$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa File: 3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa (raw, json) Hash identifier: 37KAuTobgBn3apEe+irUhKWudNuYwyPAHidBXIg2bjg= Subject key identifier: E8:EE:1B:25:8B:17:45:39:3C:8E:DA:B0:45:CB:FE:61:E9:AB:A9:10 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A6826356FC02481A7B0777A40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397241 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:35:6f:c0:24:81:a7:b0:77:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=354d6e8a-9c8e-4e42-aa83-73ca2c6a9692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:ad:a2:d1:da:5f:e9:bb:1f:c8:1b:53:19: 5a:95:34:e9:f0:b4:16:3b:1e:d0:0f:ed:ac:c1:9b: bf:2a:6f:3a:2c:3e:bb:04:d2:88:35:e8:cb:7f:05: 2a:76:21:f6:2e:5c:ff:f6:61:65:a6:32:8f:d3:b4: 9b:d5:ad:ab:93:49:57:04:ec:39:93:f8:eb:5e:eb: 03:cb:f5:05:50:04:81:79:0a:fb:e1:b7:4e:16:8c: d6:83:af:3f:b8:e6:7f:ad:a4:f2:92:b9:f7:19:bc: 60:f1:b1:dd:e4:08:7f:15:11:39:75:59:2e:c4:53: 99:a7:c1:9d:f5:19:57:52:31:9a:82:31:06:a1:26: 38:69:38:d5:2b:f8:ab:f3:65:a2:61:ff:62:ea:30: 91:1e:15:90:6d:b6:8b:8f:52:d6:c4:bc:c2:c0:01: 12:60:30:08:6b:66:f5:c7:6e:7e:19:06:d7:bd:07: b7:63:2f:81:3e:36:ce:a7:ae:46:f7:51:37:d5:26: 76:07:57:fe:ec:3e:94:b2:a0:59:71:d6:cb:98:63: 45:47:77:3c:44:46:63:af:44:47:eb:b2:b3:68:58: 20:c2:38:ad:35:6e:31:9c:ad:b0:25:26:76:07:3b: 49:6e:74:90:32:68:58:c1:8b:6c:39:b8:c7:f3:a9: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EE:1B:25:8B:17:45:39:3C:8E:DA:B0:45:CB:FE:61:E9:AB:A9:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e9d764e-5bf3-3ed3-a590-5deb6d47e696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1f:c8:75:d3:8b:e8:73:6f:b5:67:67:7d:b6:19:6d:63:ff: 80:09:84:b7:38:30:16:ab:ef:3c:22:0d:7a:51:72:ac:ef:d4: 3d:24:b3:66:b2:f3:63:12:ea:3e:d7:53:bc:85:cc:42:04:0f: dd:20:8a:94:40:da:fc:7d:28:83:c9:a3:d1:f2:65:dc:fe:13: 5e:7f:44:31:98:0b:8b:a0:3a:ea:36:ed:b2:23:c0:2c:cb:29: 22:e3:a1:53:9e:11:e5:00:d5:45:8f:d5:c7:27:7d:41:52:d0: 2a:85:99:35:c8:11:8d:ce:1a:60:c0:7b:bd:02:31:df:16:6b: 0f:ca:31:3a:d9:9d:a3:3e:76:2d:76:eb:93:d6:3a:68:cb:99: 0c:de:84:96:8c:1c:5d:69:28:0b:a9:15:02:bf:8f:c1:07:71: 02:52:f1:4c:8f:4c:c3:6c:b3:36:01:b3:03:e1:5e:be:81:8c: ef:3a:36:b4:5c:a3:cd:aa:05:91:33:c3:2b:68:77:0b:63:19: 1b:e1:84:2b:6e:d5:e2:22:e2:3a:cc:b3:0a:2c:15:b3:b6:28: 27:e7:44:44:28:15:4d:4d:d5:01:ba:d8:64:83:b8:dd:51:67: 55:98:77:4f:14:dc:a1:97:30:db:c9:96:aa:b7:e1:d8:5a:f6: 26:37:78:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjVvwCSBp7B3ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MzU0ZDZlOGEtOWM4ZS00ZTQyLWFhODMtNzNjYTJjNmE5NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpKtotHaX+m7H8gbUxlalTTp8LQWOx7QD+2s wZu/Km86LD67BNKINejLfwUqdiH2Llz/9mFlpjKP07Sb1a2rk0lXBOw5k/jrXusD y/UFUASBeQr74bdOFozWg68/uOZ/raTykrn3Gbxg8bHd5Ah/FRE5dVkuxFOZp8Gd 9RlXUjGagjEGoSY4aTjVK/ir82WiYf9i6jCRHhWQbbaLj1LWxLzCwAESYDAIa2b1 x25+GQbXvQe3Yy+BPjbOp65G91E31SZ2B1f+7D6UsqBZcdbLmGNFR3c8REZjr0RH 67KzaFggwjitNW4xnK2wJSZ2BztJbnSQMmhYwYtsObjH86muBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjuGyWLF0U5PI7asEXL/mHpq6kQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2U5ZDc2NGUtNWJmMy0z ZWQzLWE1OTAtNWRlYjZkNDdlNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwfyHXTi+hzb7VnZ322GW1j/4AJhLc4MBar7zwiDXpRcqzv1D0ks2ay 82MS6j7XU7yFzEIED90gipRA2vx9KIPJo9HyZdz+E15/RDGYC4ugOuo27bIjwCzL KSLjoVOeEeUA1UWP1ccnfUFS0CqFmTXIEY3OGmDAe70CMd8Waw/KMTrZnaM+di12 65PWOmjLmQzehJaMHF1pKAupFQK/j8EHcQJS8UyPTMNsszYBswPhXr6BjO86NrRc o82qBZEzwytodwtjGRvhhCtu1eIi4jrMswosFbO2KCfnREQoFU1N1QG62GSDuN1R Z1WYd08U3KGXMNvJlqq34dha9iY3eFM= -----END CERTIFICATE-----Generated at Sun Jul 27 10:09:54 2025 by rpki-client