$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/839c3cd9-6209-3cf0-888e-e8af054b3558.roa File: 839c3cd9-6209-3cf0-888e-e8af054b3558.roa (raw, json) Hash identifier: ErkSO2jCj6SvJAMqyVyeXB4AHqa4aUrApYDz7HnCO1k= Subject key identifier: DE:AF:E0:54:6C:30:2C:77:D4:D6:9F:7E:1A:56:0D:31:BB:1D:5C:91 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682611AFFC1E0386F4AB1F20 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/839c3cd9-6209-3cf0-888e-e8af054b3558.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397231 IP address blocks: 156.154.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:11:af:fc:1e:03:86:f4:ab:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=219c84d9-727c-4e33-a26c-e0ed84055ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3f:c7:b3:5d:21:a9:e5:42:78:37:a0:1e:c8: 3c:3c:e1:d3:63:f2:15:37:23:ae:a8:e5:10:63:77: c3:d0:04:c3:ff:06:d6:b2:75:67:d6:b5:86:4c:3b: 36:b8:09:27:82:65:8a:47:f7:e2:e5:e1:1e:26:1e: 07:78:3c:be:bf:72:9e:5c:ce:2e:fd:a4:ff:83:cb: e1:f4:f0:f3:68:d8:19:3b:37:dc:93:ad:0e:bb:f4: 11:fb:d3:59:1d:c0:03:48:79:7c:16:36:4b:89:4e: 57:1e:fa:11:57:bf:4e:29:1f:ba:a8:28:32:d2:a7: 0b:92:9b:dd:9d:71:f4:bd:eb:e0:43:2c:e2:d6:71: 47:fd:8b:06:65:c6:56:78:d9:cb:ee:fc:9a:d6:ed: bd:2c:03:20:f0:8c:db:41:cd:cd:25:28:41:4d:b7: 1d:8a:f7:dd:5a:75:08:10:f8:d5:0f:1f:43:dd:a1: 2b:82:c0:59:80:e0:df:ff:2d:81:8f:4e:e4:1e:9f: 60:f2:a6:e7:5f:c5:7f:f7:f5:2c:02:1c:c7:f7:72: 8c:09:49:91:0b:7a:38:3b:cf:5d:33:f9:df:83:61: cf:10:2f:06:66:7a:ca:0d:91:a0:1e:95:8f:15:57: 7a:a8:b5:b8:b9:7e:1c:ee:13:68:e0:1e:7f:35:28: 46:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AF:E0:54:6C:30:2C:77:D4:D6:9F:7E:1A:56:0D:31:BB:1D:5C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/839c3cd9-6209-3cf0-888e-e8af054b3558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f4:30:79:ce:b1:0c:09:8a:26:bb:27:f7:bb:65:6f:aa:48: b9:53:79:c4:1c:17:6e:de:82:05:ce:9e:93:75:fc:a5:15:02: 4a:0e:95:95:64:6a:dc:68:05:12:50:3f:b1:f6:12:b0:54:4e: 04:1c:dd:6d:46:9f:19:85:8a:82:d3:41:39:0f:db:b1:c0:44: e3:08:2f:a1:a0:dc:a5:ba:d8:4f:bb:80:bd:50:cb:b0:72:94: 54:ce:4c:ad:31:60:4e:67:12:9a:9e:4e:93:cf:10:73:9e:80: 2a:d1:11:4a:46:0a:d5:3a:bd:4d:bf:e8:a7:f2:d2:c8:37:a3: 5d:0c:3c:76:f2:0d:62:4a:bc:ea:b6:d6:46:36:c8:e3:a5:49: c0:c9:1f:50:31:ae:c8:e5:e6:e2:2c:e0:34:95:4b:62:87:3b: 4a:ef:5e:35:7f:66:f3:27:fb:ff:0a:d2:9d:7b:16:85:e7:c5: 3a:a0:90:94:00:b9:70:71:01:48:bf:31:0e:ba:a3:a9:f6:11: 7a:0c:c3:df:7f:ba:ea:ba:d8:9f:2b:20:5e:b2:db:f4:cc:af: a7:e8:a0:7c:0f:32:48:4a:2f:5c:c4:98:60:3a:aa:fd:9e:75: e2:70:85:39:6e:82:71:2d:2a:0a:a7:b4:05:f5:d8:da:ab:d9: b2:d6:a9:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhGv/B4DhvSrHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MjE5Yzg0ZDktNzI3Yy00ZTMzLWEyNmMtZTBlZDg0MDU1YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz/Hs10hqeVCeDegHsg8POHTY/IVNyOuqOUQ Y3fD0ATD/wbWsnVn1rWGTDs2uAkngmWKR/fi5eEeJh4HeDy+v3KeXM4u/aT/g8vh 9PDzaNgZOzfck60Ou/QR+9NZHcADSHl8FjZLiU5XHvoRV79OKR+6qCgy0qcLkpvd nXH0vevgQyzi1nFH/YsGZcZWeNnL7vya1u29LAMg8IzbQc3NJShBTbcdivfdWnUI EPjVDx9D3aErgsBZgODf/y2Bj07kHp9g8qbnX8V/9/UsAhzH93KMCUmRC3o4O89d M/nfg2HPEC8GZnrKDZGgHpWPFVd6qLW4uX4c7hNo4B5/NShGQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6v4FRsMCx31NaffhpWDTG7HVyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODM5YzNjZDktNjIwOS0z Y2YwLTg4OGUtZThhZjA1NGIzNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC30MHnOsQwJiia7J/e7ZW+qSLlTecQcF27eggXOnpN1/KUVAkoOlZVk atxoBRJQP7H2ErBUTgQc3W1GnxmFioLTQTkP27HAROMIL6Gg3KW62E+7gL1Qy7By lFTOTK0xYE5nEpqeTpPPEHOegCrREUpGCtU6vU2/6Kfy0sg3o10MPHbyDWJKvOq2 1kY2yOOlScDJH1Axrsjl5uIs4DSVS2KHO0rvXjV/ZvMn+/8K0p17FoXnxTqgkJQA uXBxAUi/MQ66o6n2EXoMw99/uuq62J8rIF6y2/TMr6fooHwPMkhKL1zEmGA6qv2e deJwhTlugnEtKgqntAX12Nqr2bLWqTo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:21 2025 by rpki-client