$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9f4e18f-274c-3a7c-823a-665d0bb80ead.roa File: f9f4e18f-274c-3a7c-823a-665d0bb80ead.roa (raw, json) Hash identifier: XP+jRsron+g3C8nzNer+c8b2G+IhV51YpDr4ZrRT9Lg= Subject key identifier: 27:61:CA:82:80:35:74:D1:64:E5:5F:FD:8F:0B:74:A1:6D:97:FB:9A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682625292A13E818954F6280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9f4e18f-274c-3a7c-823a-665d0bb80ead.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397233 IP address blocks: 156.154.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:25:29:2a:13:e8:18:95:4f:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=2baeab3d-b681-441f-99cf-a85e29685bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a8:79:b0:d1:fd:77:e4:91:ba:84:3b:89:41: b7:b8:9f:05:ce:cf:fd:96:12:43:4f:28:88:0e:b4: e4:13:57:e0:96:64:7e:31:df:58:ab:38:0f:49:71: c3:5f:4c:3c:c5:7b:58:9c:6f:b5:63:c6:17:8a:76: af:3f:69:d9:0c:99:15:da:73:05:86:65:21:2a:a0: d2:2a:58:b3:25:06:00:87:fd:b3:0d:b2:ed:59:ac: ff:8e:c5:4d:64:58:bb:a7:a9:47:22:21:bc:f2:38: 6f:2c:a0:aa:f3:a7:8f:5c:ed:43:e7:93:89:e0:58: 14:29:36:97:07:75:eb:1d:59:1c:7e:76:03:65:f8: 5e:8a:62:1c:e3:5b:4e:f8:89:19:3a:8b:53:d7:ec: 43:82:9f:69:50:f9:59:e6:8d:cc:fe:4c:39:b6:b2: b9:f2:23:6f:82:76:58:54:0e:34:30:97:ef:32:f6: c2:08:6c:93:6d:ca:25:ba:cf:2b:ce:1d:38:f6:5f: 32:68:9d:b9:40:18:a4:89:9d:3b:12:9e:ff:73:9a: a1:5c:e5:b3:0a:64:2f:4a:6a:1a:10:25:44:eb:59: 7a:41:d1:10:80:37:0f:cd:62:9f:08:e4:af:d9:32: d0:99:41:96:c1:9e:4e:c9:13:d7:71:58:37:d6:06: 92:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:61:CA:82:80:35:74:D1:64:E5:5F:FD:8F:0B:74:A1:6D:97:FB:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f9f4e18f-274c-3a7c-823a-665d0bb80ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ec:92:43:9e:f4:11:1c:90:9a:b0:86:7c:9a:7e:73:79:9d: f1:ba:35:e0:13:41:50:15:07:39:b1:b6:2e:cf:81:e4:42:56: c1:f5:4c:e7:0c:ee:9f:f4:5e:af:a9:04:82:f8:5f:e2:06:4f: 65:d2:ac:94:2b:f5:e6:fd:be:7b:e5:cd:b1:a1:9d:4a:fa:72: 48:9a:be:ab:fe:5d:da:a8:5c:f7:45:a1:d4:b2:98:64:ca:a6: 9f:9d:df:24:0b:a4:41:de:2b:0d:18:60:a0:70:e1:20:54:d7: 7a:5f:4b:20:74:b8:fc:69:6a:66:f3:76:72:25:b9:95:62:78: 93:b6:36:90:02:61:8e:c9:6f:10:17:5d:2a:a8:42:5d:cf:21: 01:76:02:c6:bd:4a:dd:a4:6e:20:62:25:47:69:2c:53:61:b6: ad:27:d8:98:2a:34:e5:f6:2a:fe:d5:7c:fc:5a:68:e0:32:95: 5c:a9:e1:d2:27:56:31:bb:14:7a:46:09:d0:1e:2b:8b:07:51: 9e:f8:92:01:5c:78:7e:cf:79:af:ce:4f:be:ff:83:a3:9c:17: dc:dd:77:c3:0d:30:bc:10:30:2c:f4:4a:c5:8f:98:f0:11:27: 76:3c:4c:e6:eb:c8:0b:24:b4:70:77:b5:32:0a:55:9c:79:cb: 90:c3:71:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJiUpKhPoGJVPYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MmJhZWFiM2QtYjY4MS00NDFmLTk5Y2YtYTg1ZTI5Njg1YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKh5sNH9d+SRuoQ7iUG3uJ8Fzs/9lhJDTyiI DrTkE1fglmR+Md9YqzgPSXHDX0w8xXtYnG+1Y8YXinavP2nZDJkV2nMFhmUhKqDS KlizJQYAh/2zDbLtWaz/jsVNZFi7p6lHIiG88jhvLKCq86ePXO1D55OJ4FgUKTaX B3XrHVkcfnYDZfheimIc41tO+IkZOotT1+xDgp9pUPlZ5o3M/kw5trK58iNvgnZY VA40MJfvMvbCCGyTbcolus8rzh049l8yaJ25QBikiZ07Ep7/c5qhXOWzCmQvSmoa ECVE61l6QdEQgDcPzWKfCOSv2TLQmUGWwZ5OyRPXcVg31gaSWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdhyoKANXTRZOVf/Y8LdKFtl/uaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjlmNGUxOGYtMjc0Yy0z YTdjLTgyM2EtNjY1ZDBiYjgwZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7skkOe9BEckJqwhnyafnN5nfG6NeATQVAVBzmxti7PgeRCVsH1TOcM 7p/0Xq+pBIL4X+IGT2XSrJQr9eb9vnvlzbGhnUr6ckiavqv+XdqoXPdFodSymGTK pp+d3yQLpEHeKw0YYKBw4SBU13pfSyB0uPxpambzdnIluZVieJO2NpACYY7JbxAX XSqoQl3PIQF2Asa9St2kbiBiJUdpLFNhtq0n2JgqNOX2Kv7VfPxaaOAylVyp4dIn VjG7FHpGCdAeK4sHUZ74kgFceH7Pea/OT77/g6OcF9zdd8MNMLwQMCz0SsWPmPAR J3Y8TObryAsktHB3tTIKVZx5y5DDccc= -----END CERTIFICATE-----Generated at Mon Aug 4 18:26:17 2025 by rpki-client