d9:ba:8c:f9:f7:5f:a8:88:cb:fb:89:17: 4f:f4:69:1a:72:03:d5:5b:52:b9:72:4e:00:8f:04: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F1:4A:F3:F6:91:B8:73:C9:35:2F:FF:80:E0:D1:1F:EB:E4:64:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/283a9b41-bbde-3fb0-98c1-e66b86ec8681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3f:f3:06:d3:f7:0c:bf:a6:18:5b:3d:c1:dc:71:f9:e0:16: 59:30:bd:6a:cc:bb:92:c3:31:74:e4:10:74:24:a1:84:8d:16: e2:6d:54:b0:04:b9:eb:5f:29:97:07:39:eb:8e:5b:a0:49:16: b7:f2:4b:8f:6e:fd:8e:af:9c:cc:b1:f7:2f:fa:cd:b9:ad:36: 4b:57:d4:84:a5:ca:85:bc:8d:35:db:91:4a:c7:dc:89:51:34: 87:df:81:87:3a:1d:a0:f2:e0:67:fa:69:8a:64:5e:9b:e9:97: 7f:03:93:38:27:2e:d3:47:67:cd:19:19:ed:49:a1:b1:cd:ce: 36:49:12:01:1a:a5:87:54:e1:62:70:57:3d:7b:e4:77:d1:4a: c5:34:b4:a8:d9:d3:d1:ea:8b:b6:03:79:86:7e:3b:7b:64:6a: 78:59:db:09:27:e6:f5:69:01:b7:dc:01:e8:c3:21:64:57:1c: af:76:dc:fd:dd:c1:5f:7c:4e:52:1e:23:ae:d4:41:04:76:f5: 35:5b:24:f7:aa:b5:a3:e2:a5:25:75:fb:15:62:3f:f0:a1:86: 4d:0a:c6:b5:aa:8b:66:26:3c:b7:c4:da:ac:5d:a7:aa:e7:9a: d6:0f:08:59:97:51:0e:6b:a9:ab:66:23:d3:57:58:64:d5:26: 67:50:0a:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhO2Rn3ut0NUc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTg5ZGJjYWEtYzhiMi00YTA4LWE0YWUtMGFiMzM2YmZhNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYGpwkqEfU/P0ogbl5/ScDTw/D8pTKNpIyfB wPwwvlszQumGw9And28t50aBjgh8oB0GskRIg+PDOuXQV0hZLtQpdKUH+o/oC7iG wL16CjejocXjiEyNpSkQ8+OhrSvq3cgBhgRDI/V4H/hOuI6//1D5Pwe8N/BLJsLK sTsccmLBpNg8ubJG6FXSLb5I6Uakx/c9aL/0PX1Wig+6nyeeZMp4PMgWnLyCpUqn gCqGBwdwiF3zVVV3DLY+obbmTL7aYHnPcm/YQIW0AqEfbQgHBipidzJHuJ9WKH6h 3XafmtJn+BLZuoz591+oiMv7iRdP9GkacgPVW1K5ck4AjwQWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrxSvP2kbhzyTUv/4Dg0R/r5GTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjgzYTliNDEtYmJkZS0z ZmIwLTk4YzEtZTY2Yjg2ZWM4NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA/8wbT9wy/phhbPcHccfngFlkwvWrMu5LDMXTkEHQkoYSNFuJtVLAE uetfKZcHOeuOW6BJFrfyS49u/Y6vnMyx9y/6zbmtNktX1ISlyoW8jTXbkUrH3IlR NIffgYc6HaDy4Gf6aYpkXpvpl38DkzgnLtNHZ80ZGe1JobHNzjZJEgEapYdU4WJw Vz175HfRSsU0tKjZ09Hqi7YDeYZ+O3tkanhZ2wkn5vVpAbfcAejDIWRXHK923P3d wV98TlIeI67UQQR29TVbJPeqtaPipSV1+xViP/Chhk0KxrWqi2YmPLfE2qxdp6rn mtYPCFmXUQ5rqatmI9NXWGTVJmdQCho= -----END CERTIFICATE-----Generated at Wed Aug 6 05:18:16 2025 by rpki-client