$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/864a55c6-e5ea-3a8f-a0a5-f1c2543cb383.roa File: 864a55c6-e5ea-3a8f-a0a5-f1c2543cb383.roa (raw, json) Hash identifier: FdpQ+0EdMjbFX8UVyEB1xD8wR7JlpOC26wjCX22zECw= Subject key identifier: 27:3A:B7:FC:0B:E2:7A:32:9B:16:F3:21:39:91:55:C1:91:9C:E6:04 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0B9AA304420FB3F7C0A80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/864a55c6-e5ea-3a8f-a0a5-f1c2543cb383.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397222 IP address blocks: 156.154.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b9:aa:30:44:20:fb:3f:7c:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=cf89096f-5b41-4f91-b90d-d242ba5c1ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:9f:b1:eb:a1:67:c5:ea:5e:f6:ac:0c:38: 3e:de:5b:08:8e:ee:33:0f:f8:4a:d8:6c:dd:3f:99: ce:c7:c9:d5:e2:0e:6f:e2:f8:4b:03:85:0f:fc:77: 79:b9:b4:05:e5:b4:1a:af:ee:32:ec:24:09:5d:4a: 46:9b:d1:e5:eb:da:63:a4:e6:a1:06:07:db:08:e6: dd:07:55:46:05:e7:51:6f:d9:f7:24:b7:7f:21:41: 2a:a0:dc:66:4e:42:e0:74:15:bf:dc:5d:0e:da:fd: 30:1b:3b:de:27:ac:1e:a3:e7:ad:cc:51:32:0a:c5: 82:ec:40:84:de:9b:7f:90:b3:59:cb:6d:de:c4:77: 3c:e9:9f:84:52:36:17:c9:59:7b:38:01:be:d4:77: 8e:d5:5d:89:10:f7:3d:54:2d:2b:c9:cc:12:a6:80: 4a:d6:a4:67:67:91:4e:79:7a:ad:05:8a:8e:3e:77: 9a:f1:43:f5:ef:7d:39:4a:6f:a6:b3:0e:3e:d8:b8: 34:40:28:79:8b:58:fa:ec:b5:ba:56:d3:35:f2:89: fa:c2:a7:29:f1:90:05:0e:fd:de:f8:5a:ce:ae:b9: 0e:21:71:04:ab:98:fc:0f:26:50:7f:e7:06:e9:b7: 88:3d:58:6e:44:cc:e8:84:2b:a4:3d:a4:c8:dc:18: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3A:B7:FC:0B:E2:7A:32:9B:16:F3:21:39:91:55:C1:91:9C:E6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/864a55c6-e5ea-3a8f-a0a5-f1c2543cb383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ba:1e:0b:b0:68:c4:ad:03:c8:00:4a:7b:c1:aa:2f:b0:99: 5b:4c:89:ac:88:54:d3:51:db:69:41:7c:69:14:f7:d9:7f:74: b9:86:3e:df:6a:14:2a:87:5f:85:76:00:66:6c:bd:41:75:61: 12:48:88:fe:9d:43:4b:50:5e:08:4d:25:4d:dd:49:0e:e0:85: 97:f9:d0:44:54:b4:e8:52:5c:e7:28:0a:85:05:5f:9c:4f:e6: b6:bc:c3:2e:d7:e1:9e:d3:fb:1b:da:3b:13:32:97:23:ce:31: 1f:96:95:21:93:a3:27:d7:0f:20:ce:80:99:74:2c:bd:1c:9e: e3:55:32:91:23:21:fc:4b:74:f4:a1:b6:d8:89:32:84:fd:2a: 41:e6:62:d9:62:5e:77:d0:e2:3d:9d:a4:a4:63:3c:59:0d:40: ec:6d:3b:78:ab:54:f3:cd:db:06:6f:45:e4:a0:d7:ab:9d:33: 60:49:53:cc:a2:cd:15:e7:8f:e2:6f:ab:9f:4c:07:24:26:87: 3d:86:7c:8d:bb:f8:92:99:bd:fe:9d:a5:d7:de:b5:80:cf:11: 27:5c:b5:89:d9:e8:e4:cd:a4:53:99:ed:50:61:c5:ae:14:ba: 09:bb:27:0f:c7:d9:8f:aa:e5:b1:5a:6c:4e:81:98:f5:c1:d7: e0:f9:0e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLmqMEQg+z98CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk Y2Y4OTA5NmYtNWI0MS00ZjkxLWI5MGQtZDI0MmJhNWMxYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4ifseuhZ8XqXvasDDg+3lsIju4zD/hK2Gzd P5nOx8nV4g5v4vhLA4UP/Hd5ubQF5bQar+4y7CQJXUpGm9Hl69pjpOahBgfbCObd B1VGBedRb9n3JLd/IUEqoNxmTkLgdBW/3F0O2v0wGzveJ6weo+etzFEyCsWC7ECE 3pt/kLNZy23exHc86Z+EUjYXyVl7OAG+1HeO1V2JEPc9VC0rycwSpoBK1qRnZ5FO eXqtBYqOPnea8UP17305Sm+msw4+2Lg0QCh5i1j67LW6VtM18on6wqcp8ZAFDv3e +FrOrrkOIXEEq5j8DyZQf+cG6beIPVhuRMzohCukPaTI3BgawQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc6t/wL4noymxbzITmRVcGRnOYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODY0YTU1YzYtZTVlYS0z YThmLWEwYTUtZjFjMjU0M2NiMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq6HguwaMStA8gASnvBqi+wmVtMiayIVNNR22lBfGkU99l/dLmGPt9q FCqHX4V2AGZsvUF1YRJIiP6dQ0tQXghNJU3dSQ7ghZf50ERUtOhSXOcoCoUFX5xP 5ra8wy7X4Z7T+xvaOxMylyPOMR+WlSGToyfXDyDOgJl0LL0cnuNVMpEjIfxLdPSh ttiJMoT9KkHmYtliXnfQ4j2dpKRjPFkNQOxtO3irVPPN2wZvReSg16udM2BJU8yi zRXnj+Jvq59MByQmhz2GfI27+JKZvf6dpdfetYDPESdctYnZ6OTNpFOZ7VBhxa4U ugm7Jw/H2Y+q5bFabE6BmPXB1+D5Djk= -----END CERTIFICATE-----Generated at Sun Jul 20 14:47:04 2025 by rpki-client