$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b53e2e19-2cc1-36ad-9ca6-c8145df75b1d.roa File: b53e2e19-2cc1-36ad-9ca6-c8145df75b1d.roa (raw, json) Hash identifier: r04ilVt8FiJLzdHx4oiklw3VtNFYSwXAQ1XAnBzecX4= Subject key identifier: 96:23:68:A9:78:1C:D8:8F:1B:F5:90:4E:59:E4:99:8E:9C:5A:29:C4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0C037710421F76176E440 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b53e2e19-2cc1-36ad-9ca6-c8145df75b1d.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397225 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:c0:37:71:04:21:f7:61:76:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=988aaa55-ee46-4daa-a899-807012661573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:c6:40:dc:7c:4f:34:d1:6d:b6:5f:46:77: 24:3d:3b:eb:f2:b2:b5:4d:21:2f:68:8e:9f:a7:53: 4c:d9:06:79:40:eb:fb:89:98:57:5e:01:1d:91:4e: e7:43:06:03:ca:eb:96:ee:26:57:4e:6e:78:84:c9: cc:7f:56:32:a6:07:81:96:e4:6f:92:21:51:0c:ba: 8e:94:cb:d3:14:5c:d3:a3:c9:d6:09:d3:1c:5c:d3: 0f:77:6e:dd:50:9f:80:4d:73:7f:74:36:3e:8a:d4: 3e:09:2a:2a:9f:03:89:90:68:57:6c:2d:90:b4:9c: 40:73:f3:70:70:4f:c6:1c:54:45:52:34:84:32:1b: 46:fd:da:c2:4d:4b:26:91:85:5d:c2:1a:14:b1:f1: c7:73:1c:7f:ab:e7:5c:d9:e6:ae:4e:6a:f9:65:8e: 1a:ed:97:76:0c:59:4e:9b:0a:92:15:c7:cf:7a:dc: cc:ca:52:4e:5c:53:9d:bf:c8:de:8c:e8:1f:e1:ff: 36:fc:b2:30:aa:3a:6a:52:db:af:1b:cf:60:8a:f5: b1:5f:81:c9:a7:ae:15:de:c8:75:a8:c2:95:08:ca: 39:a9:c8:06:ca:a2:58:31:92:f6:b6:8e:30:bb:95: cc:7d:37:dd:10:98:9f:76:b0:f9:94:02:f8:ec:1d: ef:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:23:68:A9:78:1C:D8:8F:1B:F5:90:4E:59:E4:99:8E:9C:5A:29:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b53e2e19-2cc1-36ad-9ca6-c8145df75b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5a:3f:05:8c:ed:0e:a5:03:de:3d:8f:11:a2:1a:fb:71:fe: c9:48:27:f7:51:6b:95:c9:a8:ad:bd:64:06:92:6c:f0:b3:1f: d5:dd:30:b2:0e:66:ae:6f:e5:8e:05:28:7a:91:6b:cb:89:aa: a7:0c:39:bb:69:c8:ba:6d:42:8b:d1:c0:33:4e:2c:48:b2:59: 1e:a2:c3:3e:bf:97:52:53:fc:38:2a:08:33:7f:95:6b:7e:f9: 1f:a5:ef:47:98:83:a2:af:ed:f0:d9:7a:83:5e:7e:67:ae:91: e3:c8:2c:03:35:07:f9:ba:d8:0e:91:91:20:4a:c3:b3:17:61: 4b:be:bf:1c:77:03:aa:f0:4e:49:4e:fa:1b:51:b3:d7:a0:87: 73:8f:9f:01:92:5f:71:d5:f1:2f:09:58:10:67:89:30:da:8d: 37:a5:d5:6f:5c:fd:a0:98:64:be:12:30:4a:3b:2c:40:89:ac: 48:0c:18:1a:12:7c:f3:5d:a2:3b:1c:8a:f0:a5:3a:6c:60:5d: 2a:e8:a5:f9:45:24:c9:5a:55:e1:7f:0c:44:8e:69:ca:6f:55: a2:d7:3c:bc:37:4e:96:27:00:23:c9:21:e8:e2:21:bf:49:91: ec:7b:df:91:23:24:59:12:9a:03:4b:9c:78:3c:6d:21:35:03: a0:3b:c5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sMA3cQQh92F25EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OTg4YWFhNTUtZWU0Ni00ZGFhLWE4OTktODA3MDEyNjYxNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRzGQNx8TzTRbbZfRnckPTvr8rK1TSEvaI6f p1NM2QZ5QOv7iZhXXgEdkU7nQwYDyuuW7iZXTm54hMnMf1YypgeBluRvkiFRDLqO lMvTFFzTo8nWCdMcXNMPd27dUJ+ATXN/dDY+itQ+CSoqnwOJkGhXbC2QtJxAc/Nw cE/GHFRFUjSEMhtG/drCTUsmkYVdwhoUsfHHcxx/q+dc2eauTmr5ZY4a7Zd2DFlO mwqSFcfPetzMylJOXFOdv8jejOgf4f82/LIwqjpqUtuvG89givWxX4HJp64V3sh1 qMKVCMo5qcgGyqJYMZL2to4wu5XMfTfdEJifdrD5lAL47B3vIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYjaKl4HNiPG/WQTlnkmY6cWinEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjUzZTJlMTktMmNjMS0z NmFkLTljYTYtYzgxNDVkZjc1YjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9aPwWM7Q6lA949jxGiGvtx/slIJ/dRa5XJqK29ZAaSbPCzH9XdMLIO Zq5v5Y4FKHqRa8uJqqcMObtpyLptQovRwDNOLEiyWR6iwz6/l1JT/DgqCDN/lWt+ +R+l70eYg6Kv7fDZeoNefmeukePILAM1B/m62A6RkSBKw7MXYUu+vxx3A6rwTklO +htRs9egh3OPnwGSX3HV8S8JWBBniTDajTel1W9c/aCYZL4SMEo7LECJrEgMGBoS fPNdojscivClOmxgXSropflFJMlaVeF/DESOacpvVaLXPLw3TpYnACPJIejiIb9J kex735EjJFkSmgNLnHg8bSE1A6A7xVw= -----END CERTIFICATE-----Generated at Sun Jul 27 10:00:19 2025 by rpki-client