$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa File: 8409dc48-d96d-387f-b8c6-f8da865cae9e.roa (raw, json) Hash identifier: dQtrrQw4iGGAJTTj91kyuEq9kmXQ/JObQl5Bn88Ask8= Subject key identifier: 6F:92:DF:D7:8C:8A:24:D2:3B:8F:69:A8:FE:57:BF:22:0A:22:42:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0DCA7DA2943DAE68065A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397243 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:dc:a7:da:29:43:da:e6:80:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=4af74f39-a2cd-41d7-bf92-bbc10f530f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a7:4f:0b:9f:f0:71:3f:52:50:54:97:92:be: 39:93:de:13:3a:d5:77:b7:43:6f:96:2a:58:2f:31: 6a:5c:e5:17:ca:d7:c5:8f:ff:c5:93:d9:bd:80:2d: 3d:d2:bb:75:71:74:72:32:3c:68:de:de:83:5d:24: 1b:86:55:4c:d7:46:05:04:30:f7:81:95:4f:08:cb: 74:60:9e:4b:c9:56:fb:05:81:e1:14:f9:ef:11:c3: bc:f5:2d:e0:c2:df:15:8a:12:b9:e4:f5:88:d9:8b: aa:73:48:73:9d:d9:b4:62:d3:b4:7c:a9:c2:cb:3e: 44:a3:19:67:c5:31:ab:94:2f:7a:3c:dc:60:32:de: e2:84:da:94:ea:6c:77:2a:5b:f1:72:76:22:43:eb: 7c:ae:09:89:91:64:1f:cb:29:41:6a:4b:28:c3:80: 85:8f:65:4b:06:63:72:aa:63:a3:f0:bf:f6:91:22: f6:00:40:6a:c0:bb:ff:51:81:0d:de:ae:b7:95:46: 28:9a:e6:2b:7a:77:db:1a:87:cb:75:3a:9d:06:c5: ad:62:56:b6:f7:02:34:28:a9:a3:eb:31:b9:90:7e: f2:b1:3b:ab:a4:a2:88:7b:04:10:78:ad:0e:a0:8f: 05:39:e5:5e:b3:fa:2b:ea:06:1b:40:99:d1:db:71: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:92:DF:D7:8C:8A:24:D2:3B:8F:69:A8:FE:57:BF:22:0A:22:42:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8409dc48-d96d-387f-b8c6-f8da865cae9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1f:4e:74:3f:98:c5:f4:f9:66:13:cd:64:e1:8a:d4:c2:a6: 48:df:49:72:24:f2:22:4b:c3:eb:3b:23:0d:46:f4:ac:67:37: df:7b:23:18:9a:14:fb:9f:d3:cf:42:ce:60:b1:e8:f3:e6:56: 2b:0f:e3:27:89:3d:4e:7b:e9:74:9f:4c:68:57:5c:c3:6f:d6: 3f:84:13:ab:cf:0f:36:7f:d1:83:0c:eb:25:b3:54:ee:2b:c6: ed:b9:38:61:ff:d2:ce:d1:62:60:0a:20:05:aa:08:d2:f7:e3: d4:ff:1a:f2:8d:5d:ba:49:14:a7:75:41:ed:a7:a8:30:53:ae: 55:19:4d:f0:8e:42:4a:18:38:c7:b3:16:5a:e4:37:b0:e4:c4: 94:39:42:27:bd:d7:7b:e4:36:87:e9:23:bc:6c:6c:e4:c1:fc: c1:c8:50:11:69:38:df:88:42:3a:c7:e6:45:cc:68:7f:17:57: 69:26:d4:4e:15:c6:5f:5b:3a:16:45:ed:eb:16:13:8c:7c:1a: 53:e6:fa:ed:77:1d:38:d1:a6:19:18:b4:dc:c5:e3:58:d5:82: 95:11:5a:e8:b4:f1:58:3a:d2:ef:d3:a0:5e:a6:80:5d:68:97: 4f:30:50:4a:9e:de:38:40:5e:f3:e4:69:c2:26:41:5d:9a:fd: 0e:27:2b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNyn2ilD2uaAZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk NGFmNzRmMzktYTJjZC00MWQ3LWJmOTItYmJjMTBmNTMwZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKdPC5/wcT9SUFSXkr45k94TOtV3t0NvlipY LzFqXOUXytfFj//Fk9m9gC090rt1cXRyMjxo3t6DXSQbhlVM10YFBDD3gZVPCMt0 YJ5LyVb7BYHhFPnvEcO89S3gwt8VihK55PWI2Yuqc0hzndm0YtO0fKnCyz5Eoxln xTGrlC96PNxgMt7ihNqU6mx3KlvxcnYiQ+t8rgmJkWQfyylBaksow4CFj2VLBmNy qmOj8L/2kSL2AEBqwLv/UYEN3q63lUYomuYrenfbGofLdTqdBsWtYla29wI0KKmj 6zG5kH7ysTurpKKIewQQeK0OoI8FOeVes/or6gYbQJnR23FnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+S39eMiiTSO49pqP5XvyIKIkIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODQwOWRjNDgtZDk2ZC0z ODdmLWI4YzYtZjhkYTg2NWNhZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMfTnQ/mMX0+WYTzWThitTCpkjfSXIk8iJLw+s7Iw1G9KxnN997Ixia FPuf089CzmCx6PPmVisP4yeJPU576XSfTGhXXMNv1j+EE6vPDzZ/0YMM6yWzVO4r xu25OGH/0s7RYmAKIAWqCNL349T/GvKNXbpJFKd1Qe2nqDBTrlUZTfCOQkoYOMez FlrkN7DkxJQ5Qie913vkNofpI7xsbOTB/MHIUBFpON+IQjrH5kXMaH8XV2km1E4V xl9bOhZF7esWE4x8GlPm+u13HTjRphkYtNzF41jVgpURWui08Vg60u/ToF6mgF1o l08wUEqe3jhAXvPkacImQV2a/Q4nK6o= -----END CERTIFICATE-----Generated at Mon Aug 4 18:57:57 2025 by rpki-client