$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af38a0b0-9525-3bf5-95e2-a81218eadb2d.roa File: af38a0b0-9525-3bf5-95e2-a81218eadb2d.roa (raw, json) Hash identifier: uGCpfLKrooWmyhi4Ui0QlzytQltpxa6Gop0L51RjIOM= Subject key identifier: 7F:2D:3D:47:E7:37:A5:3F:5B:36:F0:72:FC:2B:E1:63:C2:E1:E5:87 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0BB496C11AB2F1D5E57A0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af38a0b0-9525-3bf5-95e2-a81218eadb2d.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397214 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:bb:49:6c:11:ab:2f:1d:5e:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=a77efbfd-990f-4e02-8513-edd79f570650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:74:27:54:b8:0c:20:e9:59:0d:be:01:9a: 14:47:77:9e:77:b5:66:bb:70:61:07:92:26:36:30: ea:d5:80:ec:a6:5d:1c:99:2c:75:7a:6c:a1:93:35: 9e:d0:12:a2:cf:bf:62:f0:70:ad:13:d4:fa:8f:85: 77:5f:d2:0a:29:d1:dd:44:ad:37:57:2b:85:c1:d0: 43:d4:e4:8a:98:7e:e5:cd:41:be:b0:ac:cf:c2:4f: ab:47:b9:e4:04:3e:09:f4:fa:a7:dd:73:76:59:69: 21:30:0d:66:fe:8f:cf:2a:77:7a:57:03:bb:3c:5d: b3:ce:2c:d2:1e:8c:18:5c:b0:e1:4e:8a:6c:78:f9: 04:d0:dd:86:1d:83:e3:9c:bf:7e:6d:85:97:b6:77: 5a:c2:8b:b5:82:22:cd:5f:60:1d:83:18:81:b5:82: a5:ed:e6:b8:33:97:2c:9a:8f:7e:44:f2:cd:66:34: 68:5d:05:c1:cc:e7:ec:1f:15:0d:b4:19:5f:ba:d6: 09:1a:d7:a9:9b:a9:5a:6c:00:88:6d:06:5a:37:6a: 04:13:8a:59:c7:6a:94:66:78:1f:d1:fc:d9:f6:c5: ae:73:c6:61:34:22:f6:68:ac:ac:4f:a6:76:44:b9: 16:26:87:1b:a0:02:dd:cd:87:45:ce:0a:43:0e:59: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2D:3D:47:E7:37:A5:3F:5B:36:F0:72:FC:2B:E1:63:C2:E1:E5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af38a0b0-9525-3bf5-95e2-a81218eadb2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:28:fb:34:6b:9e:9e:ab:91:9b:64:d3:d6:0d:15:d9:f4:19: 3a:94:60:61:6c:59:23:57:bb:b0:4b:a7:47:c2:a8:25:01:57: 23:80:ee:a6:26:16:25:0b:5c:95:d2:c0:7e:26:a6:4d:71:9b: 8c:ba:02:4c:de:ba:63:e8:f0:8d:13:21:e8:69:a8:55:78:8a: be:ab:6f:c7:1c:67:0e:70:df:d2:92:44:46:85:28:4f:48:c9: 6e:97:02:38:76:b5:52:76:ed:4c:c3:fc:63:58:37:df:ba:d8: 18:da:95:0d:e5:8b:fc:1b:78:be:ab:a6:b7:e7:cd:59:86:ec: 3b:28:7a:01:52:ef:a8:81:c5:b6:2f:f1:d6:9e:e1:0e:41:5c: cc:9b:c2:aa:c8:45:30:8b:ef:05:73:f0:ac:27:3f:2c:6a:d3: b7:9b:0a:a3:20:24:cf:ec:42:2e:af:50:24:f1:e5:2c:65:50: de:be:9e:68:b6:af:11:20:d1:e2:b6:79:34:4a:da:aa:56:08: a1:2c:2b:cd:5b:96:84:e1:4a:c3:22:b6:d1:50:8e:9e:1e:82: 7e:ed:d0:b5:1d:83:76:94:75:95:41:a1:6c:3b:78:d6:68:75: 85:26:fc:9f:ba:91:3a:8e:9b:88:d3:06:0a:25:43:19:0a:8d: 1b:25:18:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLtJbBGrLx1eV6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk YTc3ZWZiZmQtOTkwZi00ZTAyLTg1MTMtZWRkNzlmNTcwNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhx0J1S4DCDpWQ2+AZoUR3eed7Vmu3BhB5Im NjDq1YDspl0cmSx1emyhkzWe0BKiz79i8HCtE9T6j4V3X9IKKdHdRK03VyuFwdBD 1OSKmH7lzUG+sKzPwk+rR7nkBD4J9Pqn3XN2WWkhMA1m/o/PKnd6VwO7PF2zzizS HowYXLDhTopsePkE0N2GHYPjnL9+bYWXtndawou1giLNX2AdgxiBtYKl7ea4M5cs mo9+RPLNZjRoXQXBzOfsHxUNtBlfutYJGtepm6labACIbQZaN2oEE4pZx2qUZngf 0fzZ9sWuc8ZhNCL2aKysT6Z2RLkWJocboALdzYdFzgpDDlk+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8tPUfnN6U/Wzbwcvwr4WPC4eWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWYzOGEwYjAtOTUyNS0z YmY1LTk1ZTItYTgxMjE4ZWFkYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgo+zRrnp6rkZtk09YNFdn0GTqUYGFsWSNXu7BLp0fCqCUBVyOA7qYm FiULXJXSwH4mpk1xm4y6AkzeumPo8I0TIehpqFV4ir6rb8ccZw5w39KSREaFKE9I yW6XAjh2tVJ27UzD/GNYN9+62BjalQ3li/wbeL6rprfnzVmG7DsoegFS76iBxbYv 8dae4Q5BXMybwqrIRTCL7wVz8KwnPyxq07ebCqMgJM/sQi6vUCTx5SxlUN6+nmi2 rxEg0eK2eTRK2qpWCKEsK81bloThSsMittFQjp4egn7t0LUdg3aUdZVBoWw7eNZo dYUm/J+6kTqOm4jTBgolQxkKjRslGGw= -----END CERTIFICATE-----Generated at Wed Aug 6 10:06:05 2025 by rpki-client