$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/484d79b3-27ec-391c-aac3-7b55a350ca4e.roa File: 484d79b3-27ec-391c-aac3-7b55a350ca4e.roa (raw, json) Hash identifier: zeJPBiwbxc4ym0OppLV9BltuZC6oKksG2RHfcv94l/I= Subject key identifier: CA:CE:FF:DA:D6:92:DD:43:88:99:CB:EB:5A:64:0D:E7:3C:BA:2B:F3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0E201C14A12D13908ED40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/484d79b3-27ec-391c-aac3-7b55a350ca4e.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397237 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:e2:01:c1:4a:12:d1:39:08:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=2eebe54e-d2fb-466c-9c56-20d05d2752a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:63:f5:5b:de:9f:49:94:b7:ea:5c:20:af:15: 06:c5:bb:f9:6c:a3:8b:d0:6b:6e:60:8e:b2:b1:e8: 6e:9a:e4:a1:60:f9:a3:b3:a3:71:73:30:da:06:2a: 1d:fb:41:f3:e0:ae:01:ee:b5:17:6c:62:9f:1e:cd: fd:ed:1c:c8:46:41:48:0f:55:37:64:62:9a:73:0d: 19:ea:93:82:59:75:7c:49:ca:07:59:fc:e2:29:f2: f9:94:c1:90:f8:b2:85:7c:44:f3:a7:03:35:57:12: b5:dc:0f:32:c2:ad:b8:d8:d0:b4:2a:ea:c1:0a:fc: 64:7c:5b:72:3e:8e:17:85:6e:37:c4:d6:17:9e:fd: c6:80:cd:ff:1d:ed:b5:81:01:eb:71:64:f8:9b:fe: df:57:77:0f:0c:8d:6a:40:1b:e8:a8:39:08:e6:b4: 81:63:a3:72:61:8c:18:b3:02:a0:9e:ff:8c:ad:e4: 94:0d:69:6f:13:4e:b0:79:cc:28:1e:cc:c5:3e:ec: 40:43:8e:ae:1f:44:50:24:4b:bd:8e:71:5d:f1:06: 2c:62:20:b4:7f:d4:dc:b6:ba:55:20:9a:d6:d8:45: 16:72:74:c0:48:41:83:b8:b5:28:03:0a:00:df:46: 7a:43:cf:8d:f0:34:ed:cf:c4:45:fe:2d:bc:65:14: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CE:FF:DA:D6:92:DD:43:88:99:CB:EB:5A:64:0D:E7:3C:BA:2B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/484d79b3-27ec-391c-aac3-7b55a350ca4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a1:8f:c1:68:ec:d5:79:1d:48:26:e6:52:8c:8a:ff:65:1e: b9:d4:f5:82:36:bc:66:bb:b4:27:a6:7e:49:a8:66:99:e3:56: 7d:ab:00:92:95:60:23:da:1e:aa:56:56:fb:0b:44:49:d2:d5: 43:df:c9:23:b8:76:86:04:15:ae:c0:f3:7b:64:e0:85:3c:eb: e0:fb:49:c0:8f:cb:10:6d:b5:ea:85:d5:98:52:50:cc:30:c7: fe:eb:6c:5c:b7:84:ac:8e:36:35:9f:08:b0:17:f2:36:74:66: 13:bd:fc:59:d6:9d:f9:fe:06:6f:d9:eb:a0:78:6c:c9:06:09: 54:3a:67:fb:5a:d8:93:37:09:a0:e9:e8:e7:5a:03:16:1b:a4: 97:dd:b4:d5:81:84:bf:5b:87:22:91:be:57:b4:e8:33:97:82: 74:00:e4:7b:a2:a1:95:bc:c7:99:89:7a:94:07:0a:bc:8b:53: 94:25:8c:92:8f:48:ad:b9:99:b2:b8:14:ba:99:f8:52:d8:09: 9c:c6:88:5d:e8:a1:45:ea:41:1f:93:00:5a:0e:e3:d1:d5:33: 43:16:c8:d1:ab:61:e9:4b:ff:7b:b3:4e:aa:4c:e2:1a:1e:9a: 98:f1:3b:0f:24:09:aa:ac:fd:98:36:80:5e:a6:e9:61:71:62: f0:fb:ee:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sOIBwUoS0TkI7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk MmVlYmU1NGUtZDJmYi00NjZjLTljNTYtMjBkMDVkMjc1MmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2P1W96fSZS36lwgrxUGxbv5bKOL0GtuYI6y sehumuShYPmjs6NxczDaBiod+0Hz4K4B7rUXbGKfHs397RzIRkFID1U3ZGKacw0Z 6pOCWXV8ScoHWfziKfL5lMGQ+LKFfETzpwM1VxK13A8ywq242NC0KurBCvxkfFty Po4XhW43xNYXnv3GgM3/He21gQHrcWT4m/7fV3cPDI1qQBvoqDkI5rSBY6NyYYwY swKgnv+MreSUDWlvE06wecwoHszFPuxAQ46uH0RQJEu9jnFd8QYsYiC0f9TctrpV IJrW2EUWcnTASEGDuLUoAwoA30Z6Q8+N8DTtz8RF/i28ZRTbzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrO/9rWkt1DiJnL61pkDec8uivzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDg0ZDc5YjMtMjdlYy0z OTFjLWFhYzMtN2I1NWEzNTBjYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKhj8Fo7NV5HUgm5lKMiv9lHrnU9YI2vGa7tCemfkmoZpnjVn2rAJKV YCPaHqpWVvsLREnS1UPfySO4doYEFa7A83tk4IU86+D7ScCPyxBtteqF1ZhSUMww x/7rbFy3hKyONjWfCLAX8jZ0ZhO9/FnWnfn+Bm/Z66B4bMkGCVQ6Z/ta2JM3CaDp 6OdaAxYbpJfdtNWBhL9bhyKRvle06DOXgnQA5HuioZW8x5mJepQHCryLU5QljJKP SK25mbK4FLqZ+FLYCZzGiF3ooUXqQR+TAFoO49HVM0MWyNGrYelL/3uzTqpM4hoe mpjxOw8kCaqs/Zg2gF6m6WFxYvD77u8= -----END CERTIFICATE-----Generated at Sun Jul 27 09:05:03 2025 by rpki-client