$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fc757b5-d6cf-3993-80cd-f855b1e0c0d3.roa File: 7fc757b5-d6cf-3993-80cd-f855b1e0c0d3.roa (raw, json) Hash identifier: rpdpC0U04mp2NClJcDzJptQTVDFtwfFMrB/OXwLh6As= Subject key identifier: DA:0A:A4:2D:98:92:4C:9A:6F:52:8B:31:E0:4F:BA:EF:37:30:0D:70 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0DD9E814E659ACE3A4E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fc757b5-d6cf-3993-80cd-f855b1e0c0d3.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397227 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:dd:9e:81:4e:65:9a:ce:3a:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=9498cc99-e952-4f61-ba22-3c6df4d01162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:57:7e:6f:ff:dc:fe:ed:25:04:bc:e5:f7: 22:60:b4:19:67:7d:a7:64:0f:54:ef:f0:c6:45:b2: 5f:96:a5:d4:42:a0:13:26:6f:4b:a1:a3:73:04:ef: e4:1f:a3:ff:16:03:3f:73:60:d2:b3:a3:2d:d6:46: a9:be:ce:e8:0d:a8:d3:08:32:a8:fa:1e:1f:92:72: 4f:d9:2b:a2:f2:5f:b4:fe:71:a5:a6:1e:10:17:b1: c0:0e:aa:d4:8c:e1:68:41:1a:a0:f6:79:30:94:c0: 57:bd:32:34:ff:3f:2c:9d:aa:ea:67:a4:2b:d7:d6: a9:7a:f9:29:5e:05:59:13:bf:31:6c:87:1e:d6:a5: c3:c7:c3:e2:fc:0e:f6:0f:43:70:2c:85:6f:d2:e7: 09:e9:c2:54:cf:3c:08:99:45:a3:dd:8f:06:24:70: ea:da:dc:b1:05:f8:42:78:cf:30:7b:d8:b4:38:90: b7:41:42:22:b5:22:d9:60:d1:d3:a0:26:90:07:eb: 84:70:a2:33:1c:14:33:f3:98:f0:cd:b9:bf:6d:20: 79:df:a1:b6:53:62:64:28:6f:cd:91:5b:7d:69:d7: 3d:55:b7:da:b8:79:e4:30:c2:5b:3b:27:f3:f9:85: 60:6e:f9:94:0a:10:80:42:36:68:96:a3:3d:d3:82: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0A:A4:2D:98:92:4C:9A:6F:52:8B:31:E0:4F:BA:EF:37:30:0D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fc757b5-d6cf-3993-80cd-f855b1e0c0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:92:80:19:c1:00:7f:8e:e1:1d:49:96:5d:5d:7f:18:f8:ef: 5b:68:0c:2b:7e:34:a8:5a:8b:14:77:fd:b1:60:a6:22:ac:43: e3:72:8d:88:d1:74:f6:bb:ac:18:de:e1:63:4e:77:c6:24:5f: df:cc:7d:0e:2f:41:b9:20:47:14:df:3d:1d:b1:4b:0c:66:58: 85:5d:9e:06:b2:bd:3a:c7:b7:c5:22:0a:5b:a9:5e:9c:44:66: 30:c3:50:2a:68:9f:c4:73:56:30:0a:b1:db:04:07:9c:02:c8: 30:29:9f:9d:84:e8:2c:80:f5:91:18:3f:48:eb:bc:31:81:fe: 07:21:40:8a:87:51:a6:97:56:ba:a2:43:a0:e2:87:2d:b1:ef: 59:94:1b:ca:50:bb:bd:75:8e:9c:3a:9c:e0:4a:df:33:48:27: 90:e7:46:bb:2d:c1:e4:99:36:0c:14:40:cf:b8:a3:36:6c:43: ce:ee:e8:e2:bf:ff:a8:ba:6d:eb:23:97:37:83:6b:c9:4b:4f: 04:66:e2:a7:0e:41:b9:bd:29:ac:0e:08:94:4d:96:d3:35:69: d0:48:1b:e9:05:7c:29:66:5a:bc:5f:33:0a:08:2a:d2:da:c3: f1:16:fb:d6:96:ca:86:b2:7e:a4:18:59:7e:41:ef:26:b7:bb: 99:6e:cb:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sN2egU5lms46ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OTQ5OGNjOTktZTk1Mi00ZjYxLWJhMjItM2M2ZGY0ZDAxMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6VXfm//3P7tJQS85fciYLQZZ32nZA9U7/DG RbJflqXUQqATJm9LoaNzBO/kH6P/FgM/c2DSs6Mt1kapvs7oDajTCDKo+h4fknJP 2Sui8l+0/nGlph4QF7HADqrUjOFoQRqg9nkwlMBXvTI0/z8snarqZ6Qr19apevkp XgVZE78xbIce1qXDx8Pi/A72D0NwLIVv0ucJ6cJUzzwImUWj3Y8GJHDq2tyxBfhC eM8we9i0OJC3QUIitSLZYNHToCaQB+uEcKIzHBQz85jwzbm/bSB536G2U2JkKG/N kVt9adc9VbfauHnkMMJbOyfz+YVgbvmUChCAQjZolqM904JYwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoKpC2Ykkyab1KLMeBPuu83MA1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvN2ZjNzU3YjUtZDZjZi0z OTkzLTgwY2QtZjg1NWIxZTBjMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2SgBnBAH+O4R1Jll1dfxj471toDCt+NKhaixR3/bFgpiKsQ+NyjYjR dPa7rBje4WNOd8YkX9/MfQ4vQbkgRxTfPR2xSwxmWIVdngayvTrHt8UiClupXpxE ZjDDUCpon8RzVjAKsdsEB5wCyDApn52E6CyA9ZEYP0jrvDGB/gchQIqHUaaXVrqi Q6Dihy2x71mUG8pQu711jpw6nOBK3zNIJ5DnRrstweSZNgwUQM+4ozZsQ87u6OK/ /6i6besjlzeDa8lLTwRm4qcOQbm9KawOCJRNltM1adBIG+kFfClmWrxfMwoIKtLa w/EW+9aWyoayfqQYWX5B7ya3u5luy4c= -----END CERTIFICATE-----Generated at Sun Jul 27 10:02:40 2025 by rpki-client