$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c2b7c58-17bc-3e10-b9fb-ddf59a30990a.roa File: 3c2b7c58-17bc-3e10-b9fb-ddf59a30990a.roa (raw, json) Hash identifier: acO7/76CbruUnhnmi7z1HlATIpuJwGfXGnLUEdExR40= Subject key identifier: 24:AA:1B:D6:3D:A4:A3:C1:C1:03:C9:6F:B1:C5:EA:64:BD:57:61:F2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682632102C07729AAAE6CB40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c2b7c58-17bc-3e10-b9fb-ddf59a30990a.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397215 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:32:10:2c:07:72:9a:aa:e6:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=0c36810f-2c92-48be-baa9-30307a6db38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:ca:7d:7e:b4:72:52:4c:4e:a3:a2:4f:57: 5e:55:8d:9a:7c:b2:62:60:74:72:0f:a0:40:e1:0c: 4e:81:48:44:8f:ee:89:e6:d0:ed:89:23:98:e6:41: 36:8b:6a:6e:5d:ae:0c:7f:6b:65:54:5a:63:dc:da: e3:8f:81:b1:e6:a4:4d:b4:9f:f1:d4:3f:12:f0:a7: 89:b5:4a:88:c0:65:38:87:0d:f0:f1:c2:70:5b:4b: 95:74:f3:24:3a:a9:5f:c2:fd:ec:35:35:77:f4:00: 90:89:1f:1b:ff:73:cc:da:68:b6:26:d9:29:fb:95: 9e:01:5a:74:a7:4a:2a:00:4f:94:4b:8c:d2:42:3e: d6:65:e4:e5:8d:0e:fc:8e:99:da:72:ce:87:c5:de: 48:10:5b:39:36:5b:48:62:7f:c8:a3:56:85:b1:71: 9c:17:c0:a0:b2:a4:69:8d:44:a4:9b:d8:29:c6:85: 88:16:58:d0:f2:8b:31:9a:0c:7a:3d:09:df:4d:68: cf:0a:42:0f:28:c8:f9:9e:da:e5:65:b4:11:4b:46: 4c:c3:2a:18:2d:97:0b:19:1e:d2:42:c9:43:e5:a6: 68:1c:7b:fd:0a:d6:aa:88:30:13:a8:70:75:18:c4: d4:93:cb:92:99:64:e9:30:ec:bc:a0:03:12:f9:6c: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:1B:D6:3D:A4:A3:C1:C1:03:C9:6F:B1:C5:EA:64:BD:57:61:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3c2b7c58-17bc-3e10-b9fb-ddf59a30990a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9a:41:89:82:31:49:78:0a:fb:6b:05:cc:84:75:2d:3e:9e: f3:7e:cc:44:b5:6f:59:c4:66:bd:08:08:c2:4d:b2:e7:87:a2: 17:97:45:2f:a2:af:bc:52:08:91:43:bb:71:55:da:1a:df:ae: cc:e6:fe:02:0a:d5:7f:59:db:cd:56:5f:42:83:61:9a:dd:28: 56:0e:d3:78:1e:0f:d2:9c:af:44:43:de:4f:65:48:4d:60:58: 73:bc:ba:3e:02:48:04:97:0a:55:91:28:ef:0d:9b:86:62:de: 96:30:b0:cb:09:9a:65:7a:37:b5:65:56:be:7c:99:63:1b:ee: 4e:13:4c:76:75:02:fb:e4:17:38:d0:fd:e5:34:e7:b7:f6:2d: 7b:8b:3d:ba:8a:84:fe:56:90:54:a4:0a:03:4e:2e:29:9c:98: b9:e3:3b:89:17:55:88:9d:01:38:68:0d:59:8f:fa:6b:18:dd: 42:7a:41:6e:82:2f:7b:b5:4c:2f:9e:c8:09:11:84:66:37:5a: 59:c9:20:36:b2:4f:74:3e:2d:6c:51:66:62:6e:73:66:df:3d: e4:7d:af:d6:26:74:06:b4:a2:cd:6c:cf:d4:b8:c2:8a:8f:55: 8e:3f:59:47:41:bb:db:67:af:e2:08:fe:9f:30:44:8f:6d:7b: 34:e6:21:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjIQLAdymqrmy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MGMzNjgxMGYtMmM5Mi00OGJlLWJhYTktMzAzMDdhNmRiMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhzKfX60clJMTqOiT1deVY2afLJiYHRyD6BA 4QxOgUhEj+6J5tDtiSOY5kE2i2puXa4Mf2tlVFpj3Nrjj4Gx5qRNtJ/x1D8S8KeJ tUqIwGU4hw3w8cJwW0uVdPMkOqlfwv3sNTV39ACQiR8b/3PM2mi2Jtkp+5WeAVp0 p0oqAE+US4zSQj7WZeTljQ78jpnacs6Hxd5IEFs5NltIYn/Io1aFsXGcF8CgsqRp jUSkm9gpxoWIFljQ8osxmgx6PQnfTWjPCkIPKMj5ntrlZbQRS0ZMwyoYLZcLGR7S QslD5aZoHHv9CtaqiDATqHB1GMTUk8uSmWTpMOy8oAMS+WxpjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSqG9Y9pKPBwQPJb7HF6mS9V2HyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2MyYjdjNTgtMTdiYy0z ZTEwLWI5ZmItZGRmNTlhMzA5OTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASaQYmCMUl4CvtrBcyEdS0+nvN+zES1b1nEZr0ICMJNsueHoheXRS+i r7xSCJFDu3FV2hrfrszm/gIK1X9Z281WX0KDYZrdKFYO03geD9Kcr0RD3k9lSE1g WHO8uj4CSASXClWRKO8Nm4Zi3pYwsMsJmmV6N7VlVr58mWMb7k4TTHZ1AvvkFzjQ /eU057f2LXuLPbqKhP5WkFSkCgNOLimcmLnjO4kXVYidAThoDVmP+msY3UJ6QW6C L3u1TC+eyAkRhGY3WlnJIDayT3Q+LWxRZmJuc2bfPeR9r9YmdAa0os1sz9S4woqP VY4/WUdBu9tnr+II/p8wRI9tezTmIcc= -----END CERTIFICATE-----Generated at Sun Jul 27 10:01:00 2025 by rpki-client