$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85f39f23-5bb4-3406-88b1-ce4d6102b2f6.roa File: 85f39f23-5bb4-3406-88b1-ce4d6102b2f6.roa (raw, json) Hash identifier: AaZA0r9plEyiayaqUPnfnhBSZgdaErwLfAFguHRj29Q= Subject key identifier: 2B:B0:40:3A:1E:1A:7A:84:3C:30:AD:62:62:C6:97:82:D5:42:BF:D4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0CF2E7EE80B0004728E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85f39f23-5bb4-3406-88b1-ce4d6102b2f6.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397243 IP address blocks: 156.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:cf:2e:7e:e8:0b:00:04:72:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=aff92fb3-73a2-4956-8095-779d00c49279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:70:5c:9a:0f:55:c2:8f:9e:7a:ce:60:30:65: f4:b2:56:fd:3e:b8:ae:06:33:03:36:7d:02:f1:a7: 81:43:7c:ed:37:21:6c:ea:dc:7f:93:bf:3c:e3:cc: bc:de:57:37:93:c0:ae:ea:de:40:bc:99:50:89:2d: af:6e:e0:27:b5:9e:b8:be:00:f7:7c:81:76:8e:2e: ea:90:8b:0f:ec:e5:7d:4f:38:19:c6:06:02:53:b5: 23:77:74:af:05:94:6d:94:09:11:3a:18:a2:0a:fb: 23:fd:f4:26:92:ba:e1:f6:31:fe:af:6e:9a:bc:c4: de:17:a2:ac:66:88:b6:c3:28:2d:2f:2a:34:0b:0f: 80:e3:1c:6f:12:b7:fb:2a:92:eb:3c:e8:d7:ba:f0: 3b:aa:e2:f8:12:54:13:fa:60:7d:2f:5b:b8:64:af: 86:51:26:a7:97:d7:c1:bc:a9:57:e1:87:62:ec:f0: 45:f0:30:1a:fb:53:98:a6:69:0e:de:75:20:08:f0: b5:bf:0e:f5:40:4f:5a:59:d5:2d:83:ba:ee:95:ee: 45:7c:5d:40:d8:d2:83:8b:44:8d:da:9d:88:f0:13: 57:31:d1:41:bb:74:c9:35:ed:ad:e6:bd:81:64:9e: 8a:cb:7f:ce:1d:b9:74:a7:07:cb:53:c6:b2:e7:e4: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B0:40:3A:1E:1A:7A:84:3C:30:AD:62:62:C6:97:82:D5:42:BF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85f39f23-5bb4-3406-88b1-ce4d6102b2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6e:21:d7:8f:6c:0f:77:24:ae:75:76:b2:64:96:83:b5:0c: 7e:37:67:96:04:67:53:12:e5:c1:91:87:52:0f:fa:de:5a:ee: c9:17:f6:6a:a5:39:e3:ce:13:cc:65:f4:c3:10:1a:88:9b:7d: e7:bb:d6:b9:48:85:ce:f2:2f:5e:b1:3f:b9:e7:34:33:50:af: 8b:60:61:f1:79:0c:63:67:9f:ee:21:eb:61:4b:2b:8d:33:2c: 78:c9:08:d4:c1:4f:6f:1b:91:54:e9:f5:5d:8c:2b:8f:c3:85: a9:ce:59:e0:0b:dd:19:a8:ca:a8:48:d0:32:07:7c:e5:0a:d6: 2f:14:1e:f5:59:cb:1f:66:fa:9c:7d:b4:99:b4:43:63:6b:f0: 5c:90:d2:23:46:2a:72:cb:5f:f6:52:2b:84:26:10:23:66:2f: a3:84:4c:b0:3a:c5:92:0e:83:15:df:27:46:70:df:f9:73:cb: 6a:50:dd:6a:fe:aa:f5:02:9c:eb:2f:70:20:d4:7a:05:11:73: 66:00:34:96:b2:44:d4:33:f8:b9:52:30:ad:19:95:36:f0:97: a1:14:48:ef:63:3a:57:bd:02:ae:33:94:92:32:9c:58:23:52: 2d:0d:e3:d8:28:a8:b1:58:b2:51:d2:9d:1e:75:af:e5:17:00: 71:6d:0e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sM8ufugLAARyjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk YWZmOTJmYjMtNzNhMi00OTU2LTgwOTUtNzc5ZDAwYzQ5Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHBcmg9Vwo+ees5gMGX0slb9PriuBjMDNn0C 8aeBQ3ztNyFs6tx/k78848y83lc3k8Cu6t5AvJlQiS2vbuAntZ64vgD3fIF2ji7q kIsP7OV9TzgZxgYCU7Ujd3SvBZRtlAkROhiiCvsj/fQmkrrh9jH+r26avMTeF6Ks Zoi2wygtLyo0Cw+A4xxvErf7KpLrPOjXuvA7quL4ElQT+mB9L1u4ZK+GUSanl9fB vKlX4Ydi7PBF8DAa+1OYpmkO3nUgCPC1vw71QE9aWdUtg7rule5FfF1A2NKDi0SN 2p2I8BNXMdFBu3TJNe2t5r2BZJ6Ky3/OHbl0pwfLU8ay5+SvEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuwQDoeGnqEPDCtYmLGl4LVQr/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODVmMzlmMjMtNWJiNC0z NDA2LTg4YjEtY2U0ZDYxMDJiMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJuIdePbA93JK51drJkloO1DH43Z5YEZ1MS5cGRh1IP+t5a7skX9mql OePOE8xl9MMQGoibfee71rlIhc7yL16xP7nnNDNQr4tgYfF5DGNnn+4h62FLK40z LHjJCNTBT28bkVTp9V2MK4/DhanOWeAL3RmoyqhI0DIHfOUK1i8UHvVZyx9m+px9 tJm0Q2Nr8FyQ0iNGKnLLX/ZSK4QmECNmL6OETLA6xZIOgxXfJ0Zw3/lzy2pQ3Wr+ qvUCnOsvcCDUegURc2YANJayRNQz+LlSMK0ZlTbwl6EUSO9jOle9Aq4zlJIynFgj Ui0N49goqLFYslHSnR51r+UXAHFtDpI= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:08 2025 by rpki-client