$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3580d3c-d441-312e-8057-71657a6478c1.roa File: a3580d3c-d441-312e-8057-71657a6478c1.roa (raw, json) Hash identifier: 8efOScN9DOi42F6CzrXwj6iHvuHv6OLJM2pVcHBjeGs= Subject key identifier: 20:B6:34:D6:78:4C:33:F0:2B:6A:19:E1:F1:F3:60:E0:71:34:8A:14 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0D4685D60B6C87EEC4840 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3580d3c-d441-312e-8057-71657a6478c1.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397230 IP address blocks: 156.154.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:d4:68:5d:60:b6:c8:7e:ec:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=2cb40a17-ecd6-4ec7-bc96-41d1c7b184bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:b4:11:32:22:60:52:53:9e:dd:c2:7b:d0: 73:8a:f5:6f:6c:6c:9c:3e:f4:52:15:56:02:73:30: bb:bb:9d:5a:41:61:a7:11:96:ee:df:a7:94:cd:6c: a5:9a:25:e1:92:90:20:48:54:68:5a:d0:06:20:10: cf:ca:01:bc:65:75:83:d8:2a:7c:e6:e4:80:fa:19: e9:6f:b6:40:95:6f:55:49:75:09:6e:68:89:ba:c3: af:d0:e6:b6:f3:74:21:65:a6:3f:2e:b4:dc:9e:9b: 4f:02:8c:05:48:5a:52:6c:f6:65:58:19:37:ad:e1: f9:0c:ca:bc:46:62:5c:1b:37:37:aa:84:13:d9:ea: af:e0:4d:e4:5a:89:b8:ad:79:44:5a:d3:7b:05:80: 75:7a:67:38:b7:c1:e4:b7:f1:9f:b4:64:34:ae:c9: 9f:aa:1f:66:5c:8a:13:fa:62:92:92:6f:ec:2a:d0: 34:76:e6:f3:12:dc:1e:6b:80:24:e2:17:62:9c:f3: 12:08:ba:53:0d:8c:5b:b1:4a:c4:53:de:59:22:df: 2a:b0:b0:c4:ce:0a:4e:82:09:4f:f9:12:06:38:e8: a1:12:2a:f9:56:2b:1a:35:47:db:ae:5a:32:13:20: 93:da:4d:47:98:54:a0:4a:6f:0e:6c:39:17:15:63: 76:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B6:34:D6:78:4C:33:F0:2B:6A:19:E1:F1:F3:60:E0:71:34:8A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a3580d3c-d441-312e-8057-71657a6478c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1c:8c:c1:89:2c:b7:42:2e:0d:22:e1:21:9f:ff:6d:2e:28: ce:34:7e:bf:be:d2:d3:ae:1e:d0:41:c7:c0:e4:cf:b6:6b:65: 61:0c:58:16:0c:3a:d8:95:5b:83:ec:88:34:85:57:58:7a:d1: ff:af:03:d1:1d:21:95:a2:00:50:f5:b5:e3:74:c1:ba:78:94: f9:4d:25:01:00:1d:89:d1:ab:97:1b:a4:b6:d7:53:c1:51:c8: 79:aa:73:24:48:92:d7:6d:17:f1:fc:46:a4:6c:50:71:be:0a: 2b:b2:eb:56:1f:cf:e6:ea:b4:11:cd:19:55:01:20:1d:fc:68: 71:7e:a6:af:75:06:70:30:df:18:f7:17:d0:c4:ac:d9:e2:b0: e7:d9:ea:7d:d0:59:12:d9:30:d8:d6:3e:07:a9:a2:35:fd:a4: b3:8b:dc:d4:6c:12:a8:0f:2e:4b:6e:9c:95:35:4e:60:78:cd: 2d:2c:4f:c9:95:02:5c:1f:db:12:22:fe:85:7d:3f:2d:3f:89: 10:9c:7d:4d:85:70:3d:e2:3c:dc:79:f4:b2:df:b5:15:d8:d9: c9:47:7c:d6:85:80:fe:dd:f3:ba:e2:73:82:c0:10:18:50:08: c3:b6:e3:51:30:a6:5b:42:13:92:ef:a0:85:ff:02:06:d9:fc: 43:d9:f2:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNRoXWC2yH7sSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk MmNiNDBhMTctZWNkNi00ZWM3LWJjOTYtNDFkMWM3YjE4NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhu0ETIiYFJTnt3Ce9BzivVvbGycPvRSFVYC czC7u51aQWGnEZbu36eUzWylmiXhkpAgSFRoWtAGIBDPygG8ZXWD2Cp85uSA+hnp b7ZAlW9VSXUJbmiJusOv0Oa283QhZaY/LrTcnptPAowFSFpSbPZlWBk3reH5DMq8 RmJcGzc3qoQT2eqv4E3kWom4rXlEWtN7BYB1emc4t8Hkt/GftGQ0rsmfqh9mXIoT +mKSkm/sKtA0dubzEtwea4Ak4hdinPMSCLpTDYxbsUrEU95ZIt8qsLDEzgpOgglP +RIGOOihEir5VisaNUfbrloyEyCT2k1HmFSgSm8ObDkXFWN22wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC2NNZ4TDPwK2oZ4fHzYOBxNIoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTM1ODBkM2MtZDQ0MS0z MTJlLTgwNTctNzE2NTdhNjQ3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8cjMGJLLdCLg0i4SGf/20uKM40fr++0tOuHtBBx8Dkz7ZrZWEMWBYM OtiVW4PsiDSFV1h60f+vA9EdIZWiAFD1teN0wbp4lPlNJQEAHYnRq5cbpLbXU8FR yHmqcyRIktdtF/H8RqRsUHG+Ciuy61Yfz+bqtBHNGVUBIB38aHF+pq91BnAw3xj3 F9DErNnisOfZ6n3QWRLZMNjWPgepojX9pLOL3NRsEqgPLktunJU1TmB4zS0sT8mV Alwf2xIi/oV9Py0/iRCcfU2FcD3iPNx59LLftRXY2clHfNaFgP7d87ric4LAEBhQ CMO241EwpltCE5LvoIX/AgbZ/EPZ8gc= -----END CERTIFICATE-----Generated at Sun Jul 20 14:56:29 2025 by rpki-client