$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3707a045-3ba1-3801-a750-36fb54abfe7c.roa File: 3707a045-3ba1-3801-a750-36fb54abfe7c.roa (raw, json) Hash identifier: eWiLI1dom8XxgLGfp6Ythb0Wawq1eN/p6VyK42JA7Qc= Subject key identifier: 6F:E9:64:D5:D8:6F:E0:40:28:22:19:3C:8C:A3:35:88:2F:F8:AC:C4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0DF5B99A85038A26AA280 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3707a045-3ba1-3801-a750-36fb54abfe7c.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397224 IP address blocks: 156.154.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:df:5b:99:a8:50:38:a2:6a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=6f0c1226-5b42-4db6-97f9-97a335e0cc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:5f:8d:31:c9:23:ff:85:c6:1d:ef:a8:d9: 36:24:46:71:05:d2:f0:2c:27:0b:da:2c:41:2c:bf: a6:14:3f:7e:7c:23:7e:95:2e:29:87:a7:61:55:3b: fd:36:d5:b0:c7:86:67:01:d7:b9:b0:ad:6a:ac:7d: 4e:38:21:ce:67:c1:72:fc:d4:66:29:d0:57:1e:b7: fd:6c:0b:ff:ae:f6:55:3d:26:45:9a:24:cb:36:31: e8:fc:9c:4f:3b:50:1d:d8:8e:04:bf:01:60:e5:5f: 97:39:5c:b4:4d:41:0a:05:59:ec:a0:ac:cd:68:ac: 11:81:c3:47:f2:2e:36:66:dc:ce:88:31:12:9c:c1: 0b:19:ea:c7:f4:6c:4a:c3:47:4f:39:c7:7d:a9:3e: e9:96:7d:71:bc:29:59:a2:4e:61:65:5f:62:19:24: d5:20:f2:1e:0f:a0:08:35:1d:01:4a:de:2a:85:4a: 57:58:81:c7:9d:2e:35:e7:0f:6d:b2:ac:78:1d:9b: eb:05:6f:dc:c7:15:e5:e2:6f:e3:f5:32:9b:ba:34: 05:1d:64:3b:ef:cc:51:a4:77:11:36:4d:a4:b0:9e: 96:9a:0b:04:b3:65:01:da:8f:2b:aa:bc:a1:ed:02: 63:31:97:ff:f3:c4:ef:aa:f6:2f:f7:a7:a0:bb:db: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E9:64:D5:D8:6F:E0:40:28:22:19:3C:8C:A3:35:88:2F:F8:AC:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3707a045-3ba1-3801-a750-36fb54abfe7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b0:21:b2:2c:63:38:ad:10:ab:ef:18:f9:71:f8:83:f1:08: 20:36:a1:e9:cf:5f:a9:61:98:24:fd:be:30:1e:66:69:d4:62: 0c:49:d5:39:7e:67:9e:cc:37:83:26:72:8d:53:5e:26:fb:44: 76:76:e7:13:97:0f:b5:a5:ff:3d:98:ee:90:31:e3:d6:74:fe: 20:ef:c1:2e:97:4b:e0:b7:2a:4f:73:90:37:5a:53:01:32:db: dc:19:c6:90:05:e1:38:0a:9a:58:77:27:25:98:9c:2b:68:6a: e8:17:fe:1c:4e:79:c0:6e:9e:f5:d8:0f:b4:fa:a5:c8:9f:b9: c6:a4:f1:8a:f6:94:4e:8f:a7:31:34:3a:a1:2a:77:aa:73:92: 82:4f:b0:f8:e5:ba:ea:20:52:ad:5e:fb:03:2f:1f:85:2a:96: 96:5c:c8:3f:34:a9:a5:a8:af:4d:0a:6b:d0:24:4a:4e:28:8b: d7:c2:81:1c:bb:80:e8:2e:eb:ff:61:97:1e:78:c0:0b:39:2a: a5:63:1d:8f:76:b3:dd:53:69:2d:86:a6:a6:ee:56:cf:42:15: ed:71:50:44:34:dc:99:01:db:a7:72:f9:ba:5c:66:d0:71:93: 05:b1:25:8b:19:a3:8e:40:e7:ef:02:22:c2:45:0b:8a:9d:fa: 10:76:65:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sN9bmahQOKJqooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk NmYwYzEyMjYtNWI0Mi00ZGI2LTk3ZjktOTdhMzM1ZTBjYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOlfjTHJI/+Fxh3vqNk2JEZxBdLwLCcL2ixB LL+mFD9+fCN+lS4ph6dhVTv9NtWwx4ZnAde5sK1qrH1OOCHOZ8Fy/NRmKdBXHrf9 bAv/rvZVPSZFmiTLNjHo/JxPO1Ad2I4EvwFg5V+XOVy0TUEKBVnsoKzNaKwRgcNH 8i42ZtzOiDESnMELGerH9GxKw0dPOcd9qT7pln1xvClZok5hZV9iGSTVIPIeD6AI NR0BSt4qhUpXWIHHnS415w9tsqx4HZvrBW/cxxXl4m/j9TKbujQFHWQ778xRpHcR Nk2ksJ6WmgsEs2UB2o8rqryh7QJjMZf/88TvqvYv96egu9uUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/pZNXYb+BAKCIZPIyjNYgv+KzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzcwN2EwNDUtM2JhMS0z ODAxLWE3NTAtMzZmYjU0YWJmZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABawIbIsYzitEKvvGPlx+IPxCCA2oenPX6lhmCT9vjAeZmnUYgxJ1Tl+ Z57MN4Mmco1TXib7RHZ25xOXD7Wl/z2Y7pAx49Z0/iDvwS6XS+C3Kk9zkDdaUwEy 29wZxpAF4TgKmlh3JyWYnCtoaugX/hxOecBunvXYD7T6pcifucak8Yr2lE6PpzE0 OqEqd6pzkoJPsPjluuogUq1e+wMvH4UqlpZcyD80qaWor00Ka9AkSk4oi9fCgRy7 gOgu6/9hlx54wAs5KqVjHY92s91TaS2GpqbuVs9CFe1xUEQ03JkB26dy+bpcZtBx kwWxJYsZo45A5+8CIsJFC4qd+hB2ZTM= -----END CERTIFICATE-----Generated at Sun Jul 27 09:09:28 2025 by rpki-client