$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa File: a446430b-de4d-35ec-aebe-6e6358a16f7a.roa (raw, json) Hash identifier: bHSAhDCbyFt1INu/m7Klgdytp6f/O3P66/eR6wBCTM4= Subject key identifier: 60:7F:02:80:61:CC:F9:58:64:AE:B2:D0:67:93:4F:1E:F8:7F:6B:52 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A6826329021D120334C357A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397223 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:32:90:21:d1:20:33:4c:35:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=ac62c08b-f157-4b51-99d5-337335c83203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:02:06:a7:53:72:c3:c7:88:fb:d5:4c:0d: b7:9d:ef:6e:12:07:63:0e:10:b2:e5:95:f0:2c:34: 43:0f:f4:59:7a:ca:95:db:de:23:de:d6:f6:6d:62: 48:ea:b0:a0:c1:bf:ae:f2:b1:8e:a2:85:a5:2a:7c: 77:38:16:5a:f7:0e:e5:04:2d:cb:35:18:47:f2:6a: 6a:59:b7:ed:30:fc:3e:52:91:bd:dc:b8:19:4f:b5: 3e:9b:d6:49:e0:b9:d0:62:9c:aa:ef:f9:33:e8:03: d4:a4:3b:09:a6:7a:1b:24:d6:dd:66:38:14:c6:4c: c3:23:e4:aa:3e:ff:8f:37:85:33:1f:94:cf:4c:53: 7d:f4:2a:7b:a4:27:9e:d5:3f:48:30:be:00:9b:ac: 3c:bb:1f:18:00:cc:c3:3b:2c:97:ed:cb:3d:25:04: b1:39:de:ac:36:6b:b7:5b:8a:89:cc:1f:aa:0e:16: d0:5b:4c:03:fa:a5:bb:c8:3a:a6:fc:c4:a5:1e:1b: 5b:69:3c:49:ae:77:a3:95:c9:a7:b2:2e:d4:2f:7c: e2:14:52:7e:16:1f:b5:e4:ac:a1:5b:7f:0e:6b:11: fa:e0:a7:d0:e7:f6:ab:a0:8c:fd:ae:f4:59:86:0f: db:b1:e4:ae:95:8f:73:86:3e:95:d3:9c:9e:d8:10: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7F:02:80:61:CC:F9:58:64:AE:B2:D0:67:93:4F:1E:F8:7F:6B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a446430b-de4d-35ec-aebe-6e6358a16f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:51:9d:a0:f3:fe:34:dc:2f:d9:fc:5a:61:ea:48:b3:10:f7: bb:df:c9:51:e7:c7:d7:66:c0:58:f4:3a:34:7d:e6:74:0c:03: d7:35:39:b7:24:f1:66:20:aa:d5:d3:dc:74:99:ae:fa:49:63: 5e:ec:93:1d:ec:67:dc:61:21:3d:48:96:fe:89:3f:c8:73:52: d1:dd:d9:dc:c0:c2:0d:d2:90:92:d2:6e:02:2e:aa:59:33:af: fd:db:88:40:ac:41:6e:ab:1c:ca:72:13:bc:d7:28:e4:47:e2: 92:08:6b:59:39:b4:3f:07:8a:33:c2:1e:5b:fb:ed:3c:46:ca: 67:b7:75:2c:c6:4a:83:74:77:f2:80:52:2e:2a:92:01:b4:0f: b2:5c:3b:9a:15:94:2d:81:dc:e1:83:4e:ec:35:9d:8e:b0:74: 8b:8c:99:96:f3:c2:b4:fc:73:89:10:94:79:d5:ed:cf:9e:d1: 74:f2:34:c5:ec:5f:20:d4:c7:32:8d:e1:1f:79:28:6d:9c:dc: 9d:bb:25:a4:52:59:7f:94:27:98:3f:5b:27:4d:32:77:00:f8: f2:4b:6b:83:88:d1:cb:4e:22:fc:56:f1:6f:3b:2f:66:30:e4: e8:53:c9:24:e0:3b:df:09:97:2d:8a:89:d7:a4:17:fc:a0:c0: d9:d4:34:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjKQIdEgM0w1egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YWM2MmMwOGItZjE1Ny00YjUxLTk5ZDUtMzM3MzM1YzgzMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyoCBqdTcsPHiPvVTA23ne9uEgdjDhCy5ZXw LDRDD/RZesqV294j3tb2bWJI6rCgwb+u8rGOooWlKnx3OBZa9w7lBC3LNRhH8mpq WbftMPw+UpG93LgZT7U+m9ZJ4LnQYpyq7/kz6APUpDsJpnobJNbdZjgUxkzDI+Sq Pv+PN4UzH5TPTFN99Cp7pCee1T9IML4Am6w8ux8YAMzDOyyX7cs9JQSxOd6sNmu3 W4qJzB+qDhbQW0wD+qW7yDqm/MSlHhtbaTxJrnejlcmnsi7UL3ziFFJ+Fh+15Kyh W38OaxH64KfQ5/aroIz9rvRZhg/bseSulY9zhj6V05ye2BCjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB/AoBhzPlYZK6y0GeTTx74f2tSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTQ0NjQzMGItZGU0ZC0z NWVjLWFlYmUtNmU2MzU4YTE2ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZRnaDz/jTcL9n8WmHqSLMQ97vfyVHnx9dmwFj0OjR95nQMA9c1Obck 8WYgqtXT3HSZrvpJY17skx3sZ9xhIT1Ilv6JP8hzUtHd2dzAwg3SkJLSbgIuqlkz r/3biECsQW6rHMpyE7zXKORH4pIIa1k5tD8HijPCHlv77TxGyme3dSzGSoN0d/KA Ui4qkgG0D7JcO5oVlC2B3OGDTuw1nY6wdIuMmZbzwrT8c4kQlHnV7c+e0XTyNMXs XyDUxzKN4R95KG2c3J27JaRSWX+UJ5g/WydNMncA+PJLa4OI0ctOIvxW8W87L2Yw 5OhTySTgO98Jly2KidekF/ygwNnUNLA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:03:22 2025 by rpki-client