$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa File: 98243c64-ddb7-3b76-8b95-d2b34357f71b.roa (raw, json) Hash identifier: BsKIRZVzOMSiYC84V3BysDjL37WcH0uimGj4b1wECB4= Subject key identifier: CF:DD:FD:67:D8:07:0C:6E:E5:0C:B6:70:EF:08:AE:26:92:1E:3C:46 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682630EDA3633AE3688DA980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397227 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:30:ed:a3:63:3a:e3:68:8d:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=264bf270-b3b0-4444-ac7e-631cb485d69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:4e:23:ca:9d:4e:c1:63:5d:c8:9b:55:65: 66:75:3b:44:3b:f3:bf:d9:60:da:16:4d:96:63:60: f1:38:4e:5f:ae:52:d1:7d:eb:b5:7c:3b:ac:ce:43: 89:e0:a5:ff:da:fe:f2:2d:45:ac:b1:34:45:1b:23: c6:b1:c4:21:31:2b:e1:25:ff:f1:a7:52:d0:27:6b: 70:a9:87:dc:d1:af:45:ae:84:b2:d2:00:12:ae:43: ac:57:e6:65:e5:34:62:3b:d5:fd:e5:ff:49:86:e1: 06:be:f3:e7:a3:9c:68:46:53:61:2c:e7:d9:4d:36: 82:fe:b8:3e:74:f0:ae:7c:5e:6e:65:e0:16:27:cd: ca:21:96:7f:34:9c:7a:a0:9c:7c:1a:22:33:e7:d9: 76:ad:39:ed:1b:4e:20:49:4f:de:75:e2:c7:ed:77: 63:a5:d1:85:b5:f7:85:fe:b5:d3:20:db:87:9b:90: a9:f4:31:42:41:64:26:3a:eb:ca:ab:13:b1:92:1c: a6:ac:a3:2b:28:5a:13:7a:73:cc:52:80:81:cc:34: c1:59:1c:73:63:c5:be:2b:75:e0:4e:3a:6e:67:9d: 86:a4:1b:9c:3d:60:7c:ad:18:cf:f7:1e:6a:96:a0: ca:74:b3:29:12:51:7e:94:5d:f7:7f:d0:dd:92:b5: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DD:FD:67:D8:07:0C:6E:E5:0C:B6:70:EF:08:AE:26:92:1E:3C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98243c64-ddb7-3b76-8b95-d2b34357f71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b3:77:58:9a:48:ee:db:37:ef:3d:da:28:68:75:f5:fb:ab: 33:8b:af:e3:35:df:c3:4d:4e:25:a6:71:c0:03:00:cd:93:f2: 91:0d:57:74:cc:64:d1:21:ab:2e:58:91:a1:da:30:ce:33:58: e8:f6:03:ee:b2:a8:4c:2f:4b:6c:4f:82:c4:24:d4:24:07:70: 26:52:e7:13:14:b0:93:14:d7:cc:7d:1d:8e:d1:9f:fc:69:7c: 78:d9:e8:5b:9e:9c:9f:bf:37:10:da:36:f8:a2:1d:7f:08:ee: 7c:1e:17:c2:c4:0b:31:03:f8:a8:64:11:82:28:be:de:2e:25: ed:f7:ec:f0:4a:65:c3:2e:55:d1:ea:9b:c8:6d:ac:fa:40:14: 1c:5e:eb:7c:5a:63:38:51:4e:5a:20:16:8d:08:6a:87:67:bd: 73:3b:35:46:4e:31:ea:d1:1a:fd:9a:f4:17:3e:fc:e9:30:ee: ee:dc:f9:c5:b3:e2:87:a8:0e:3b:54:8f:8f:7e:ac:dd:b8:bc: 8d:18:11:66:f2:e7:65:26:24:56:84:47:c3:d1:e5:03:cb:5d: f7:af:55:a8:15:01:f3:4d:90:bf:d3:c1:5c:a0:24:17:78:51: 2e:cd:67:9a:0a:ac:77:ad:57:f7:95:14:2b:79:3f:a2:0b:6a: 45:d8:d5:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjDto2M642iNqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MjY0YmYyNzAtYjNiMC00NDQ0LWFjN2UtNjMxY2I0ODVkNjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZxOI8qdTsFjXcibVWVmdTtEO/O/2WDaFk2W Y2DxOE5frlLRfeu1fDuszkOJ4KX/2v7yLUWssTRFGyPGscQhMSvhJf/xp1LQJ2tw qYfc0a9FroSy0gASrkOsV+Zl5TRiO9X95f9JhuEGvvPno5xoRlNhLOfZTTaC/rg+ dPCufF5uZeAWJ83KIZZ/NJx6oJx8GiIz59l2rTntG04gSU/edeLH7XdjpdGFtfeF /rXTINuHm5Cp9DFCQWQmOuvKqxOxkhymrKMrKFoTenPMUoCBzDTBWRxzY8W+K3Xg TjpuZ52GpBucPWB8rRjP9x5qlqDKdLMpElF+lF33f9DdkrV4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/d/WfYBwxu5Qy2cO8IriaSHjxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTgyNDNjNjQtZGRiNy0z Yjc2LThiOTUtZDJiMzQzNTdmNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADazd1iaSO7bN+892ihodfX7qzOLr+M138NNTiWmccADAM2T8pENV3TM ZNEhqy5YkaHaMM4zWOj2A+6yqEwvS2xPgsQk1CQHcCZS5xMUsJMU18x9HY7Rn/xp fHjZ6FuenJ+/NxDaNviiHX8I7nweF8LECzED+KhkEYIovt4uJe337PBKZcMuVdHq m8htrPpAFBxe63xaYzhRTlogFo0IaodnvXM7NUZOMerRGv2a9Bc+/Okw7u7c+cWz 4oeoDjtUj49+rN24vI0YEWby52UmJFaER8PR5QPLXfevVagVAfNNkL/TwVygJBd4 US7NZ5oKrHetV/eVFCt5P6ILakXY1SQ= -----END CERTIFICATE-----Generated at Sun Jul 27 10:01:55 2025 by rpki-client