$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa File: 76d7860a-5279-320c-9121-e1fa49a3a45e.roa (raw, json) Hash identifier: pmzg7Yn1RvYquLj+c3rvox2fTzFOzq8xu7obfK9GIpo= Subject key identifier: 52:FE:A6:E7:C4:5F:CF:CC:65:6D:90:44:07:19:F2:91:05:03:C0:A0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262CCA5750CB2919B2A6C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397217 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:2c:ca:57:50:cb:29:19:b2:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=ca6a754f-b0f9-4c9a-8fad-b8674f2367a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a5:4a:6f:a8:ea:aa:88:f7:aa:87:3a:32:5f: aa:0f:70:16:b7:78:ef:d8:dd:47:67:f9:16:19:e2: 01:7a:62:07:4e:49:8a:09:ac:94:d5:90:68:ab:50: b7:e0:d4:06:4b:17:9f:db:34:dc:62:5c:8c:b2:e2: be:66:9b:1e:0e:a4:d2:e8:31:11:20:d7:57:66:f4: 67:8b:eb:89:5f:bb:c9:71:60:b2:6b:37:6e:ff:fe: 6c:9a:c3:57:8c:58:dd:fc:b8:2f:84:d1:d1:ee:bc: fc:63:14:20:1d:24:79:6f:69:c9:23:86:f2:60:25: 98:32:64:dd:f6:cc:7e:f0:ff:e0:ef:6b:25:08:ae: 6a:48:0a:27:60:0f:82:a2:f7:3c:f8:3f:fe:51:4e: 16:a7:57:0f:58:93:e6:fc:99:c1:0a:b4:1c:06:fb: 24:bb:99:fb:68:60:2c:e9:3e:23:50:51:d1:f6:29: 0b:74:ce:56:01:f3:c1:c0:09:ec:36:e9:69:db:04: e4:fa:7c:af:dc:c8:b6:1b:04:28:c9:4a:64:32:31: c8:29:bb:60:da:2f:18:ea:f0:cf:76:1f:9c:cf:fb: 33:11:ef:13:31:b0:24:f6:c4:e1:89:bc:e9:66:cb: dd:6e:ef:a2:94:70:54:86:fe:3f:05:20:26:eb:75: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:A6:E7:C4:5F:CF:CC:65:6D:90:44:07:19:F2:91:05:03:C0:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/76d7860a-5279-320c-9121-e1fa49a3a45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:54:f9:9d:36:af:45:9f:85:c0:37:d8:e2:06:d2:9c:20:25: 8b:14:91:b2:c5:25:95:23:78:70:1e:83:ca:2a:02:b0:fe:1d: 75:07:0c:c9:2c:5a:b2:8c:36:8f:07:e3:0b:92:2c:09:fc:6d: 55:67:39:05:70:49:12:43:02:6b:28:a6:75:09:89:88:00:29: b5:18:41:88:92:39:74:90:15:b7:da:cd:24:48:23:b6:14:a0: 96:59:a9:08:11:d2:f0:6c:42:47:a5:8b:c5:5f:40:f9:f9:0b: d5:07:e8:74:7f:e8:c7:f9:05:7a:80:cb:26:7c:37:cc:41:5e: 74:95:4e:9c:1a:ca:08:95:5f:04:48:86:78:4d:23:b2:c4:5d: fd:9e:e5:98:52:77:3d:1a:05:97:3a:cf:75:4a:2e:1d:92:e6: 7d:e1:50:02:64:28:36:98:2a:cd:a6:dd:75:3b:ca:55:17:4b: 87:52:4c:b7:8b:97:a0:7e:ab:ab:01:af:04:60:43:4a:0e:99: 71:fb:93:aa:59:68:95:89:2b:fd:e4:79:41:f7:75:fa:af:8f: a7:38:90:c4:45:e6:86:5b:71:88:18:4d:c2:22:1f:37:a4:31: 0c:73:fe:00:2d:c8:09:e6:25:01:d0:32:99:10:9e:c7:ae:f5: f8:e1:ac:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJizKV1DLKRmypsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk Y2E2YTc1NGYtYjBmOS00YzlhLThmYWQtYjg2NzRmMjM2N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKVKb6jqqoj3qoc6Ml+qD3AWt3jv2N1HZ/kW GeIBemIHTkmKCayU1ZBoq1C34NQGSxef2zTcYlyMsuK+ZpseDqTS6DERINdXZvRn i+uJX7vJcWCyazdu//5smsNXjFjd/LgvhNHR7rz8YxQgHSR5b2nJI4byYCWYMmTd 9sx+8P/g72slCK5qSAonYA+Covc8+D/+UU4Wp1cPWJPm/JnBCrQcBvsku5n7aGAs 6T4jUFHR9ikLdM5WAfPBwAnsNulp2wTk+nyv3Mi2GwQoyUpkMjHIKbtg2i8Y6vDP dh+cz/szEe8TMbAk9sThibzpZsvdbu+ilHBUhv4/BSAm63X4mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL+pufEX8/MZW2QRAcZ8pEFA8CgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzZkNzg2MGEtNTI3OS0z MjBjLTkxMjEtZTFmYTQ5YTNhNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJU+Z02r0WfhcA32OIG0pwgJYsUkbLFJZUjeHAeg8oqArD+HXUHDMks WrKMNo8H4wuSLAn8bVVnOQVwSRJDAmsopnUJiYgAKbUYQYiSOXSQFbfazSRII7YU oJZZqQgR0vBsQkeli8VfQPn5C9UH6HR/6Mf5BXqAyyZ8N8xBXnSVTpwaygiVXwRI hnhNI7LEXf2e5ZhSdz0aBZc6z3VKLh2S5n3hUAJkKDaYKs2m3XU7ylUXS4dSTLeL l6B+q6sBrwRgQ0oOmXH7k6pZaJWJK/3keUH3dfqvj6c4kMRF5oZbcYgYTcIiHzek MQxz/gAtyAnmJQHQMpkQnseu9fjhrIk= -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:34 2025 by rpki-client