$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78e9a42a-752a-37e6-b8d6-39b147c015ef.roa File: 78e9a42a-752a-37e6-b8d6-39b147c015ef.roa (raw, json) Hash identifier: kbz2lG9BsHSKDRPza192e9ErLHfCRETWt3Wod4KRUEo= Subject key identifier: 69:FB:FF:25:95:9F:53:78:94:E6:51:DF:CB:8F:C9:9A:89:F7:08:93 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682616859FCBF2F06BC39040 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78e9a42a-752a-37e6-b8d6-39b147c015ef.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397219 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:16:85:9f:cb:f2:f0:6b:c3:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=3ee83a00-7599-411e-b066-57ea19435684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f3:52:cb:f4:18:86:09:85:03:2d:0b:41:fa: d5:ec:33:bd:83:77:b0:82:fe:8f:82:87:02:f3:68: fc:74:91:25:de:ae:ec:e7:41:77:80:d5:02:c9:3d: 4a:dd:8b:9e:96:7d:fa:06:6b:6a:c4:fc:e5:74:74: 4d:f0:60:44:19:7a:ce:ca:ce:84:9f:5a:5f:20:b1: 00:b6:97:05:b9:7d:53:76:63:fa:c9:ff:bf:60:5b: bf:bf:12:75:12:cc:44:0e:30:94:65:c8:cd:82:4c: 71:f4:4c:9e:29:de:d4:5a:74:f8:c9:b7:0a:1c:4e: 68:f9:0c:45:94:b0:6e:07:ca:75:30:52:10:21:28: 22:b0:cd:ae:35:85:c4:33:3d:97:5e:69:ac:8a:3a: 23:2a:75:87:9f:d4:54:28:f3:26:26:85:c0:f4:9e: 05:ff:9f:b8:be:60:80:ae:7e:77:60:90:8d:26:82: b5:a1:99:28:70:92:06:5d:11:b4:c7:8e:2d:3e:82: 3f:a6:31:fe:71:91:a0:6b:fa:50:b0:50:a1:b7:29: 41:6e:73:5f:b5:99:ac:47:ed:57:fd:9d:85:f8:c2: e8:7c:04:fa:ca:b2:61:66:9c:6b:dc:e5:35:1a:80: a2:62:b1:15:9b:76:2a:ff:1e:44:3f:dd:91:31:1e: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:FF:25:95:9F:53:78:94:E6:51:DF:CB:8F:C9:9A:89:F7:08:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/78e9a42a-752a-37e6-b8d6-39b147c015ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:43:d9:c1:23:ce:22:aa:ca:cb:e7:24:9b:a4:95:2d:33:db: d0:86:e4:98:4b:37:76:dd:d3:1b:72:fe:b7:86:8c:24:83:2a: d0:50:54:00:5e:d1:4d:95:24:28:d2:af:e8:83:2c:40:8d:24: 9a:63:e4:38:32:19:60:d5:4d:e8:fe:dd:57:74:1e:b4:28:dc: d6:5e:e3:04:57:f6:0c:c4:53:ea:e9:0c:0f:a9:1e:aa:b6:cc: b5:9f:7b:c2:99:db:a4:36:0e:e3:d3:ec:d2:ff:4f:e0:c0:34: 6a:99:64:9a:2a:1c:e0:7b:21:6b:0d:bf:3a:32:5a:f1:6b:68: a4:be:f9:a4:32:ba:0b:27:18:b9:43:14:f6:52:22:77:0f:30: 93:26:89:9b:e9:27:0d:2d:1f:21:2d:af:8f:d9:e9:02:c9:66: d1:7a:15:25:5d:01:5d:a8:fd:ac:fa:e8:0b:ab:be:c9:ac:19: 89:7c:9c:38:ab:f8:43:1e:54:81:b4:84:56:e7:27:da:a6:87: b0:cd:0d:06:a5:ac:e1:a4:25:17:f1:c9:25:f5:0d:ec:b4:23: b4:81:ed:0c:cb:38:82:ed:68:6b:72:0e:6d:f6:d5:b9:2a:43: 9a:55:b2:f1:c0:e7:18:17:e6:8b:d8:66:c2:2f:62:23:64:d6: 3c:42:e6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhaFn8vy8GvDkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk M2VlODNhMDAtNzU5OS00MTFlLWIwNjYtNTdlYTE5NDM1Njg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvNSy/QYhgmFAy0LQfrV7DO9g3ewgv6PgocC 82j8dJEl3q7s50F3gNUCyT1K3Yueln36BmtqxPzldHRN8GBEGXrOys6En1pfILEA tpcFuX1TdmP6yf+/YFu/vxJ1EsxEDjCUZcjNgkxx9EyeKd7UWnT4ybcKHE5o+QxF lLBuB8p1MFIQISgisM2uNYXEMz2XXmmsijojKnWHn9RUKPMmJoXA9J4F/5+4vmCA rn53YJCNJoK1oZkocJIGXRG0x44tPoI/pjH+cZGga/pQsFChtylBbnNftZmsR+1X /Z2F+MLofAT6yrJhZpxr3OU1GoCiYrEVm3Yq/x5EP92RMR4nrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn7/yWVn1N4lOZR38uPyZqJ9wiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzhlOWE0MmEtNzUyYS0z N2U2LWI4ZDYtMzliMTQ3YzAxNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApD2cEjziKqysvnJJuklS0z29CG5JhLN3bd0xty/reGjCSDKtBQVABe 0U2VJCjSr+iDLECNJJpj5DgyGWDVTej+3Vd0HrQo3NZe4wRX9gzEU+rpDA+pHqq2 zLWfe8KZ26Q2DuPT7NL/T+DANGqZZJoqHOB7IWsNvzoyWvFraKS++aQyugsnGLlD FPZSIncPMJMmiZvpJw0tHyEtr4/Z6QLJZtF6FSVdAV2o/az66AurvsmsGYl8nDir +EMeVIG0hFbnJ9qmh7DNDQalrOGkJRfxySX1Dey0I7SB7QzLOILtaGtyDm321bkq Q5pVsvHA5xgX5ovYZsIvYiNk1jxC5ik= -----END CERTIFICATE-----Generated at Wed Aug 6 09:38:00 2025 by rpki-client