$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa File: fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa (raw, json) Hash identifier: dOVCelM3Zjby22oYYaOwqn0c8P98lG0X6x2+ZigVXq0= Subject key identifier: 1A:12:CA:3D:F6:E2:65:35:CE:97:FD:EA:4E:6E:D8:81:9B:95:4E:C0 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682616C1C8638DF4657CA760 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397223 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:16:c1:c8:63:8d:f4:65:7c:a7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=c9dd094c-25a3-4fc2-bdf8-e90be1da6ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:e7:b9:f0:2b:cf:ed:e9:46:7a:57:13:24: 02:4f:b3:21:75:7b:79:fc:32:74:e6:67:14:92:9d: 6b:b0:4d:27:6b:d0:62:aa:79:63:d8:0b:05:b7:7a: b3:0d:29:c3:33:28:4d:66:02:5e:6f:e6:34:e1:38: 81:36:ce:6a:40:8f:10:4d:3b:e4:82:5c:d7:97:37: 6a:33:d3:f8:61:70:c8:65:8a:a0:6f:1b:df:d5:72: 1a:8b:48:27:d2:2e:bd:4a:74:99:b8:87:ae:1d:ae: 3f:0e:79:67:84:ac:9d:54:4e:3f:b6:89:01:de:13: 8d:6a:52:eb:d6:7d:d9:e0:b2:26:24:fb:29:a8:7d: 95:43:5b:ab:de:1e:69:b1:78:f8:b8:3d:f0:e0:e7: 21:58:54:67:92:2b:b1:14:52:da:9c:12:2c:5e:f8: 8c:24:76:06:33:f9:78:99:d6:4c:88:84:74:8f:07: 67:66:74:5e:0b:e3:6a:6d:fc:b6:01:56:f8:c4:0b: 74:1c:81:0b:21:ef:f8:2d:3e:0f:06:62:0b:cf:55: ad:f2:64:de:e4:8a:43:b4:87:4c:63:91:55:50:55: d4:5f:92:78:42:cd:86:03:4d:0d:22:78:8b:f1:e7: 19:02:21:6e:dd:cf:55:9f:70:09:a8:0b:7a:aa:59: 05:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:CA:3D:F6:E2:65:35:CE:97:FD:EA:4E:6E:D8:81:9B:95:4E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fab0a8ac-e4bf-32f8-a720-3fbc456978e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b3:bd:8b:f6:48:60:ef:02:ac:19:1f:40:eb:8d:a5:d5:1b: a6:30:82:7e:65:02:40:1b:bc:77:b2:b3:44:3e:2a:c0:3b:86: 70:e1:fc:80:ea:be:93:e6:7f:dd:46:1f:f9:e5:50:01:a8:53: 82:94:47:6b:52:d2:ea:19:82:81:85:cb:0f:7b:d4:8c:7e:e6: f1:1d:de:62:d5:cd:ca:09:74:63:63:80:97:f8:6f:83:b4:ef: 4d:f9:02:1a:56:38:11:54:e4:31:04:4e:b7:ca:42:f1:3a:6e: f2:c0:e5:44:5f:06:9f:3d:ce:b6:93:64:2c:30:55:78:ab:7b: 84:bf:45:9d:0c:a3:43:9c:ec:6a:d6:63:0c:73:a8:3b:ca:9f: f6:c8:f8:19:7e:e6:1d:95:91:c4:be:a2:63:27:35:f7:c4:61: 23:dc:09:d6:ea:97:ee:3c:29:ec:18:c2:52:a9:9c:04:e2:f8: ef:a4:4f:b5:80:61:98:a5:ce:56:4e:65:71:61:9b:c9:e5:c7: 69:7f:ef:f5:d4:1e:26:7a:ee:91:3b:7e:78:cf:2f:ad:a0:90: 88:92:3e:e1:61:78:a5:bc:ff:84:74:64:f1:7b:b1:0a:24:55: 3f:c2:d5:cf:4b:d4:c6:49:a8:ed:0c:b8:9f:22:c3:5a:ed:ab: 4b:2d:26:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhbByGON9GV8p2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YzlkZDA5NGMtMjVhMy00ZmMyLWJkZjgtZTkwYmUxZGE2YWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCLnufArz+3pRnpXEyQCT7MhdXt5/DJ05mcU kp1rsE0na9Biqnlj2AsFt3qzDSnDMyhNZgJeb+Y04TiBNs5qQI8QTTvkglzXlzdq M9P4YXDIZYqgbxvf1XIai0gn0i69SnSZuIeuHa4/DnlnhKydVE4/tokB3hONalLr 1n3Z4LImJPspqH2VQ1ur3h5psXj4uD3w4OchWFRnkiuxFFLanBIsXviMJHYGM/l4 mdZMiIR0jwdnZnReC+Nqbfy2AVb4xAt0HIELIe/4LT4PBmILz1Wt8mTe5IpDtIdM Y5FVUFXUX5J4Qs2GA00NIniL8ecZAiFu3c9Vn3AJqAt6qlkFAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoSyj324mU1zpf96k5u2IGblU7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmFiMGE4YWMtZTRiZi0z MmY4LWE3MjAtM2ZiYzQ1Njk3OGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqzvYv2SGDvAqwZH0DrjaXVG6Ywgn5lAkAbvHeys0Q+KsA7hnDh/IDq vpPmf91GH/nlUAGoU4KUR2tS0uoZgoGFyw971Ix+5vEd3mLVzcoJdGNjgJf4b4O0 7035AhpWOBFU5DEETrfKQvE6bvLA5URfBp89zraTZCwwVXire4S/RZ0Mo0Oc7GrW YwxzqDvKn/bI+Bl+5h2VkcS+omMnNffEYSPcCdbql+48KewYwlKpnATi+O+kT7WA YZilzlZOZXFhm8nlx2l/7/XUHiZ67pE7fnjPL62gkIiSPuFheKW8/4R0ZPF7sQok VT/C1c9L1MZJqO0MuJ8iw1rtq0stJsM= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:11 2025 by rpki-client