$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e2e7610-4939-3988-97f7-0cfa3f5735e9.roa File: 3e2e7610-4939-3988-97f7-0cfa3f5735e9.roa (raw, json) Hash identifier: 0tEN9duTl27BJyAZGAuL1yN3JPbTFj1HCYkTsoOVq7w= Subject key identifier: 49:75:FD:A7:FB:35:89:BF:6F:E0:B9:19:26:9D:2D:67:48:2D:1A:05 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0CEA44040E781253A2E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e2e7610-4939-3988-97f7-0cfa3f5735e9.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397234 IP address blocks: 156.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:ce:a4:40:40:e7:81:25:3a:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=de03deeb-13d9-46b5-983b-09f628fe5820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:8a:ee:eb:73:30:8e:5b:44:4e:4a:99:9d: 99:8f:db:40:8e:c1:c9:3d:49:8b:84:54:6d:5a:31: f0:46:20:9c:80:8d:26:d2:68:b9:36:02:21:3f:14: ff:c6:97:d5:ae:c9:f3:72:b8:ba:cf:62:b1:e9:49: e8:30:39:91:a5:c8:a6:1d:ae:0c:43:57:26:41:47: d0:ee:8b:7d:b7:b5:2e:7f:d9:b3:8c:b3:8d:db:bc: 4b:5d:f6:7e:dc:a1:78:9d:b3:be:fd:8c:db:ff:23: 41:e7:cf:55:12:fd:61:b8:54:6c:e9:a8:7d:7e:74: d6:26:88:7b:2d:f0:be:30:de:28:ad:1d:fe:35:41: bf:67:f6:4b:82:2c:dd:e0:f8:34:d8:53:33:c0:dd: 3e:41:99:5c:35:fe:c4:08:2f:e1:6b:da:e1:85:07: c4:f7:fa:bd:d0:c5:ab:d5:cc:1d:85:f6:e8:f5:52: 30:3d:03:c1:f4:fa:26:21:d5:96:88:0a:62:84:c8: d4:6b:e8:cc:f9:94:a7:e2:68:ff:1f:cd:cd:6d:b6: e9:03:ca:22:d2:27:ce:90:00:f1:bd:fb:59:da:07: 13:5a:32:7b:23:af:40:80:ad:46:91:56:6d:f7:3d: b9:12:5b:1b:9f:31:31:5a:d3:32:ec:70:90:c0:3e: 3e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:75:FD:A7:FB:35:89:BF:6F:E0:B9:19:26:9D:2D:67:48:2D:1A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e2e7610-4939-3988-97f7-0cfa3f5735e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:04:b7:a9:73:ae:dc:6b:d0:e6:e0:98:e6:a2:c4:43:99:48: eb:b8:38:dc:35:87:cd:3f:70:55:a6:6e:dd:9e:79:b2:0a:e5: a0:f2:2b:a6:93:77:1f:7c:7e:28:f9:61:4c:9d:36:94:e3:b1: bf:06:a2:79:8f:b2:1b:fb:4a:b9:1c:08:4f:28:16:de:b3:27: 6c:8e:15:89:ba:e3:85:65:69:56:3e:39:c1:31:9a:c3:a7:61: 8c:9b:9d:c3:6d:54:16:18:d8:75:c2:ba:de:8d:ac:39:9e:04: 82:f8:79:9b:bf:af:9e:cb:4f:53:de:ba:90:be:c7:09:a7:a9: 9c:f1:24:af:98:d3:c6:b3:27:c0:c5:95:3f:2f:5c:b9:c5:77: 13:d7:72:44:26:f8:92:4e:60:a8:f1:de:fe:22:13:e3:cf:d8: d8:db:0c:2d:88:65:2a:c1:75:66:4c:ed:45:a2:34:89:4e:38: 25:b4:13:b3:5e:e8:11:55:df:64:a9:34:8f:eb:a8:a6:4c:c7: 8d:9e:bd:f0:d1:e7:05:0e:95:79:f5:54:91:a0:87:b8:b3:7a: ac:d1:fe:a6:31:2f:28:57:f1:e6:e4:48:6d:bf:c8:59:4d:45: 9a:16:eb:53:df:29:61:07:d5:f2:60:38:8e:5e:1b:53:c6:91: 7c:20:2f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sM6kQEDngSU6LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZGUwM2RlZWItMTNkOS00NmI1LTk4M2ItMDlmNjI4ZmU1ODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaKK7utzMI5bRE5KmZ2Zj9tAjsHJPUmLhFRt WjHwRiCcgI0m0mi5NgIhPxT/xpfVrsnzcri6z2Kx6UnoMDmRpcimHa4MQ1cmQUfQ 7ot9t7Uuf9mzjLON27xLXfZ+3KF4nbO+/Yzb/yNB589VEv1huFRs6ah9fnTWJoh7 LfC+MN4orR3+NUG/Z/ZLgizd4Pg02FMzwN0+QZlcNf7ECC/ha9rhhQfE9/q90MWr 1cwdhfbo9VIwPQPB9PomIdWWiApihMjUa+jM+ZSn4mj/H83NbbbpA8oi0ifOkADx vftZ2gcTWjJ7I69AgK1GkVZt9z25ElsbnzExWtMy7HCQwD4+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl1/af7NYm/b+C5GSadLWdILRoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2UyZTc2MTAtNDkzOS0z OTg4LTk3ZjctMGNmYTNmNTczNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAEt6lzrtxr0ObgmOaixEOZSOu4ONw1h80/cFWmbt2eebIK5aDyK6aT dx98fij5YUydNpTjsb8GonmPshv7SrkcCE8oFt6zJ2yOFYm644VlaVY+OcExmsOn YYybncNtVBYY2HXCut6NrDmeBIL4eZu/r57LT1PeupC+xwmnqZzxJK+Y08azJ8DF lT8vXLnFdxPXckQm+JJOYKjx3v4iE+PP2NjbDC2IZSrBdWZM7UWiNIlOOCW0E7Ne 6BFV32SpNI/rqKZMx42evfDR5wUOlXn1VJGgh7izeqzR/qYxLyhX8ebkSG2/yFlN RZoW61PfKWEH1fJgOI5eG1PGkXwgL34= -----END CERTIFICATE-----Generated at Sun Jul 27 12:06:42 2025 by rpki-client