$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bab456b-b5c9-38cd-afda-c29ceb66f558.roa File: 3bab456b-b5c9-38cd-afda-c29ceb66f558.roa (raw, json) Hash identifier: 8E/NWfuC+2OVMaQjm4h/ZSK0pYZWK4AWlJlf6+LZWF8= Subject key identifier: DB:2A:9E:98:79:EB:C4:7A:84:68:EE:E1:5A:CD:40:F9:AA:E4:CD:4F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A6826327029E42049E8933580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bab456b-b5c9-38cd-afda-c29ceb66f558.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397221 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:32:70:29:e4:20:49:e8:93:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=21f8e4dc-bf4d-4403-a434-aafb4aaa967b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bf:7a:65:6b:56:31:f5:16:cd:7b:f3:1a:1b: 22:35:c5:61:db:2a:0a:23:54:cd:2b:f4:02:e4:71: 37:50:53:b9:0d:fc:cd:75:fc:64:ec:74:27:83:d7: d9:da:a3:d4:51:67:94:98:c0:d9:34:c8:15:cd:2a: 6e:31:46:61:89:3b:a6:ce:21:c3:0c:14:ec:4e:dd: 93:4e:97:6a:b4:f2:e5:7c:3a:d5:5e:c5:2e:16:64: 25:68:53:79:62:a2:8e:1f:c5:2f:22:39:55:28:fc: ad:91:ff:b9:92:a0:19:38:20:e4:eb:82:ee:bb:54: 23:6d:d3:0d:06:9e:f5:75:11:26:4b:16:a8:50:21: 04:ef:02:92:8e:dc:d0:70:e6:8c:ef:c2:7b:4b:18: 36:55:db:de:fc:33:9f:e8:3d:17:0e:9f:0c:3d:fc: 25:1b:89:ee:d8:ee:bd:2f:ce:45:69:22:4c:c5:3a: 82:43:35:9d:79:68:03:31:4b:60:1b:83:69:25:5a: 00:bf:78:87:40:a3:22:7d:91:d3:34:45:84:a6:2c: df:08:8c:e8:f2:7b:f0:3f:29:4c:99:a9:f9:96:90: 6c:11:e0:60:2e:4c:65:1b:72:41:ed:1e:9e:dd:f2: 25:3b:95:b5:cb:e3:1c:ae:b2:c0:bd:81:90:6f:57: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2A:9E:98:79:EB:C4:7A:84:68:EE:E1:5A:CD:40:F9:AA:E4:CD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bab456b-b5c9-38cd-afda-c29ceb66f558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3f:9b:86:f7:04:8c:b5:eb:e7:22:a3:f6:52:84:26:ac:fe: b1:fe:b8:d0:ec:b1:45:6c:1f:77:8f:17:4e:a8:c3:05:ef:4e: dc:93:e6:58:b3:bf:d1:a7:a6:e7:99:e2:ba:a4:e2:36:ee:42: 48:cb:b1:84:f3:87:63:7b:84:87:53:08:b0:1d:3b:5f:1b:a6: b5:94:79:e8:82:98:6b:31:f6:b3:2b:91:ef:6f:e2:1d:a0:ea: ee:6d:16:f0:08:dc:98:81:27:41:39:5c:72:c5:ac:72:cf:4b: 0e:cf:c0:5d:01:0c:4e:44:e0:80:e5:95:b2:56:a2:0e:36:7c: 60:6d:1b:20:d5:27:4d:e6:d2:64:f0:e8:82:8a:2f:7d:30:84: 58:d2:e3:8c:ea:38:e4:a0:18:9f:ef:26:13:b9:30:26:61:a6: bc:d6:79:5e:97:5a:d4:9b:ee:be:28:9d:ae:59:cb:cc:01:8b: d6:1f:ca:1d:e8:ad:4c:e7:18:98:52:19:75:0c:4c:e9:c7:0d: 56:ca:59:72:bd:19:94:cc:24:5b:61:40:f4:28:4e:9f:52:43: 24:8d:90:e0:4d:32:8d:b5:86:74:4b:8e:9c:47:24:b3:d0:bc: db:82:a5:c5:7a:68:19:f9:af:98:9b:e5:48:6a:80:60:88:ff: 93:ac:66:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjJwKeQgSeiTNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MjFmOGU0ZGMtYmY0ZC00NDAzLWE0MzQtYWFmYjRhYWE5NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir96ZWtWMfUWzXvzGhsiNcVh2yoKI1TNK/QC 5HE3UFO5DfzNdfxk7HQng9fZ2qPUUWeUmMDZNMgVzSpuMUZhiTumziHDDBTsTt2T TpdqtPLlfDrVXsUuFmQlaFN5YqKOH8UvIjlVKPytkf+5kqAZOCDk64Luu1QjbdMN Bp71dREmSxaoUCEE7wKSjtzQcOaM78J7Sxg2Vdve/DOf6D0XDp8MPfwlG4nu2O69 L85FaSJMxTqCQzWdeWgDMUtgG4NpJVoAv3iHQKMifZHTNEWEpizfCIzo8nvwPylM man5lpBsEeBgLkxlG3JB7R6e3fIlO5W1y+McrrLAvYGQb1fO1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsqnph568R6hGju4VrNQPmq5M1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JhYjQ1NmItYjVjOS0z OGNkLWFmZGEtYzI5Y2ViNjZmNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU/m4b3BIy16+cio/ZShCas/rH+uNDssUVsH3ePF06owwXvTtyT5liz v9GnpueZ4rqk4jbuQkjLsYTzh2N7hIdTCLAdO18bprWUeeiCmGsx9rMrke9v4h2g 6u5tFvAI3JiBJ0E5XHLFrHLPSw7PwF0BDE5E4IDllbJWog42fGBtGyDVJ03m0mTw 6IKKL30whFjS44zqOOSgGJ/vJhO5MCZhprzWeV6XWtSb7r4ona5Zy8wBi9Yfyh3o rUznGJhSGXUMTOnHDVbKWXK9GZTMJFthQPQoTp9SQySNkOBNMo21hnRLjpxHJLPQ vNuCpcV6aBn5r5ib5UhqgGCI/5OsZjQ= -----END CERTIFICATE-----Generated at Wed Aug 6 00:46:08 2025 by rpki-client