$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7ceb6845-4d49-3adb-9334-4365362de7ab.roa File: 7ceb6845-4d49-3adb-9334-4365362de7ab.roa (raw, json) Hash identifier: 5QBfY7s9hChjbVDwu5kyzYAe51aQajNMLW0frkSZVao= Subject key identifier: 6C:91:CA:EB:17:23:CB:4B:CE:D6:FB:2C:60:DB:D1:73:37:FD:59:7D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682622DC6C2DD0DD8F751158 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7ceb6845-4d49-3adb-9334-4365362de7ab.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397222 IP address blocks: 156.154.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:22:dc:6c:2d:d0:dd:8f:75:11:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=5da1a56d-ec17-402e-8e1f-5d115cd143ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:65:c6:20:6c:7f:85:e4:d6:03:6e:3f:7d:3b: 17:36:e7:51:7c:22:20:45:07:0c:60:18:5e:82:b6: f4:99:2a:95:a3:dd:5a:25:4c:f8:2e:59:cc:e9:20: 01:d1:aa:39:01:2a:67:d3:b3:2a:5e:95:5a:39:07: ce:4a:59:e3:28:ff:89:b6:f4:27:b6:b1:8f:db:51: 65:5a:56:5e:d5:27:b7:ca:25:e3:bf:73:8c:3e:4d: b9:a8:d1:9c:89:c0:c6:73:01:af:e7:99:d8:c0:e9: e4:d1:4f:d5:fa:81:f4:fa:09:f0:50:34:d6:f2:05: 57:49:98:07:54:1e:96:80:0b:40:20:aa:cf:9b:8f: 39:d6:e0:db:47:77:1e:ce:5d:8e:d8:c6:de:0b:86: c7:af:60:ac:6c:61:ce:72:03:41:13:53:e2:9f:41: b0:9a:c6:f2:3d:f6:4d:56:7b:d7:bf:a4:75:cf:76: 1a:d3:78:b9:6e:ce:81:85:0a:02:6c:73:3c:45:78: 1a:6c:89:60:9e:ce:1f:f1:d3:39:b2:01:68:16:b7: d4:d6:27:fc:cf:58:c2:6b:88:eb:d1:a2:68:bc:0a: 2a:51:89:6f:10:39:20:08:0c:d9:ba:4d:bf:17:17: 04:fa:70:f0:8f:08:77:99:b1:5c:3a:34:e3:83:c4: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:91:CA:EB:17:23:CB:4B:CE:D6:FB:2C:60:DB:D1:73:37:FD:59:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7ceb6845-4d49-3adb-9334-4365362de7ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:62:19:0e:02:25:18:c4:69:92:a5:44:b1:0d:26:40:77:d5: be:16:e3:ae:c8:bb:f8:ed:38:12:11:a2:0b:2d:4e:07:d1:ea: 44:1b:e1:e4:e6:60:60:7f:35:ed:96:76:79:40:f7:2e:eb:ac: 44:c2:2d:d0:cd:8f:e1:4c:d8:c0:d1:ce:ad:44:d6:8a:42:06: 2e:a5:06:0f:b8:c5:5c:2f:5c:53:fb:1d:b6:80:91:3c:ad:59: ec:68:ff:d1:d1:43:c1:09:33:08:cd:2d:63:f7:e9:aa:4e:81: 48:a8:14:70:d9:a5:bf:cc:5f:c4:1f:b6:b1:ac:c3:da:60:58: b3:a2:8e:e3:64:e7:cb:d1:ac:c2:31:0d:dc:1e:ba:fa:57:36: 28:e2:54:97:b4:ba:c2:39:17:00:2c:ce:18:8e:c3:ca:e5:64: f4:e7:67:a0:ba:26:f9:b1:d9:76:00:f0:ef:c7:01:ae:92:e5: c4:10:39:d1:0a:98:52:d7:35:8d:77:b7:b2:a7:02:ef:fd:45: 20:22:d7:9f:38:7c:6d:68:87:51:22:1c:de:94:34:01:a0:ff: 92:69:a4:12:03:7a:b5:36:c8:3d:ef:52:21:35:99:cc:72:5e: fb:6e:3e:0b:f4:9f:4d:75:6b:3f:82:c1:b0:24:e0:40:dc:64: f4:1b:55:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJiLcbC3Q3Y91EVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NWRhMWE1NmQtZWMxNy00MDJlLThlMWYtNWQxMTVjZDE0M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2XGIGx/heTWA24/fTsXNudRfCIgRQcMYBhe grb0mSqVo91aJUz4LlnM6SAB0ao5ASpn07MqXpVaOQfOSlnjKP+JtvQntrGP21Fl WlZe1Se3yiXjv3OMPk25qNGcicDGcwGv55nYwOnk0U/V+oH0+gnwUDTW8gVXSZgH VB6WgAtAIKrPm4851uDbR3cezl2O2MbeC4bHr2CsbGHOcgNBE1Pin0GwmsbyPfZN VnvXv6R1z3Ya03i5bs6BhQoCbHM8RXgabIlgns4f8dM5sgFoFrfU1if8z1jCa4jr 0aJovAoqUYlvEDkgCAzZuk2/FxcE+nDwjwh3mbFcOjTjg8TgQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyRyusXI8tLztb7LGDb0XM3/Vl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2NlYjY4NDUtNGQ0OS0z YWRiLTkzMzQtNDM2NTM2MmRlN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZiGQ4CJRjEaZKlRLENJkB31b4W467Iu/jtOBIRogstTgfR6kQb4eTm YGB/Ne2WdnlA9y7rrETCLdDNj+FM2MDRzq1E1opCBi6lBg+4xVwvXFP7HbaAkTyt Wexo/9HRQ8EJMwjNLWP36apOgUioFHDZpb/MX8QftrGsw9pgWLOijuNk58vRrMIx DdweuvpXNijiVJe0usI5FwAszhiOw8rlZPTnZ6C6Jvmx2XYA8O/HAa6S5cQQOdEK mFLXNY13t7KnAu/9RSAi1584fG1oh1EiHN6UNAGg/5JppBIDerU2yD3vUiE1mcxy XvtuPgv0n011az+CwbAk4EDcZPQbVS8= -----END CERTIFICATE-----Generated at Sun Jul 20 14:49:52 2025 by rpki-client