$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59aabdb0-093e-3d10-88a2-96b62737574f.roa File: 59aabdb0-093e-3d10-88a2-96b62737574f.roa (raw, json) Hash identifier: dO/gYb1m5Fgegv7gvIhUpnI2Lp/4ZwlqMlTJhK1PF0I= Subject key identifier: 8C:47:E7:73:7C:1A:A2:09:53:BE:B1:25:F4:63:E2:B2:86:FD:BC:84 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68263220FD7E3180117C08C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59aabdb0-093e-3d10-88a2-96b62737574f.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397216 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:32:20:fd:7e:31:80:11:7c:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=bf83d470-448c-4b41-be4f-c13e3f4034e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:39:33:2c:62:36:8d:d6:cf:76:db:08:ad: 83:11:96:8c:25:9e:61:94:75:26:a4:52:f5:95:ea: 0e:ee:4f:6c:47:8e:68:42:2f:75:92:b2:c1:e8:43: a0:9f:c3:39:8b:8d:0c:43:0a:00:cd:0b:b3:e8:51: 26:3b:31:86:9f:68:c5:13:0e:06:48:d8:a9:0d:99: a0:61:5d:7c:3b:1b:1a:5e:b1:e2:11:c2:a3:a9:40: 44:eb:84:be:c2:8d:60:5c:12:ab:da:8d:95:54:44: d6:7c:f7:85:1e:d8:14:dc:70:ae:8a:d1:26:0c:13: 2a:46:cc:22:55:eb:ad:ea:ff:a9:bc:8a:a9:ff:e4: 0e:0a:5c:d0:9d:8c:9b:b6:25:4f:91:f7:5f:c7:e0: 2e:73:83:f6:32:81:ad:38:9f:55:aa:b9:06:2f:59: 84:0b:ec:1d:3d:86:3d:07:57:e5:fc:ae:fe:0b:76: 2b:c1:69:fb:01:ed:6b:5a:67:3d:8b:2d:04:24:7c: a9:ed:61:a1:6e:9a:ab:a1:e3:1e:ad:80:ef:6c:d7: 76:1b:d6:d8:36:99:78:41:11:68:dd:66:dc:c2:09: c0:b7:a6:47:a3:97:4d:19:f0:e2:02:d1:23:5b:09: 63:32:cf:97:0f:d9:82:03:bf:8e:3e:64:4c:08:37: 24:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:47:E7:73:7C:1A:A2:09:53:BE:B1:25:F4:63:E2:B2:86:FD:BC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59aabdb0-093e-3d10-88a2-96b62737574f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:92:75:dc:11:d4:0b:33:9f:ad:52:62:3c:14:14:b7:60:5b: a9:10:c8:24:23:ac:d0:36:3d:cd:54:72:ce:38:40:78:e8:f8: 38:07:48:a3:99:64:2e:8d:04:2c:8f:5a:c1:d7:35:b6:aa:a6: 56:c7:89:4a:3c:c2:1e:47:2e:64:94:64:aa:39:de:25:6a:41: 40:ee:24:30:45:16:17:2a:e7:33:12:84:10:b3:3b:25:8c:8e: 27:1b:d4:8f:02:10:09:f6:29:2d:28:ed:23:7d:79:8f:f0:c7: 9d:da:d1:8c:4a:02:f1:80:f0:c9:f9:80:8c:0e:34:83:7e:77: 67:75:57:2c:79:0b:bf:e6:ca:73:64:f5:49:cd:50:c7:ae:78: 6d:8c:49:19:49:63:c6:1a:f8:45:5b:12:53:a2:6f:38:01:80: 26:8c:70:53:9c:53:3d:34:f8:48:0d:f2:f3:20:a0:52:39:c0: d5:ff:25:f6:4c:ab:d6:3b:6c:f2:58:6f:8c:83:e5:76:05:ef: 2e:d8:2b:9f:1d:b2:6a:0a:40:2a:21:71:cd:b6:08:57:68:13: 5c:bf:86:8d:e5:8e:28:72:54:cc:d4:66:5d:8e:23:c4:86:9a: 21:85:61:25:e8:57:f4:1c:37:bf:61:46:2e:07:2e:7c:58:22: 16:26:20:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjIg/X4xgBF8CMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YmY4M2Q0NzAtNDQ4Yy00YjQxLWJlNGYtYzEzZTNmNDAzNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwM5MyxiNo3Wz3bbCK2DEZaMJZ5hlHUmpFL1 leoO7k9sR45oQi91krLB6EOgn8M5i40MQwoAzQuz6FEmOzGGn2jFEw4GSNipDZmg YV18OxsaXrHiEcKjqUBE64S+wo1gXBKr2o2VVETWfPeFHtgU3HCuitEmDBMqRswi Veut6v+pvIqp/+QOClzQnYybtiVPkfdfx+Auc4P2MoGtOJ9VqrkGL1mEC+wdPYY9 B1fl/K7+C3YrwWn7Ae1rWmc9iy0EJHyp7WGhbpqroeMerYDvbNd2G9bYNpl4QRFo 3WbcwgnAt6ZHo5dNGfDiAtEjWwljMs+XD9mCA7+OPmRMCDcktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxH53N8GqIJU76xJfRj4rKG/byEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTlhYWJkYjAtMDkzZS0z ZDEwLTg4YTItOTZiNjI3Mzc1NzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAySddwR1Aszn61SYjwUFLdgW6kQyCQjrNA2Pc1Ucs44QHjo+DgHSKOZ ZC6NBCyPWsHXNbaqplbHiUo8wh5HLmSUZKo53iVqQUDuJDBFFhcq5zMShBCzOyWM jicb1I8CEAn2KS0o7SN9eY/wx53a0YxKAvGA8Mn5gIwONIN+d2d1Vyx5C7/mynNk 9UnNUMeueG2MSRlJY8Ya+EVbElOibzgBgCaMcFOcUz00+EgN8vMgoFI5wNX/JfZM q9Y7bPJYb4yD5XYF7y7YK58dsmoKQCohcc22CFdoE1y/ho3ljihyVMzUZl2OI8SG miGFYSXoV/QcN79hRi4HLnxYIhYmINA= -----END CERTIFICATE-----Generated at Mon Aug 4 19:01:47 2025 by rpki-client