$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa File: cc50029d-2795-3128-97b2-eadfbd0c65c3.roa (raw, json) Hash identifier: KSddSS+AW0E6owwN5mwCiPhPh5ijOsnjmiPK3zs+7YQ= Subject key identifier: 28:E3:7F:81:8A:F5:BC:74:C7:60:0D:21:BF:05:F0:34:5B:B8:F4:AB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262E79528FFFC7D81D0440 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397214 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:2e:79:52:8f:ff:c7:d8:1d:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=53c7f44b-3c47-4cd6-8ff3-d685b21fa541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:56:a4:cb:1d:0c:b6:f0:eb:51:49:f7:d0: e5:3d:f5:6d:26:c7:71:a0:66:fa:5e:d9:76:80:33: c4:a1:2a:94:17:15:d1:3e:e8:dd:57:a7:00:2f:19: 77:f9:78:50:12:bb:2a:a7:ef:c5:8f:c2:d5:22:39: 68:e2:ae:f7:e4:56:13:f8:8b:61:6d:0b:5d:16:b5: 7b:2f:93:30:cf:c7:9a:95:75:a2:07:61:07:aa:a2: 77:52:ae:93:2a:3e:ed:02:df:ab:34:48:71:16:5f: 4f:ac:05:b4:11:c3:f4:b6:0f:45:a5:e4:b9:64:a8: 4a:43:05:d5:23:31:8b:3d:ec:fe:4a:6e:f3:36:22: c1:dd:64:61:6c:03:72:67:dd:d5:9f:bd:24:1c:b4: 83:e1:4c:bc:73:62:d1:a9:79:97:6e:07:4e:4f:32: 7a:3d:a7:4f:fe:03:73:11:be:91:7c:f7:53:f7:25: 07:0a:c7:5e:f1:00:b1:93:8c:87:50:fe:eb:3d:b0: 99:f9:63:66:f5:b3:ca:41:6a:1b:ba:54:aa:9a:27: 35:36:b2:c3:3e:e4:2a:96:00:44:c6:31:10:a7:99: 8d:61:db:dc:94:16:01:0e:03:1f:93:65:b5:64:fb: 98:fb:3a:cf:3a:1c:28:6b:0e:e6:90:b7:86:f4:c1: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E3:7F:81:8A:F5:BC:74:C7:60:0D:21:BF:05:F0:34:5B:B8:F4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc50029d-2795-3128-97b2-eadfbd0c65c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:20:a4:af:a2:fb:28:1b:6a:40:18:fd:08:16:3f:20:cd:9b: 5a:e6:73:5b:56:e5:7b:97:a0:5c:91:32:5c:58:43:64:dc:0b: af:71:fb:0c:eb:b9:5f:de:63:1f:ac:0c:b7:12:d1:b7:7d:54: 76:11:09:62:30:e0:64:77:e9:18:94:0e:1f:6a:0c:27:e4:13: 26:dc:c3:73:dc:7a:59:73:31:01:9f:95:09:bf:43:bd:f5:5c: f0:b8:c9:f7:03:09:cd:f7:00:6c:75:8f:fe:44:7d:a4:a9:b0: a5:bf:2c:e8:6c:83:fe:d9:18:c5:17:3f:50:a3:fa:69:4c:3f: 48:72:a9:bd:57:02:9f:20:04:e9:f7:77:e2:3e:75:d3:d4:e4: 44:d0:b2:e7:45:ff:eb:46:b1:46:e4:49:82:bb:81:7b:e2:ab: 59:50:df:c5:0e:05:c6:dc:80:18:d4:62:50:4f:2a:42:b0:c8: 97:95:73:7f:2e:9f:31:86:8c:0f:3b:b9:59:f5:38:e3:49:55: 40:68:c9:9c:55:ce:9f:4a:d2:a8:a6:8f:c1:56:1a:87:1f:52: 70:df:d1:d0:69:f4:dd:11:88:26:17:12:e7:62:43:23:17:d1: b3:cf:f9:b7:6a:13:7c:a8:41:23:4c:a1:58:a9:c6:5d:e9:77: 30:3d:29:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJi55Uo//x9gdBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NTNjN2Y0NGItM2M0Ny00Y2Q2LThmZjMtZDY4NWIyMWZhNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6hWpMsdDLbw61FJ99DlPfVtJsdxoGb6Xtl2 gDPEoSqUFxXRPujdV6cALxl3+XhQErsqp+/Fj8LVIjlo4q735FYT+IthbQtdFrV7 L5Mwz8ealXWiB2EHqqJ3Uq6TKj7tAt+rNEhxFl9PrAW0EcP0tg9FpeS5ZKhKQwXV IzGLPez+Sm7zNiLB3WRhbANyZ93Vn70kHLSD4Uy8c2LRqXmXbgdOTzJ6PadP/gNz Eb6RfPdT9yUHCsde8QCxk4yHUP7rPbCZ+WNm9bPKQWobulSqmic1NrLDPuQqlgBE xjEQp5mNYdvclBYBDgMfk2W1ZPuY+zrPOhwoaw7mkLeG9MGDkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjjf4GK9bx0x2ANIb8F8DRbuPSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2M1MDAyOWQtMjc5NS0z MTI4LTk3YjItZWFkZmJkMGM2NWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcgpK+i+ygbakAY/QgWPyDNm1rmc1tW5XuXoFyRMlxYQ2TcC69x+wzr uV/eYx+sDLcS0bd9VHYRCWIw4GR36RiUDh9qDCfkEybcw3PcellzMQGflQm/Q731 XPC4yfcDCc33AGx1j/5EfaSpsKW/LOhsg/7ZGMUXP1Cj+mlMP0hyqb1XAp8gBOn3 d+I+ddPU5ETQsudF/+tGsUbkSYK7gXviq1lQ38UOBcbcgBjUYlBPKkKwyJeVc38u nzGGjA87uVn1OONJVUBoyZxVzp9K0qimj8FWGocfUnDf0dBp9N0RiCYXEudiQyMX 0bPP+bdqE3yoQSNMoVipxl3pdzA9KXo= -----END CERTIFICATE-----Generated at Wed Aug 6 07:54:29 2025 by rpki-client