$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa File: 8529e9c6-8071-3257-b2b8-14bf4967071e.roa (raw, json) Hash identifier: Hh6Op2ZhEnQA17rwOCYi8TSCpzrKO5C5xgJDHBoaDcg= Subject key identifier: A2:92:7A:13:93:AD:1A:9E:3F:2A:DD:6A:A9:7C:8D:93:1B:B5:CC:11 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262EAB36BD45354F85DC00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397218 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:2e:ab:36:bd:45:35:4f:85:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=3b6f77c2-8064-4f7e-afe8-240f13c72874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:41:26:0f:73:49:18:81:87:00:2c:00:64:8f: d4:25:82:5d:3e:a4:a0:f2:ab:bd:75:9c:6e:55:3f: 3c:fd:15:ac:37:79:1e:72:87:13:ec:ee:0c:f0:7b: 7d:fa:57:14:a6:e0:b9:81:f8:9b:ea:19:ce:c8:21: 19:2b:00:f5:7d:71:31:f2:c7:28:5f:5a:8f:94:b6: 49:43:29:95:2f:3e:7b:cb:07:64:07:96:0b:82:f7: af:eb:18:cd:4b:ff:35:c0:79:53:fb:98:44:0f:6d: 77:00:5c:73:c4:8d:77:58:95:b8:93:f7:44:f1:18: 62:7b:1a:de:e8:02:3b:2c:f9:81:45:96:f7:b4:06: a6:fd:5e:83:82:1b:b7:e2:d4:d3:5e:aa:1f:a3:88: 9b:20:e1:92:44:37:e5:2f:1e:30:76:0e:bd:89:b9: 0f:c7:c6:ea:97:10:ce:4b:c2:b0:75:34:60:8f:1a: c7:a7:96:75:bf:ac:4f:1c:f7:72:32:78:88:46:65: 07:6c:5d:68:0d:23:c0:4f:88:f5:9e:5f:ec:8a:63: df:a5:69:5a:b1:c5:03:51:27:0f:7b:43:fb:77:c7: 70:6f:48:30:de:b4:e7:69:b9:67:26:70:7f:d1:68: a6:d6:27:66:9e:6e:59:64:b5:e0:1a:d7:41:b6:14: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:92:7A:13:93:AD:1A:9E:3F:2A:DD:6A:A9:7C:8D:93:1B:B5:CC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8529e9c6-8071-3257-b2b8-14bf4967071e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:11:70:dd:5d:cc:a7:68:e4:a2:d7:84:aa:9d:2e:2f:48:e1: ec:79:b5:c1:ac:08:91:99:64:84:c6:96:23:f1:71:de:4a:f3: 94:9f:2c:9c:52:9f:72:be:8c:39:2e:05:ac:a3:92:4c:3a:dc: cc:0e:de:e7:90:73:cd:ce:6a:89:d9:b3:ff:6d:38:d4:5b:13: db:ae:6c:c9:69:d0:d9:d7:dc:4b:0c:f6:83:44:d4:98:f8:7d: 21:4e:fa:33:96:95:65:d5:a5:13:e2:ea:eb:ee:b6:60:ef:58: b3:14:07:cb:76:32:05:75:d6:ab:25:68:57:4e:46:72:9a:0c: 8b:1e:90:cb:db:a5:63:fa:2e:77:3c:71:4f:90:3b:2b:c6:c6: e9:72:0e:07:25:a3:fe:dc:b0:67:30:e2:1c:6c:3c:b3:48:c3: ff:4c:b6:4a:11:c5:fe:db:54:02:11:2d:82:3a:e9:4a:05:bd: f6:15:3f:2a:6e:44:e5:d7:a5:b2:78:8a:85:21:f4:05:b4:8f: 23:18:c1:24:a8:cb:3f:ce:a9:7f:6f:a3:5a:9c:8a:d7:1c:78: ab:08:ea:63:9e:ba:4b:7d:da:e9:bc:b2:8d:ca:00:9c:45:4a: da:d2:e2:64:8a:73:24:1a:4e:d9:e7:b3:91:41:aa:f2:74:56: e6:49:6c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJi6rNr1FNU+F3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk M2I2Zjc3YzItODA2NC00ZjdlLWFmZTgtMjQwZjEzYzcyODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kEmD3NJGIGHACwAZI/UJYJdPqSg8qu9dZxu VT88/RWsN3kecocT7O4M8Ht9+lcUpuC5gfib6hnOyCEZKwD1fXEx8scoX1qPlLZJ QymVLz57ywdkB5YLgvev6xjNS/81wHlT+5hED213AFxzxI13WJW4k/dE8Rhiexre 6AI7LPmBRZb3tAam/V6Dghu34tTTXqofo4ibIOGSRDflLx4wdg69ibkPx8bqlxDO S8KwdTRgjxrHp5Z1v6xPHPdyMniIRmUHbF1oDSPAT4j1nl/simPfpWlascUDUScP e0P7d8dwb0gw3rTnablnJnB/0Wim1idmnm5ZZLXgGtdBthTXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKSehOTrRqePyrdaql8jZMbtcwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODUyOWU5YzYtODA3MS0z MjU3LWIyYjgtMTRiZjQ5NjcwNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8RcN1dzKdo5KLXhKqdLi9I4ex5tcGsCJGZZITGliPxcd5K85SfLJxS n3K+jDkuBayjkkw63MwO3ueQc83OaonZs/9tONRbE9uubMlp0NnX3EsM9oNE1Jj4 fSFO+jOWlWXVpRPi6uvutmDvWLMUB8t2MgV11qslaFdORnKaDIsekMvbpWP6Lnc8 cU+QOyvGxulyDgclo/7csGcw4hxsPLNIw/9MtkoRxf7bVAIRLYI66UoFvfYVPypu ROXXpbJ4ioUh9AW0jyMYwSSoyz/OqX9vo1qcitcceKsI6mOeukt92um8so3KAJxF StrS4mSKcyQaTtnns5FBqvJ0VuZJbLA= -----END CERTIFICATE-----Generated at Wed Aug 6 07:53:06 2025 by rpki-client