$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bb05b23-5ff9-3006-baad-ded3a6e5c49d.roa File: 3bb05b23-5ff9-3006-baad-ded3a6e5c49d.roa (raw, json) Hash identifier: 9+wDPBoI3YcRiKYJPlce/eJk6hK6kYPmbMjXqJ1q7J0= Subject key identifier: 7E:0A:7D:22:F0:65:DB:72:43:69:23:CE:34:93:AF:7E:67:FE:AE:E0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0DC3B72462407FD6091C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bb05b23-5ff9-3006-baad-ded3a6e5c49d.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397236 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:dc:3b:72:46:24:07:fd:60:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=ec9c039f-d00d-4e71-a835-431631cc588d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:43:e5:e5:eb:7e:15:92:19:9f:c0:86:33: 3e:78:ad:e5:7d:c4:e9:dc:fc:2d:34:13:00:7a:84: 13:37:3d:14:d5:1f:c8:f1:11:3c:86:f8:67:b6:e1: 05:dc:43:bc:59:d6:c8:bc:04:4f:de:e1:db:d4:29: f0:2c:8b:86:5a:1d:f0:39:4d:13:62:80:93:23:2f: a9:4f:28:10:5b:57:be:f3:21:f1:02:84:50:a9:7f: 88:fb:f8:ce:98:f0:b3:dd:c3:4d:45:f9:a5:95:b3: 69:c6:54:35:6b:22:68:5b:e0:d0:ca:f3:eb:a8:be: 89:03:49:df:54:b4:11:5a:24:6e:46:ce:3a:44:c4: 6d:b0:bb:4d:35:fc:df:45:24:93:20:e0:08:64:90: 62:3e:46:36:0f:6e:69:0b:73:ef:49:a5:e7:51:83: 30:3d:1f:f9:e7:93:5e:13:5c:80:89:a6:5b:3f:f6: 74:59:2f:2a:0f:30:aa:29:bc:76:e2:13:43:bf:b0: 1a:c6:7a:cd:21:a4:4a:46:c7:fa:1e:2d:e0:42:2a: 46:c6:73:51:07:db:22:55:22:77:cb:30:1f:1d:50: fc:4c:e3:56:63:ff:ba:ba:86:b0:08:dc:e1:df:bb: 8f:b8:3f:b8:b1:ba:88:4d:1a:b5:4f:48:c7:29:06: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0A:7D:22:F0:65:DB:72:43:69:23:CE:34:93:AF:7E:67:FE:AE:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3bb05b23-5ff9-3006-baad-ded3a6e5c49d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:96:17:3f:3a:b9:c4:2a:05:5f:68:13:4e:50:00:33:66:08: d4:3a:72:16:f7:13:0c:32:8d:21:dc:fb:cb:1b:02:8a:8e:aa: 05:65:61:b0:0d:66:fe:15:7d:35:b3:5e:25:73:c3:3b:15:3d: 3a:e9:fd:a6:ec:cb:a5:f4:5a:cc:3f:bc:d9:a3:97:6f:2e:56: 24:50:4c:ef:63:32:f4:49:89:60:fc:f3:34:09:82:76:28:0b: e1:fe:93:93:2d:64:36:16:88:34:1c:50:44:45:88:55:14:dd: 1a:5b:ff:f6:30:7f:66:fa:49:d7:77:cc:9f:ee:87:94:36:5a: 73:a1:7d:b4:d4:99:1b:df:0f:f1:02:be:a4:85:a6:6f:e6:e4: cf:60:fd:2b:16:20:04:ef:a3:d0:0a:b6:9e:bc:f2:cd:27:2a: 1b:98:25:87:5e:c0:48:63:a8:3d:71:b4:6c:ee:de:81:76:7a: 91:03:95:ca:e7:5e:49:5f:d2:3b:2e:fe:2b:75:a7:09:9a:6f: f0:04:71:a1:88:00:36:cf:92:1f:5b:b3:b0:77:8a:cf:30:9e: 28:73:bc:39:2a:6b:43:26:a3:2b:69:a0:14:51:e2:65:57:b1: 01:c9:33:34:74:8c:5e:ea:9a:a5:fc:1f:6a:3a:e5:f9:97:7d: a7:bc:e4:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNw7ckYkB/1gkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZWM5YzAzOWYtZDAwZC00ZTcxLWE4MzUtNDMxNjMxY2M1ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRRD5eXrfhWSGZ/AhjM+eK3lfcTp3PwtNBMA eoQTNz0U1R/I8RE8hvhntuEF3EO8WdbIvARP3uHb1CnwLIuGWh3wOU0TYoCTIy+p TygQW1e+8yHxAoRQqX+I+/jOmPCz3cNNRfmllbNpxlQ1ayJoW+DQyvPrqL6JA0nf VLQRWiRuRs46RMRtsLtNNfzfRSSTIOAIZJBiPkY2D25pC3PvSaXnUYMwPR/555Ne E1yAiaZbP/Z0WS8qDzCqKbx24hNDv7AaxnrNIaRKRsf6Hi3gQipGxnNRB9siVSJ3 yzAfHVD8TONWY/+6uoawCNzh37uPuD+4sbqITRq1T0jHKQY+dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4KfSLwZdtyQ2kjzjSTr35n/q7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2JiMDViMjMtNWZmOS0z MDA2LWJhYWQtZGVkM2E2ZTVjNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+WFz86ucQqBV9oE05QADNmCNQ6chb3EwwyjSHc+8sbAoqOqgVlYbAN Zv4VfTWzXiVzwzsVPTrp/absy6X0Wsw/vNmjl28uViRQTO9jMvRJiWD88zQJgnYo C+H+k5MtZDYWiDQcUERFiFUU3Rpb//Ywf2b6Sdd3zJ/uh5Q2WnOhfbTUmRvfD/EC vqSFpm/m5M9g/SsWIATvo9AKtp688s0nKhuYJYdewEhjqD1xtGzu3oF2epEDlcrn Xklf0jsu/it1pwmab/AEcaGIADbPkh9bs7B3is8wnihzvDkqa0MmoytpoBRR4mVX sQHJMzR0jF7qmqX8H2o65fmXfae85Gk= -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:52 2025 by rpki-client