$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0323b5f4-8ffe-398b-b6a3-450f2f43a4b2.roa File: 0323b5f4-8ffe-398b-b6a3-450f2f43a4b2.roa (raw, json) Hash identifier: GtGO6miYnDpnQi2u5t2O+epsAyW8MjhYXycP8w9oI2g= Subject key identifier: DA:3A:7C:CE:E3:3D:0C:78:CF:B3:37:0E:38:A1:99:E8:92:76:A2:8A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0BBC1C73E2B46F84AD7C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0323b5f4-8ffe-398b-b6a3-450f2f43a4b2.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397222 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:bb:c1:c7:3e:2b:46:f8:4a:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=8dbfc0aa-87f2-4d02-b2b1-5db7416cd628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:89:0e:91:b8:b2:c1:53:63:eb:12:9e:dd: fa:ea:48:d4:20:0e:6a:9d:e4:b3:73:d7:7e:bf:91: c2:33:f8:ab:9f:77:fd:8a:ae:dc:01:67:42:34:8e: 33:59:f3:1e:5d:77:0a:df:17:2e:df:fa:73:dd:7c: e6:3b:f4:e3:61:e4:4e:4e:f2:51:23:64:34:0f:9c: 6a:bd:69:18:99:2d:fd:02:7b:6f:18:15:f0:e5:7c: 14:4d:d4:07:dc:25:6c:64:80:85:56:7f:4b:71:05: 95:f1:e1:b9:bf:df:fc:83:8f:d3:8a:89:ae:dc:13: b0:85:c6:75:6e:20:48:3b:a6:67:c9:bd:75:75:28: 6f:aa:7a:94:3a:d3:60:f4:36:b9:3d:77:9d:c2:30: de:f9:f1:e7:e2:40:96:c0:ac:88:ac:e7:9f:aa:8c: f3:e7:24:e8:50:32:bc:21:fe:c3:b5:5f:6b:97:d6: 19:cb:cd:08:82:46:68:d5:5d:fb:c7:a1:f4:8b:e3: 3d:c6:30:b9:7a:d1:cb:db:22:1f:79:db:41:18:2f: 7b:d1:22:e8:6d:95:8c:e3:b2:82:9c:a2:18:08:70: 4a:7b:26:35:f5:52:bd:54:cd:06:9b:64:68:25:30: c7:3d:5b:96:eb:8b:0f:7c:5b:77:82:fb:a5:55:7c: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3A:7C:CE:E3:3D:0C:78:CF:B3:37:0E:38:A1:99:E8:92:76:A2:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0323b5f4-8ffe-398b-b6a3-450f2f43a4b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f1:82:67:cf:0a:4b:bf:ed:65:9c:85:4a:4b:59:d3:99:10: 88:c5:c9:a1:1a:d6:ff:79:5e:b2:47:c5:c4:be:20:d9:3c:29: 52:25:e7:0c:f3:f5:e2:1a:b5:97:ea:d1:33:27:e5:cf:b7:0b: 85:d6:e4:dc:b1:48:f0:71:8d:3d:9c:9d:9d:ef:89:27:25:c2: f8:82:ed:6d:ca:61:ab:a7:ff:4d:0c:1a:d6:4b:91:30:87:83: 52:f1:f6:9e:ba:15:84:28:dc:54:85:f4:f7:61:64:81:87:ed: d0:03:f7:b4:e1:fe:4e:b0:f1:8f:57:00:8f:89:12:92:5f:50: 4b:a1:9e:1e:1d:34:95:b1:72:68:98:a8:60:28:9e:e2:0b:fa: d3:21:69:50:7b:c8:f8:f7:05:f6:a3:27:a4:b5:62:f0:ac:f4: 40:44:fb:5c:5c:00:78:a7:75:b6:4e:a9:f6:a6:d3:6c:a6:e0: 32:84:c3:57:ad:79:e3:93:0d:e7:87:80:0e:70:81:a4:8f:5b: 46:4e:db:5e:25:bc:bf:5a:60:c6:64:9b:39:58:05:01:53:ce: b4:0a:93:47:82:73:59:a3:47:13:4a:b3:63:71:e1:f3:b8:98: ab:6c:e2:e5:dd:ed:e1:80:d4:27:87:44:b1:59:e7:96:11:dd: 7e:de:76:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLvBxz4rRvhK18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OGRiZmMwYWEtODdmMi00ZDAyLWIyYjEtNWRiNzQxNmNkNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRmJDpG4ssFTY+sSnt366kjUIA5qneSzc9d+ v5HCM/irn3f9iq7cAWdCNI4zWfMeXXcK3xcu3/pz3XzmO/TjYeROTvJRI2Q0D5xq vWkYmS39AntvGBXw5XwUTdQH3CVsZICFVn9LcQWV8eG5v9/8g4/Tiomu3BOwhcZ1 biBIO6Znyb11dShvqnqUOtNg9Da5PXedwjDe+fHn4kCWwKyIrOefqozz5yToUDK8 If7DtV9rl9YZy80IgkZo1V37x6H0i+M9xjC5etHL2yIfedtBGC970SLobZWM47KC nKIYCHBKeyY19VK9VM0Gm2RoJTDHPVuW64sPfFt3gvulVXy3LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo6fM7jPQx4z7M3DjihmeiSdqKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDMyM2I1ZjQtOGZmZS0z OThiLWI2YTMtNDUwZjJmNDNhNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzxgmfPCku/7WWchUpLWdOZEIjFyaEa1v95XrJHxcS+INk8KVIl5wzz 9eIatZfq0TMn5c+3C4XW5NyxSPBxjT2cnZ3viSclwviC7W3KYaun/00MGtZLkTCH g1Lx9p66FYQo3FSF9PdhZIGH7dAD97Th/k6w8Y9XAI+JEpJfUEuhnh4dNJWxcmiY qGAonuIL+tMhaVB7yPj3BfajJ6S1YvCs9EBE+1xcAHindbZOqfam02ym4DKEw1et eeOTDeeHgA5wgaSPW0ZO214lvL9aYMZkmzlYBQFTzrQKk0eCc1mjRxNKs2Nx4fO4 mKts4uXd7eGA1CeHRLFZ55YR3X7edtk= -----END CERTIFICATE-----Generated at Sun Jul 20 14:49:54 2025 by rpki-client