$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a80b88d1-22d5-3ffe-ba85-1250e16f411c.roa File: a80b88d1-22d5-3ffe-ba85-1250e16f411c.roa (raw, json) Hash identifier: K7Ssy4x4hx5xxj20faGdqAkQNOH3A9nocZ05U7kMVkU= Subject key identifier: 3F:67:3F:5C:DD:76:CA:65:F5:43:34:EE:40:29:66:F4:10:FA:9C:F8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A8840AC49F3F586AD0A482C00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a80b88d1-22d5-3ffe-ba85-1250e16f411c.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 12008 IP address blocks: 156.154.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:ac:49:f3:f5:86:ad:0a:48:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=cea1b868-4790-4082-b9f5-8f1e9051d315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:21:69:30:da:6d:77:c6:fc:2f:4a:dd:0b: c7:fa:8b:a7:13:d2:33:8c:8f:c2:3c:fc:94:a9:19: 97:2b:34:75:98:f4:ef:86:2d:62:e4:07:49:43:a4: 21:7c:b1:40:9d:8a:41:1d:9d:31:4c:24:7f:63:88: 82:2a:dc:79:2a:1f:c6:7b:a4:80:00:cd:e3:25:85: 95:26:19:6c:2c:c9:49:f5:87:0f:98:6c:b6:60:33: 4c:a8:51:e9:aa:fa:e0:85:36:e9:a0:78:ae:26:8f: 77:a1:60:e1:2b:bb:55:fe:16:db:48:b5:b0:4a:71: ad:f9:67:ee:13:b1:43:ea:f2:16:b1:31:c3:a8:1f: 9a:82:89:47:5f:d7:8e:84:04:6d:1c:d6:c8:05:e7: af:8d:3e:08:fb:52:d6:da:03:d0:f5:a8:13:b5:6a: 8b:c9:67:7f:67:5e:38:ec:eb:b7:45:bc:69:ca:e9: e9:5a:18:9e:51:e8:5b:d4:a4:4e:61:e6:b3:e4:c0: c4:58:6f:63:1a:ce:03:76:bf:32:9d:18:8a:fe:c5: 34:77:54:20:01:b8:d3:c4:f7:e6:95:6c:4d:bc:96: 99:52:77:a4:07:69:8a:0e:fd:df:e5:36:40:50:82: 5d:fa:fb:fc:a2:d2:3a:d1:1f:51:2d:1a:e2:9c:3a: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:67:3F:5C:DD:76:CA:65:F5:43:34:EE:40:29:66:F4:10:FA:9C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a80b88d1-22d5-3ffe-ba85-1250e16f411c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:94:bd:63:8a:af:a1:fd:ba:37:21:a2:96:00:fe:c6:55:b5: f8:0d:5d:f1:6e:91:60:61:d9:06:7c:f5:7d:54:13:8c:f0:cb: c3:a3:0b:22:6f:39:e7:df:32:a3:53:46:e9:ce:5d:ad:ef:d5: bb:87:64:b5:e1:0f:96:78:3a:61:a4:54:6c:32:dc:ed:e7:0f: d3:28:fb:ee:cc:8d:ae:21:99:30:58:ae:86:d9:88:e6:34:e8: 52:3e:69:38:a9:c5:f2:ec:c7:ad:56:97:32:7b:44:96:13:bf: 71:f5:32:c3:9b:9f:67:3c:06:4a:25:e2:57:4d:bb:32:7d:0e: 5e:5e:4b:7a:22:b5:cf:7c:85:3e:8e:d9:da:b6:bc:23:1c:14: da:ab:10:85:10:e4:0d:92:a0:9a:85:ad:1b:f8:83:b8:e6:18: 69:77:76:83:24:40:b8:35:43:33:67:ab:4e:0a:c1:81:4e:14: e9:3e:f4:28:3e:12:73:8d:15:85:5d:e3:ce:cd:4c:9b:cd:e2: 62:56:ab:5b:70:6f:83:85:43:3d:1c:f1:85:2e:45:5a:29:b1: 81:39:35:7e:83:a0:db:0f:1b:fa:56:a9:14:f2:03:7f:a2:89: a6:a1:8f:48:a3:4b:28:0c:d8:f2:b5:b7:74:cc:41:a1:bd:b3: 12:35:00:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKxJ8/WGrQpILAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk Y2VhMWI4NjgtNDc5MC00MDgyLWI5ZjUtOGYxZTkwNTFkMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/QhaTDabXfG/C9K3QvH+ounE9IzjI/CPPyU qRmXKzR1mPTvhi1i5AdJQ6QhfLFAnYpBHZ0xTCR/Y4iCKtx5Kh/Ge6SAAM3jJYWV JhlsLMlJ9YcPmGy2YDNMqFHpqvrghTbpoHiuJo93oWDhK7tV/hbbSLWwSnGt+Wfu E7FD6vIWsTHDqB+agolHX9eOhARtHNbIBeevjT4I+1LW2gPQ9agTtWqLyWd/Z144 7Ou3RbxpyunpWhieUehb1KROYeaz5MDEWG9jGs4Ddr8ynRiK/sU0d1QgAbjTxPfm lWxNvJaZUnekB2mKDv3f5TZAUIJd+vv8otI60R9RLRrinDpP7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9nP1zddspl9UM07kApZvQQ+pz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTgwYjg4ZDEtMjJkNS0z ZmZlLWJhODUtMTI1MGUxNmY0MTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuUvWOKr6H9ujchopYA/sZVtfgNXfFukWBh2QZ89X1UE4zwy8OjCyJv OeffMqNTRunOXa3v1buHZLXhD5Z4OmGkVGwy3O3nD9Mo++7Mja4hmTBYrobZiOY0 6FI+aTipxfLsx61WlzJ7RJYTv3H1MsObn2c8Bkol4ldNuzJ9Dl5eS3oitc98hT6O 2dq2vCMcFNqrEIUQ5A2SoJqFrRv4g7jmGGl3doMkQLg1QzNnq04KwYFOFOk+9Cg+ EnONFYVd487NTJvN4mJWq1twb4OFQz0c8YUuRVopsYE5NX6DoNsPG/pWqRTyA3+i iaahj0ijSygM2PK1t3TMQaG9sxI1AHc= -----END CERTIFICATE-----Generated at Sun Jul 20 14:12:04 2025 by rpki-client