$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa File: bd0224f0-3770-3a1b-880d-6c681d82e122.roa (raw, json) Hash identifier: oD+EcCQ8QdHmLwo1auYUh0L9bBghMygtNkycWDIobFE= Subject key identifier: 66:92:3B:A9:43:D2:19:A5:43:20:F4:97:79:93:E5:12:C0:5F:B7:D1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0E2120A71D6E452D6F200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397238 IP address blocks: 156.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:e2:12:0a:71:d6:e4:52:d6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=e2196c19-ab96-4121-8933-86771ed77507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:d7:4e:84:be:ca:0e:c1:84:d8:22:6d:fa: 8e:90:3f:11:65:3f:0d:a9:cd:75:fa:7e:a2:a8:10: f3:ce:87:f0:3b:79:3f:41:e0:ea:97:8b:20:9a:f2: 7b:63:e6:e9:f9:8f:ce:b0:64:56:60:56:62:e2:2e: fc:db:25:e6:e6:94:e3:32:b9:2e:7d:7f:de:83:5a: 02:c0:95:5f:36:67:fb:f2:8a:d6:92:7f:ae:14:b2: ef:49:37:8a:8e:89:92:05:6b:be:06:7d:4c:ea:b0: 27:6d:2f:9c:c8:39:05:7c:5b:fb:44:05:21:90:0b: 2d:bc:65:0e:0c:1e:2b:c5:79:32:3c:25:b3:cb:52: bd:9c:e0:89:b4:d8:3a:39:ce:28:46:d9:12:12:e7: 36:9d:19:a4:1d:5c:0c:89:1f:a5:20:ae:b6:e0:96: a6:b5:9f:30:63:28:55:b6:bf:7f:73:04:5b:67:63: 42:d6:47:5a:c2:19:fb:7e:c5:80:2e:07:93:6e:f5: df:c5:93:4c:d3:fc:c4:e7:fb:f5:95:57:2f:ff:1d: dc:4a:0e:9f:ed:bb:b0:b4:85:8e:70:0f:41:8c:2f: 7c:55:66:72:67:c0:29:b5:20:20:10:ca:19:7c:98: a4:c1:8f:d4:7a:72:1d:4f:4a:41:96:3f:8b:c9:d2: 28:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:92:3B:A9:43:D2:19:A5:43:20:F4:97:79:93:E5:12:C0:5F:B7:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bd0224f0-3770-3a1b-880d-6c681d82e122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b8:23:21:6a:b7:7c:4c:f5:65:de:bb:b1:bb:9d:33:92:4d: 5b:12:c7:f7:95:1b:11:86:25:de:e4:ff:43:bb:ca:ad:d1:43: 0b:78:d9:8a:cd:5d:d1:49:57:ec:f0:ef:0e:4a:70:1e:83:2b: 8f:b4:bf:bf:65:46:89:f3:4e:e1:99:5a:59:d7:9c:2a:6e:d4: e4:ba:9a:d2:3a:ff:d0:74:a9:8a:67:04:fd:af:7d:37:53:88: 63:da:83:02:d9:9e:d4:1a:67:b5:e2:9a:e0:c1:82:02:71:69: f8:3c:97:98:73:0c:3a:a3:42:2d:55:64:89:5c:9a:cd:49:e7: 8a:1d:be:2e:b3:e7:b6:bc:aa:78:31:c6:5a:93:4a:69:58:0f: 0d:f1:c8:4d:fe:d0:ec:16:4a:b7:3b:50:74:99:0b:36:ab:f3: eb:ad:2c:66:79:ea:4b:e4:51:f1:61:8f:e9:37:07:67:f9:42: e3:bd:87:c3:f5:62:19:e3:e9:d1:e5:58:bd:6b:21:58:d6:38: 9b:75:46:af:1e:0a:0b:94:2d:f0:58:23:27:a2:16:1a:96:a4: 64:b1:8f:4b:4b:c6:4e:fc:57:ce:be:a2:38:71:9a:c2:bc:b4: e1:71:c0:74:51:30:5c:df:67:8d:69:ab:50:5f:a3:41:2e:a2: d0:ee:d9:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sOISCnHW5FLW8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZTIxOTZjMTktYWI5Ni00MTIxLTg5MzMtODY3NzFlZDc3NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQfXToS+yg7BhNgibfqOkD8RZT8Nqc11+n6i qBDzzofwO3k/QeDql4sgmvJ7Y+bp+Y/OsGRWYFZi4i782yXm5pTjMrkufX/eg1oC wJVfNmf78orWkn+uFLLvSTeKjomSBWu+Bn1M6rAnbS+cyDkFfFv7RAUhkAstvGUO DB4rxXkyPCWzy1K9nOCJtNg6Oc4oRtkSEuc2nRmkHVwMiR+lIK624JamtZ8wYyhV tr9/cwRbZ2NC1kdawhn7fsWALgeTbvXfxZNM0/zE5/v1lVcv/x3cSg6f7buwtIWO cA9BjC98VWZyZ8AptSAgEMoZfJikwY/UenIdT0pBlj+LydIoLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaSO6lD0hmlQyD0l3mT5RLAX7fRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmQwMjI0ZjAtMzc3MC0z YTFiLTg4MGQtNmM2ODFkODJlMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm4IyFqt3xM9WXeu7G7nTOSTVsSx/eVGxGGJd7k/0O7yq3RQwt42YrN XdFJV+zw7w5KcB6DK4+0v79lRonzTuGZWlnXnCpu1OS6mtI6/9B0qYpnBP2vfTdT iGPagwLZntQaZ7XimuDBggJxafg8l5hzDDqjQi1VZIlcms1J54odvi6z57a8qngx xlqTSmlYDw3xyE3+0OwWSrc7UHSZCzar8+utLGZ56kvkUfFhj+k3B2f5QuO9h8P1 Yhnj6dHlWL1rIVjWOJt1Rq8eCguULfBYIyeiFhqWpGSxj0tLxk78V86+ojhxmsK8 tOFxwHRRMFzfZ41pq1Bfo0EuotDu2Qg= -----END CERTIFICATE-----Generated at Sun Jul 27 11:27:20 2025 by rpki-client