$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b712abf-b83c-350a-8814-4d89811b7585.roa File: 2b712abf-b83c-350a-8814-4d89811b7585.roa (raw, json) Hash identifier: oIY0UN2QVHS8Qbr8WJQ2XuUwyf9/NgVsZEdW7iMA0qQ= Subject key identifier: 8B:20:86:71:A1:AA:D1:AA:FC:71:26:B6:01:10:AD:D9:0C:0E:C3:FE Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682631538601F9FE975FD080 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b712abf-b83c-350a-8814-4d89811b7585.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397234 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:31:53:86:01:f9:fe:97:5f:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=42ea9874-c32f-4f59-9205-be1ce091bcad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:43:50:ff:fc:4c:e7:e1:41:e9:6b:7e:22: 7b:98:ec:be:32:fb:02:38:ce:77:39:1e:d2:1a:93: a5:d1:7c:ca:b4:ea:a2:3a:0a:bd:ce:db:a7:38:d1: 3c:d0:89:d7:11:04:bc:8b:44:86:c7:f0:fd:c6:09: 10:f2:61:8b:90:2d:78:dc:bc:91:e2:65:c5:6f:e5: db:40:d6:9c:b7:b7:4c:ff:af:2b:e7:f3:4b:e4:aa: 36:87:57:4b:7f:69:60:aa:2b:a7:f4:44:b0:33:ab: e0:21:bc:db:4b:69:65:a8:53:13:2a:c4:a6:5c:3f: 22:27:0e:1a:1c:b6:28:79:f4:cc:7a:39:a4:30:8f: 7d:47:c0:7e:60:75:14:ce:5f:6f:06:89:ff:88:00: 09:2f:77:5f:9c:32:2a:1a:ab:ab:f1:2b:94:cf:ef: 96:33:77:9a:06:e8:28:6f:ed:1f:91:fc:5b:f0:e5: 17:a3:93:04:03:66:9b:61:49:f2:2e:5d:e6:c9:25: ce:8b:c0:a3:ff:38:00:aa:f5:8d:aa:e4:5f:96:1a: 87:61:13:55:db:b3:a5:83:c2:58:9f:d6:b8:4b:54: 9c:73:56:c7:f9:e1:e9:a0:f6:8a:47:6f:22:d4:a0: 3f:48:0f:91:89:ee:c4:96:c8:5d:ac:70:26:bf:73: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:20:86:71:A1:AA:D1:AA:FC:71:26:B6:01:10:AD:D9:0C:0E:C3:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b712abf-b83c-350a-8814-4d89811b7585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c5:c6:df:33:2f:b4:5d:52:ef:9c:9b:d1:55:f1:a0:08:c4: e8:2c:f9:a4:da:2d:cb:6a:4e:cc:d5:b9:44:e1:5b:b3:73:f4: b1:41:4f:fb:c0:27:e6:4e:92:9f:3e:66:bd:cb:c3:3e:0e:66: 7f:e6:f7:24:aa:0b:d9:21:b5:b4:17:1c:ce:c3:a7:0d:58:df: c8:b3:42:a9:02:e6:69:a6:3c:e2:e3:c5:84:36:b0:b0:8d:27: 16:ac:62:29:00:53:c7:df:d3:8e:29:3f:73:c7:ed:3d:e9:ff: 17:e9:b6:14:87:f2:44:43:cb:a1:df:e4:6f:7a:ab:69:97:e7: 37:63:39:5d:34:22:11:72:83:c5:ff:7e:3e:79:c1:ac:38:2a: 49:73:da:b0:08:3b:d2:ec:9c:88:79:f1:c1:93:b2:5d:48:1c: 7d:ee:7a:8e:cf:21:17:ce:18:6c:cf:90:89:81:b3:71:de:e4: bd:83:b9:05:64:35:89:56:9c:98:1b:69:e0:d0:eb:81:2a:7b: cb:88:ae:04:64:27:88:e9:4f:de:cb:ce:eb:ad:e0:7f:1c:61: 9e:04:19:2b:de:aa:f3:40:6d:3c:b8:e6:56:2e:ed:58:e9:3c: d1:ff:f7:8a:b1:dd:d4:55:b4:25:34:d4:ce:5c:1a:3c:bf:f5: 60:9d:c8:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjFThgH5/pdf0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NDJlYTk4NzQtYzMyZi00ZjU5LTkyMDUtYmUxY2UwOTFiY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvppDUP/8TOfhQelrfiJ7mOy+MvsCOM53OR7S GpOl0XzKtOqiOgq9ztunONE80InXEQS8i0SGx/D9xgkQ8mGLkC143LyR4mXFb+Xb QNact7dM/68r5/NL5Ko2h1dLf2lgqiun9ESwM6vgIbzbS2llqFMTKsSmXD8iJw4a HLYoefTMejmkMI99R8B+YHUUzl9vBon/iAAJL3dfnDIqGqur8SuUz++WM3eaBugo b+0fkfxb8OUXo5MEA2abYUnyLl3mySXOi8Cj/zgAqvWNquRflhqHYRNV27Olg8JY n9a4S1Scc1bH+eHpoPaKR28i1KA/SA+Rie7ElshdrHAmv3NjmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsghnGhqtGq/HEmtgEQrdkMDsP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmI3MTJhYmYtYjgzYy0z NTBhLTg4MTQtNGQ4OTgxMWI3NTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/Fxt8zL7RdUu+cm9FV8aAIxOgs+aTaLctqTszVuUThW7Nz9LFBT/vA J+ZOkp8+Zr3Lwz4OZn/m9ySqC9khtbQXHM7Dpw1Y38izQqkC5mmmPOLjxYQ2sLCN JxasYikAU8ff044pP3PH7T3p/xfpthSH8kRDy6Hf5G96q2mX5zdjOV00IhFyg8X/ fj55waw4Kklz2rAIO9LsnIh58cGTsl1IHH3ueo7PIRfOGGzPkImBs3He5L2DuQVk NYlWnJgbaeDQ64Eqe8uIrgRkJ4jpT97Lzuut4H8cYZ4EGSveqvNAbTy45lYu7Vjp PNH/94qx3dRVtCU01M5cGjy/9WCdyDM= -----END CERTIFICATE-----Generated at Sun Jul 27 10:25:31 2025 by rpki-client