$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9fc442e8-808d-36e1-80a2-1a36621afe73.roa File: 9fc442e8-808d-36e1-80a2-1a36621afe73.roa (raw, json) Hash identifier: 8l7ZmVVyMBNrNV8P9A6IpWD/5mpjZIeL6TVnEUqqa7k= Subject key identifier: B2:85:3D:69:B1:04:3B:5E:08:54:1D:DA:59:F6:61:49:31:3F:64:5C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262340B5B6529820418C30 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9fc442e8-808d-36e1-80a2-1a36621afe73.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397229 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:23:40:b5:b6:52:98:20:41:8c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=a040dc6f-b9f5-41ca-87fb-bb2a1c5a7388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:43:07:30:95:54:08:04:c8:c2:54:32:5f: 06:fd:48:89:13:78:e0:ee:a5:64:f7:2b:14:b7:05: 7d:b3:51:6d:55:9b:93:84:68:54:8e:5c:81:67:83: 42:3e:3f:70:64:a0:43:97:0c:cc:08:61:ae:58:04: 00:7f:d5:cc:76:81:38:be:d4:11:99:46:47:06:01: f1:29:cb:c2:d6:73:79:06:54:9a:68:98:86:5f:70: 8d:e0:4f:96:6c:5e:85:47:d4:83:43:f9:e2:82:82: e4:db:14:ab:3f:3d:aa:08:9b:f7:b0:7c:92:12:da: 42:fa:51:50:2b:d6:ef:3a:0e:25:9d:0e:3f:cc:51: b7:22:d4:67:07:c9:ef:b9:90:15:88:39:b7:b9:e1: 19:fe:1d:6e:96:8b:b7:94:1a:48:6e:a1:87:00:b8: 2a:dd:86:86:56:b8:eb:f8:ed:43:b4:97:d3:a6:77: b9:9a:0f:f9:41:28:2a:72:20:df:b7:57:aa:1e:5b: 80:32:2d:f8:0b:11:ed:07:25:e6:58:ec:16:18:fe: cb:d1:0d:83:99:fa:db:6b:17:15:b3:18:66:74:f1: 95:fe:e3:cc:16:87:94:57:88:ed:04:7e:ab:93:1f: 00:7d:60:c3:f0:8f:a8:0a:69:17:76:49:2d:aa:c7: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:85:3D:69:B1:04:3B:5E:08:54:1D:DA:59:F6:61:49:31:3F:64:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9fc442e8-808d-36e1-80a2-1a36621afe73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:76:db:b2:7b:70:71:15:68:91:11:01:fd:7a:1a:45:b8:a9: 7d:4f:60:c0:76:c9:71:cf:e1:b0:bd:f1:e2:6a:14:63:43:15: 3a:be:6d:90:a7:0e:8b:16:7a:ef:b6:85:a6:59:c7:d0:8a:e5: 5d:ee:9d:b5:88:a4:7b:0f:cd:35:79:7b:dd:ae:d1:c2:b7:94: f1:16:1d:a0:d5:ed:07:1b:4a:21:53:da:8a:75:2f:46:8e:af: 67:ff:3f:fa:63:07:3e:fb:4d:a6:74:42:9f:d2:42:a6:fd:ff: 8c:5c:8a:44:8c:06:92:b3:72:d9:73:fa:d1:36:83:44:b5:55: b6:b2:cc:17:34:71:eb:fa:e4:62:fb:d5:9b:0e:32:81:4c:b8: 3d:46:14:92:a0:de:74:9d:b5:c6:08:3d:52:77:d9:95:43:eb: 11:9a:e1:66:70:ed:12:d7:44:57:dc:c0:6e:3e:4e:ce:a4:10: ea:f3:05:f2:1d:34:29:05:25:45:b6:9f:3e:7c:65:1e:16:79: fc:d5:9b:3a:a3:4f:1d:11:bf:1b:63:ed:ee:8c:c8:bf:e3:ad: 06:52:d7:c4:20:66:75:52:34:35:6a:0f:0e:50:a9:cc:37:90: 8d:2a:b3:8f:75:7b:c5:4d:7a:ae:75:7c:d4:2d:da:f6:1f:f3: 25:f2:4f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJiNAtbZSmCBBjDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YTA0MGRjNmYtYjlmNS00MWNhLTg3ZmItYmIyYTFjNWE3Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwVDBzCVVAgEyMJUMl8G/UiJE3jg7qVk9ysU twV9s1FtVZuThGhUjlyBZ4NCPj9wZKBDlwzMCGGuWAQAf9XMdoE4vtQRmUZHBgHx KcvC1nN5BlSaaJiGX3CN4E+WbF6FR9SDQ/nigoLk2xSrPz2qCJv3sHySEtpC+lFQ K9bvOg4lnQ4/zFG3ItRnB8nvuZAViDm3ueEZ/h1ulou3lBpIbqGHALgq3YaGVrjr +O1DtJfTpne5mg/5QSgqciDft1eqHluAMi34CxHtByXmWOwWGP7L0Q2DmfrbaxcV sxhmdPGV/uPMFoeUV4jtBH6rkx8AfWDD8I+oCmkXdkktqscdEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKFPWmxBDteCFQd2ln2YUkxP2RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWZjNDQyZTgtODA4ZC0z NmUxLTgwYTItMWEzNjYyMWFmZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh227J7cHEVaJERAf16GkW4qX1PYMB2yXHP4bC98eJqFGNDFTq+bZCn DosWeu+2haZZx9CK5V3unbWIpHsPzTV5e92u0cK3lPEWHaDV7QcbSiFT2op1L0aO r2f/P/pjBz77TaZ0Qp/SQqb9/4xcikSMBpKzctlz+tE2g0S1VbayzBc0cev65GL7 1ZsOMoFMuD1GFJKg3nSdtcYIPVJ32ZVD6xGa4WZw7RLXRFfcwG4+Ts6kEOrzBfId NCkFJUW2nz58ZR4WefzVmzqjTx0Rvxtj7e6MyL/jrQZS18QgZnVSNDVqDw5Qqcw3 kI0qs491e8VNeq51fNQt2vYf8yXyTzQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:13:23 2025 by rpki-client