$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb9bd95d-ef3d-39cb-9aaf-928ae28235da.roa File: cb9bd95d-ef3d-39cb-9aaf-928ae28235da.roa (raw, json) Hash identifier: G6rEgB2y8rPa31+wc+GHo4prqw59WzKuCeMItNZerA4= Subject key identifier: DA:68:DD:22:BE:59:B9:F0:4E:FA:F3:54:C8:12:5B:06:2E:02:18:FA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0CECE016DF91EC13A1C80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb9bd95d-ef3d-39cb-9aaf-928ae28235da.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397237 IP address blocks: 156.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:ce:ce:01:6d:f9:1e:c1:3a:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=4ed786c5-23dc-4a73-aead-040a67c88c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:d9:af:c8:03:13:8f:98:82:97:af:eb:b0: 95:02:cd:14:c7:6b:1f:a8:f7:8d:8f:c3:f8:f3:66: 4f:68:86:55:81:f7:6f:3a:cc:5c:73:a5:09:31:84: 59:91:6b:f6:bf:b1:24:14:2e:d8:5a:99:bb:69:d7: 88:bf:58:18:93:45:96:2f:81:81:01:43:58:ce:f7: 82:02:47:0b:80:03:f4:a5:4e:fd:a4:f4:f1:0f:c2: ed:6a:64:b8:d2:c7:aa:2b:7f:df:75:da:e4:fe:a5: fd:5c:6a:71:af:c8:98:3d:11:ab:4a:aa:c6:8f:ea: 7c:ea:30:9f:fb:40:91:e3:b7:40:d4:27:c4:ad:d7: 05:ed:f4:13:8e:43:d3:a0:04:53:f8:b3:c4:30:25: 18:fb:fb:f6:61:4e:b8:40:8b:fc:1a:78:b2:e7:c7: 50:ac:4e:60:da:dd:b7:28:19:1e:09:ed:58:80:8d: a5:c8:cc:aa:e6:70:af:7a:99:86:23:16:58:4f:33: 1a:37:97:21:70:fc:d0:13:46:73:d8:81:91:ee:79: 15:c0:31:63:b7:01:2d:e3:cf:e4:c2:53:4a:6a:92: ac:ab:59:54:d2:13:c3:c7:bd:10:ba:f5:54:c7:35: aa:ab:4f:29:82:80:41:98:85:7c:3d:59:aa:16:bd: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:68:DD:22:BE:59:B9:F0:4E:FA:F3:54:C8:12:5B:06:2E:02:18:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cb9bd95d-ef3d-39cb-9aaf-928ae28235da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4f:2a:d8:46:a0:a7:23:0f:f5:30:c0:b0:2c:d2:84:21:2c: aa:4c:a7:2f:66:38:b9:cd:9d:d4:96:88:8a:d3:94:6e:c7:30: 95:cd:ef:07:7a:8d:cb:d1:a9:e3:8c:4e:f8:31:94:64:a7:b3: 40:41:c1:7a:f7:23:cd:92:98:f6:0c:26:43:a5:f6:3c:96:ea: 48:ef:5d:fb:86:81:1f:c2:46:26:f2:44:dd:85:59:07:b4:c2: 61:9f:a2:6e:2d:2a:2e:85:fa:00:8e:8c:c9:62:a1:5f:39:2b: 29:c0:0e:61:37:fb:c5:d7:04:5a:06:ab:6f:50:13:9a:ac:0f: 75:c2:77:27:d5:21:b6:6a:d1:79:ac:bd:41:b6:73:1b:bd:92: 2a:c9:a0:2b:b4:13:da:01:ee:84:db:4f:8e:f6:94:0e:fd:3d: 85:87:47:db:5b:15:11:7e:1f:b4:9c:28:ec:f8:f6:c7:3d:e4: 10:b1:4e:0d:48:4f:f6:b0:2e:20:84:6e:8e:33:72:9a:e8:11: d0:77:79:38:fe:c3:54:d4:05:01:81:1f:e7:f1:9e:ec:55:81: 2a:c6:2c:06:c2:dc:ed:c9:1f:62:93:9c:57:98:14:56:d7:4e: 5f:39:e6:b0:5c:34:8c:fe:fd:76:26:57:c2:d0:60:72:e8:d8: 70:fe:1b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sM7OAW35HsE6HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk NGVkNzg2YzUtMjNkYy00YTczLWFlYWQtMDQwYTY3Yzg4YzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL3Zr8gDE4+Ygpev67CVAs0Ux2sfqPeNj8P4 82ZPaIZVgfdvOsxcc6UJMYRZkWv2v7EkFC7YWpm7adeIv1gYk0WWL4GBAUNYzveC AkcLgAP0pU79pPTxD8LtamS40seqK3/fddrk/qX9XGpxr8iYPRGrSqrGj+p86jCf +0CR47dA1CfErdcF7fQTjkPToART+LPEMCUY+/v2YU64QIv8Gniy58dQrE5g2t23 KBkeCe1YgI2lyMyq5nCvepmGIxZYTzMaN5chcPzQE0Zz2IGR7nkVwDFjtwEt48/k wlNKapKsq1lU0hPDx70QuvVUxzWqq08pgoBBmIV8PVmqFr0f8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpo3SK+WbnwTvrzVMgSWwYuAhj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2I5YmQ5NWQtZWYzZC0z OWNiLTlhYWYtOTI4YWUyODIzNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRPKthGoKcjD/UwwLAs0oQhLKpMpy9mOLnNndSWiIrTlG7HMJXN7wd6 jcvRqeOMTvgxlGSns0BBwXr3I82SmPYMJkOl9jyW6kjvXfuGgR/CRibyRN2FWQe0 wmGfom4tKi6F+gCOjMlioV85KynADmE3+8XXBFoGq29QE5qsD3XCdyfVIbZq0Xms vUG2cxu9kirJoCu0E9oB7oTbT472lA79PYWHR9tbFRF+H7ScKOz49sc95BCxTg1I T/awLiCEbo4zcproEdB3eTj+w1TUBQGBH+fxnuxVgSrGLAbC3O3JH2KTnFeYFFbX Tl855rBcNIz+/XYmV8LQYHLo2HD+G3M= -----END CERTIFICATE-----Generated at Sun Jul 27 09:15:10 2025 by rpki-client