$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa File: cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa (raw, json) Hash identifier: 3Tb9mwgVnRKyT6Klj+gIQqINKCXtnVt9Kqf3TiJpImc= Subject key identifier: 47:A9:B8:B8:DE:F1:97:99:EC:96:B0:28:90:F9:39:8E:64:24:4A:85 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A6826171A2A16C76C92A57B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397230 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:17:1a:2a:16:c7:6c:92:a5:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=13e99889-36ee-4e5f-969c-d4e023faa372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:f9:26:f6:e6:74:7a:5a:be:5b:7b:58:2b: fb:4d:89:30:48:d0:33:20:99:fb:ed:3a:f4:6c:bd: 72:1e:46:0f:f6:f0:eb:b3:40:fe:4a:13:b4:1e:b9: 3c:d7:43:8e:24:ce:51:cd:1f:af:d8:06:b3:8b:97: 45:2a:f7:f6:25:07:55:8b:b2:2e:87:99:cc:6d:08: 42:1e:98:6c:06:f3:84:e0:e5:d5:b7:e6:f5:c3:b7: 66:78:00:be:71:0e:46:34:b7:ad:17:f3:04:db:29: 6c:d8:18:d7:9c:40:59:a3:07:17:6f:3f:49:97:09: cf:02:51:06:08:21:73:f7:b1:8a:33:13:bb:6b:c2: 37:26:57:b6:70:85:84:d2:da:2d:a6:bc:55:45:80: 5d:53:fc:99:44:84:24:43:40:7f:dc:51:be:40:a8: 2b:ca:50:03:7c:0c:f1:f5:7f:db:d5:d7:68:fa:8e: 2c:43:91:77:59:0c:15:46:e0:02:b4:00:6d:57:dd: 1c:53:56:c5:75:0e:a1:7b:4d:75:1f:50:62:c4:44: d1:6c:65:20:13:45:68:3f:f9:81:08:7f:f3:9c:a2: 3d:ac:68:8c:85:aa:14:5e:f6:9d:1d:05:3e:65:62: 70:40:bb:c1:e0:6e:d2:c2:90:34:9c:b9:a5:ba:13: 8f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A9:B8:B8:DE:F1:97:99:EC:96:B0:28:90:F9:39:8E:64:24:4A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cc6376fd-6b1f-3093-b0d0-d288b7af8e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7c:90:bf:86:b5:ed:74:4a:8f:9e:8c:87:07:6a:4c:8e:c9: 31:86:14:4c:18:e6:69:04:30:a1:40:48:97:d7:ab:dc:72:09: 40:df:f1:4c:23:70:7a:36:3b:ad:2e:b6:c4:4f:cf:62:0c:4f: 73:75:7b:5c:21:d3:ea:d5:a8:0b:60:e9:9f:24:92:ff:34:13: da:cd:45:cf:09:d2:87:89:40:3c:b3:18:b0:d0:4c:01:1e:b2: 0f:70:9a:88:42:7b:ab:ca:f7:8a:b7:68:5e:f4:f6:cd:f8:22: 30:4a:c0:3f:28:58:7f:5d:f1:04:fe:5f:e3:41:62:38:bb:15: 4b:35:57:dd:8a:76:ec:3c:ff:29:b8:2b:2f:da:75:50:47:49: 9d:f2:60:58:a5:87:93:f2:13:e0:17:6c:77:31:8f:c1:80:d8: 3e:05:3a:f8:8c:71:23:a5:b8:14:e5:36:35:f8:c7:d5:50:24: 97:3e:8f:bf:27:5d:b8:d2:ff:b9:f4:15:61:4d:5b:1f:03:60: 9f:48:e8:ae:d3:bf:8a:5a:d4:8d:f3:b4:ee:b3:02:d4:22:89: e7:74:37:fe:ff:9a:39:f7:99:85:99:cf:12:ef:16:53:0c:35: 8e:6d:47:2f:16:91:35:90:cd:ac:06:f9:46:51:f2:34:d7:ad: 5d:55:57:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhcaKhbHbJKle4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MTNlOTk4ODktMzZlZS00ZTVmLTk2OWMtZDRlMDIzZmFhMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4z5JvbmdHpavlt7WCv7TYkwSNAzIJn77Tr0 bL1yHkYP9vDrs0D+ShO0Hrk810OOJM5RzR+v2Aazi5dFKvf2JQdVi7Iuh5nMbQhC HphsBvOE4OXVt+b1w7dmeAC+cQ5GNLetF/ME2yls2BjXnEBZowcXbz9JlwnPAlEG CCFz97GKMxO7a8I3Jle2cIWE0totprxVRYBdU/yZRIQkQ0B/3FG+QKgrylADfAzx 9X/b1ddo+o4sQ5F3WQwVRuACtABtV90cU1bFdQ6he011H1BixETRbGUgE0VoP/mB CH/znKI9rGiMhaoUXvadHQU+ZWJwQLvB4G7SwpA0nLmluhOPrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEepuLje8ZeZ7JawKJD5OY5kJEqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2M2Mzc2ZmQtNmIxZi0z MDkzLWIwZDAtZDI4OGI3YWY4ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp8kL+Gte10So+ejIcHakyOyTGGFEwY5mkEMKFASJfXq9xyCUDf8Uwj cHo2O60utsRPz2IMT3N1e1wh0+rVqAtg6Z8kkv80E9rNRc8J0oeJQDyzGLDQTAEe sg9wmohCe6vK94q3aF709s34IjBKwD8oWH9d8QT+X+NBYji7FUs1V92Kduw8/ym4 Ky/adVBHSZ3yYFilh5PyE+AXbHcxj8GA2D4FOviMcSOluBTlNjX4x9VQJJc+j78n XbjS/7n0FWFNWx8DYJ9I6K7Tv4pa1I3ztO6zAtQiied0N/7/mjn3mYWZzxLvFlMM NY5tRy8WkTWQzawG+UZR8jTXrV1VV5I= -----END CERTIFICATE-----Generated at Wed Aug 6 00:38:44 2025 by rpki-client