$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af66d098-ad1c-32f0-863b-61fe654b6280.roa File: af66d098-ad1c-32f0-863b-61fe654b6280.roa (raw, json) Hash identifier: lZ3UUyN74GP+E950B3l0umBo9LJ64jO80QnehknHZYQ= Subject key identifier: 4A:CD:0B:A1:B4:56:CE:A2:0D:7C:16:4C:B9:65:05:1C:C9:FA:6A:5C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68261369CF20BB088532BE40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af66d098-ad1c-32f0-863b-61fe654b6280.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397230 IP address blocks: 156.154.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:13:69:cf:20:bb:08:85:32:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=6d6a0466-9729-4687-97bc-c5a9cb81cd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:8e:e4:2b:46:a3:a6:e7:b4:87:3a:38:9e: b4:f1:6d:2b:cb:4b:be:6f:a8:37:39:a0:06:82:d5: 6d:88:b2:c2:e1:a4:33:b6:47:f3:61:72:36:c6:6a: b0:68:64:6f:61:4c:1c:5b:30:f7:d0:9b:d1:d4:56: fb:4a:1c:dc:c8:55:41:dd:9d:2c:ed:96:40:40:a8: cd:07:2f:e6:ab:bc:36:cd:37:12:7d:67:e3:59:d3: 4a:77:bb:95:c9:02:fe:d0:24:92:7f:68:fa:e8:7c: c7:7f:66:8d:bf:02:ed:82:f2:ff:42:08:56:dd:7a: 44:e6:d9:f5:80:72:39:7c:f1:ef:a9:5b:a9:14:50: d8:ac:d9:8b:b4:f2:ac:19:28:d2:54:df:17:7b:70: 13:1a:7d:a0:cd:bc:56:e2:13:31:e1:4c:f0:cc:03: 8c:4d:0d:f3:94:78:1f:d8:d5:5d:0c:6f:ad:73:da: 9e:e1:be:a3:f9:89:7d:e8:0e:65:11:b1:87:86:67: b7:06:37:6a:a8:9e:df:9a:d9:aa:32:84:7c:44:62: 88:46:24:80:7d:87:6c:f0:74:2e:37:d3:15:e6:68: 06:e4:0c:76:38:cf:0e:6d:dc:b5:54:fe:7a:ff:cd: 16:22:60:17:04:7b:03:c4:0e:a5:f4:b3:c6:ed:1b: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CD:0B:A1:B4:56:CE:A2:0D:7C:16:4C:B9:65:05:1C:C9:FA:6A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/af66d098-ad1c-32f0-863b-61fe654b6280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1e:41:01:f8:77:60:ad:66:f3:40:63:67:99:33:43:72:ac: b2:ab:c2:18:79:32:b2:36:8b:c4:35:9f:aa:1e:8e:c7:3d:9a: 55:8e:d7:b4:df:ed:22:c3:65:0d:fc:47:79:af:9a:61:27:59: 06:37:87:99:b0:ca:9e:9f:be:28:bc:fa:ca:39:0f:29:92:2b: fe:5c:0a:16:c8:08:34:65:a9:3e:b7:15:41:27:5a:0b:a4:85: 77:c1:b2:df:a2:97:2d:29:fe:12:7f:f1:93:48:0f:48:ef:ab: 70:94:c1:9b:75:e7:7c:ee:47:23:b2:de:c3:82:aa:91:79:34: ee:c4:5e:ef:94:c0:e7:60:4c:79:eb:1c:70:b5:ad:8f:85:ec: f6:4f:8e:ac:77:64:3a:f1:5c:a6:1f:b9:67:d4:d0:dc:c3:e4: 3e:8f:be:b2:8e:23:4f:1b:ff:5c:8e:3a:66:b7:97:01:61:fd: 1d:e6:ce:d9:31:06:af:e0:4f:92:e1:bf:4d:05:6c:02:e9:a9: b1:6f:87:94:67:70:c8:9f:b7:00:58:d4:27:bf:6a:d7:88:cc: b5:c1:35:ae:06:0c:4d:7a:7e:ea:ec:f5:a0:b7:fb:e6:41:81: 7a:0b:54:e9:24:2b:05:4b:e6:ad:ee:8c:b9:f6:7b:ba:df:c4: 54:09:ad:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhNpzyC7CIUyvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NmQ2YTA0NjYtOTcyOS00Njg3LTk3YmMtYzVhOWNiODFjZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyyO5CtGo6bntIc6OJ608W0ry0u+b6g3OaAG gtVtiLLC4aQztkfzYXI2xmqwaGRvYUwcWzD30JvR1Fb7ShzcyFVB3Z0s7ZZAQKjN By/mq7w2zTcSfWfjWdNKd7uVyQL+0CSSf2j66HzHf2aNvwLtgvL/QghW3XpE5tn1 gHI5fPHvqVupFFDYrNmLtPKsGSjSVN8Xe3ATGn2gzbxW4hMx4UzwzAOMTQ3zlHgf 2NVdDG+tc9qe4b6j+Yl96A5lEbGHhme3BjdqqJ7fmtmqMoR8RGKIRiSAfYds8HQu N9MV5mgG5Ax2OM8Obdy1VP56/80WImAXBHsDxA6l9LPG7RtXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErNC6G0Vs6iDXwWTLllBRzJ+mpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWY2NmQwOTgtYWQxYy0z MmYwLTg2M2ItNjFmZTY1NGI2MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMeQQH4d2CtZvNAY2eZM0NyrLKrwhh5MrI2i8Q1n6oejsc9mlWO17Tf 7SLDZQ38R3mvmmEnWQY3h5mwyp6fvii8+so5DymSK/5cChbICDRlqT63FUEnWguk hXfBst+ily0p/hJ/8ZNID0jvq3CUwZt153zuRyOy3sOCqpF5NO7EXu+UwOdgTHnr HHC1rY+F7PZPjqx3ZDrxXKYfuWfU0NzD5D6PvrKOI08b/1yOOma3lwFh/R3mztkx Bq/gT5Lhv00FbALpqbFvh5RncMiftwBY1Ce/ateIzLXBNa4GDE16furs9aC3++ZB gXoLVOkkKwVL5q3ujLn2e7rfxFQJrZE= -----END CERTIFICATE-----Generated at Sun Jul 20 14:49:56 2025 by rpki-client