$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/291397a8-1825-3a38-9ef2-fea76f04b541.roa File: 291397a8-1825-3a38-9ef2-fea76f04b541.roa (raw, json) Hash identifier: ReVr5SiTdFwY5zhMjEzLp280AN8eEHwHtTkomotafBc= Subject key identifier: A8:33:1D:65:29:57:5F:97:DC:43:70:25:6A:D0:E3:47:9B:62:1E:52 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262DB4924C425326E5AF80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/291397a8-1825-3a38-9ef2-fea76f04b541.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397233 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:2d:b4:92:4c:42:53:26:e5:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=76b48597-3551-494e-99fe-bf3ea0ef6d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:32:96:5a:ab:0f:68:cb:d8:26:13:c4:8e: bd:aa:05:43:71:b9:77:17:b8:80:61:a4:d6:41:6c: e3:31:ad:b4:87:67:11:e2:48:1e:b0:e4:0c:cc:39: be:9c:a3:de:40:29:7e:77:e4:15:2e:2e:a0:d1:53: e2:a4:22:b7:16:f5:c6:01:84:76:7e:b0:6f:b8:7c: 70:9f:b3:3b:6a:77:57:f7:ef:30:90:d2:4d:91:8e: 10:a5:95:f1:b5:7d:0d:29:8e:66:48:a3:d9:26:70: 6a:25:77:7e:5e:14:c0:62:31:eb:93:7b:d0:1f:d0: 38:41:50:eb:a4:f5:51:a9:58:0d:ce:8a:c1:12:43: 94:67:9a:25:94:fd:fb:39:8f:50:fe:3f:e4:d3:f0: 99:8d:5c:19:14:48:05:c8:6c:46:e6:13:4d:8c:10: 32:86:34:7f:d3:90:86:17:27:5e:1f:53:76:a1:87: 06:7b:65:8c:cb:05:90:05:2e:32:6c:fb:d9:3a:01: 19:5a:0e:4a:db:f5:79:17:60:1d:5b:6e:1c:59:aa: f9:b8:62:3d:71:c9:de:87:d6:b2:47:8c:e5:66:ad: bd:eb:a5:0d:10:ec:e9:f9:10:8d:c4:ef:fc:17:af: d0:de:87:d6:3b:d5:02:03:72:b2:d3:af:d5:be:aa: 43:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:33:1D:65:29:57:5F:97:DC:43:70:25:6A:D0:E3:47:9B:62:1E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/291397a8-1825-3a38-9ef2-fea76f04b541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ca:fa:16:0f:6a:87:74:0f:94:ad:18:71:de:e3:54:5a:4f: e4:c0:85:ee:40:d7:eb:65:b6:4c:99:d8:18:3f:af:52:35:31: 8f:4f:e2:b6:ab:d5:80:29:c4:31:01:43:9d:a1:b4:19:fc:01: e7:0d:3f:29:20:07:74:e3:7b:fa:af:63:8d:ca:5d:46:ad:a4: 2a:38:98:0f:b5:d2:12:7e:7b:60:71:d1:01:ab:23:86:97:62: 5e:f7:8b:49:9d:1e:61:30:8a:ef:f5:f3:e6:3d:34:a3:77:ba: bd:23:aa:50:25:b7:ef:f7:f1:1f:72:01:fc:ef:f2:32:55:8b: 97:8d:d3:93:9a:a6:ac:1a:4d:b2:a7:f0:cb:d6:44:44:db:ed: 84:62:dc:4b:f8:2b:6d:d7:40:6f:37:e7:6a:0c:7e:a9:a2:d5: 78:c3:d8:53:cc:f9:30:24:dd:b7:f0:b4:61:fc:44:5e:59:46: a2:b7:c5:b5:f3:cc:dc:cd:04:ba:25:54:4a:07:39:77:f2:e2: 63:20:6f:6d:24:70:b3:a1:a1:0d:9c:ab:5a:df:08:29:c4:63: 9c:3d:eb:52:5d:6d:20:5f:0c:cc:36:c6:48:8d:9d:65:4f:4e: c8:44:97:d2:d9:fc:33:35:a1:39:49:d0:a8:97:1f:4a:fa:9d: e5:2a:f1:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJi20kkxCUyblr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NzZiNDg1OTctMzU1MS00OTRlLTk5ZmUtYmYzZWEwZWY2ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzwyllqrD2jL2CYTxI69qgVDcbl3F7iAYaTW QWzjMa20h2cR4kgesOQMzDm+nKPeQCl+d+QVLi6g0VPipCK3FvXGAYR2frBvuHxw n7M7andX9+8wkNJNkY4QpZXxtX0NKY5mSKPZJnBqJXd+XhTAYjHrk3vQH9A4QVDr pPVRqVgNzorBEkOUZ5ollP37OY9Q/j/k0/CZjVwZFEgFyGxG5hNNjBAyhjR/05CG FydeH1N2oYcGe2WMywWQBS4ybPvZOgEZWg5K2/V5F2AdW24cWar5uGI9ccneh9ay R4zlZq2966UNEOzp+RCNxO/8F6/Q3ofWO9UCA3Ky06/VvqpDgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgzHWUpV1+X3ENwJWrQ40ebYh5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjkxMzk3YTgtMTgyNS0z YTM4LTllZjItZmVhNzZmMDRiNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3K+hYPaod0D5StGHHe41RaT+TAhe5A1+tltkyZ2Bg/r1I1MY9P4rar 1YApxDEBQ52htBn8AecNPykgB3Tje/qvY43KXUatpCo4mA+10hJ+e2Bx0QGrI4aX Yl73i0mdHmEwiu/18+Y9NKN3ur0jqlAlt+/38R9yAfzv8jJVi5eN05OapqwaTbKn 8MvWRETb7YRi3Ev4K23XQG8352oMfqmi1XjD2FPM+TAk3bfwtGH8RF5ZRqK3xbXz zNzNBLolVEoHOXfy4mMgb20kcLOhoQ2cq1rfCCnEY5w961JdbSBfDMw2xkiNnWVP TshEl9LZ/DM1oTlJ0KiXH0r6neUq8XA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:52 2025 by rpki-client