$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa File: d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa (raw, json) Hash identifier: Ij8hrV9itz9oFESBGUVWOTjDtAm6jnvbkpTJowyYhk4= Subject key identifier: 60:63:6F:E3:38:74:42:7D:E3:66:16:65:C6:F5:C2:D2:F0:04:03:8B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68261676F7E4007F1CB7CB00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397218 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:16:76:f7:e4:00:7f:1c:b7:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=05a5e1d8-15c0-4d91-9020-f4d0f51cf91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:d2:cc:6c:db:d4:a3:20:4f:ea:22:dd:f7: f3:ea:0a:17:5b:30:e3:0d:8b:ac:e5:c0:00:b5:9a: 63:13:d6:91:55:96:e0:26:28:9a:3e:00:de:0d:3a: b0:2b:46:56:d3:59:58:08:a6:c2:b3:24:57:93:70: 4a:4f:c1:4a:2b:a3:e9:58:36:05:69:d4:fd:dc:70: c6:56:5f:38:41:5f:6b:71:86:54:e6:01:76:2d:0e: 92:e0:e9:f7:cc:3b:63:88:15:f3:2e:f7:38:cd:27: ee:b2:49:b9:60:39:5c:d5:42:3c:8c:71:3d:b0:bd: 39:1e:6a:d4:86:40:b1:a4:f0:17:d5:a7:3a:c9:a0: 16:09:6e:98:cf:86:2f:3a:89:c0:99:26:4f:91:7a: d5:f7:d8:b5:cd:08:17:0d:bb:9d:12:62:cf:c0:4a: c2:68:58:3e:51:b7:36:4f:c6:56:e8:40:a4:fc:f2: a2:62:ac:f7:53:95:b3:72:4f:ea:ed:49:a7:ee:3f: e8:71:9f:06:b7:1a:d5:dc:b1:0c:e3:f9:0e:7d:f4: 4e:20:bf:62:1e:74:7a:75:e0:e0:64:40:63:d9:09: 25:c3:53:d7:47:72:00:87:9f:65:97:60:39:e8:32: de:8c:dc:88:76:d4:ef:4e:4c:b4:04:0f:4f:99:a3: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:63:6F:E3:38:74:42:7D:E3:66:16:65:C6:F5:C2:D2:F0:04:03:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4cda9d7-79f5-3788-a8be-50d3dde9c1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:75:dc:4e:ba:7e:03:63:92:a0:77:23:83:eb:0f:7d:c6:83: 67:ec:06:3e:45:62:d0:98:10:c7:96:5f:43:ba:58:ed:ac:76: e2:50:7d:69:2c:a7:dd:46:6e:67:8a:1e:54:f1:b8:1f:c9:76: d4:f2:1a:31:cc:ad:68:8b:9d:02:06:31:a5:10:b3:42:e3:5c: c4:42:d4:d3:71:7d:b5:c0:07:53:42:93:cb:52:74:0f:62:9e: 17:16:76:56:ac:a7:04:f5:11:90:bc:2a:ce:03:67:08:d1:e0: 36:d7:fa:87:b0:8e:d6:dc:80:8b:cf:1b:4b:2d:59:f0:ed:d3: 41:c1:9b:37:55:74:c9:e2:bf:41:28:0e:c2:84:e3:16:08:a4: ac:ea:b0:1f:7d:96:4c:88:f0:9f:98:6f:fa:76:32:04:51:76: 34:ed:c1:c3:7e:7a:ae:c5:75:13:53:3f:92:b6:e7:8a:2c:3a: 40:8c:08:46:6d:60:4e:14:34:01:5b:62:c3:53:47:21:91:51: 47:dc:bc:89:32:8a:53:c4:ec:36:7b:6a:cc:1b:7d:26:bb:89: 03:b2:22:76:23:2a:4d:78:cb:1f:36:0f:fe:1e:de:fe:8d:26: a4:c4:bd:01:b4:ab:85:47:00:77:d1:70:20:fd:13:ef:91:43: a9:db:64:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhZ29+QAfxy3ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MDVhNWUxZDgtMTVjMC00ZDkxLTkwMjAtZjRkMGY1MWNmOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBvSzGzb1KMgT+oi3ffz6goXWzDjDYus5cAA tZpjE9aRVZbgJiiaPgDeDTqwK0ZW01lYCKbCsyRXk3BKT8FKK6PpWDYFadT93HDG Vl84QV9rcYZU5gF2LQ6S4On3zDtjiBXzLvc4zSfuskm5YDlc1UI8jHE9sL05HmrU hkCxpPAX1ac6yaAWCW6Yz4YvOonAmSZPkXrV99i1zQgXDbudEmLPwErCaFg+Ubc2 T8ZW6ECk/PKiYqz3U5Wzck/q7Umn7j/ocZ8GtxrV3LEM4/kOffROIL9iHnR6deDg ZEBj2Qklw1PXR3IAh59ll2A56DLejNyIdtTvTky0BA9PmaMzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBjb+M4dEJ942YWZcb1wtLwBAOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDRjZGE5ZDctNzlmNS0z Nzg4LWE4YmUtNTBkM2RkZTljMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ13E66fgNjkqB3I4PrD33Gg2fsBj5FYtCYEMeWX0O6WO2sduJQfWks p91GbmeKHlTxuB/JdtTyGjHMrWiLnQIGMaUQs0LjXMRC1NNxfbXAB1NCk8tSdA9i nhcWdlaspwT1EZC8Ks4DZwjR4DbX+oewjtbcgIvPG0stWfDt00HBmzdVdMniv0Eo DsKE4xYIpKzqsB99lkyI8J+Yb/p2MgRRdjTtwcN+eq7FdRNTP5K254osOkCMCEZt YE4UNAFbYsNTRyGRUUfcvIkyilPE7DZ7aswbfSa7iQOyInYjKk14yx82D/4e3v6N JqTEvQG0q4VHAHfRcCD9E++RQ6nbZKs= -----END CERTIFICATE-----Generated at Tue Aug 5 17:19:31 2025 by rpki-client