$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0b8c29f-1480-36f1-b42e-c8b8bc11d106.roa File: d0b8c29f-1480-36f1-b42e-c8b8bc11d106.roa (raw, json) Hash identifier: rwzpJVd+GQposgTs4k4vrXBpXsNVQvcPe6JE17Xu/yU= Subject key identifier: 5E:1B:FB:E1:68:F3:8E:5C:03:B3:98:92:DF:02:63:5F:07:B2:CE:B6 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262FDBE288E5D60E751B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0b8c29f-1480-36f1-b42e-c8b8bc11d106.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397241 IP address blocks: 156.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:2f:db:e2:88:e5:d6:0e:75:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=7a27598b-b0f8-4a8b-a4e6-88ff47707398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:9d:6d:0a:86:eb:ab:51:21:85:a0:41:70: dc:2e:a3:a3:49:5e:1b:d4:8a:b4:97:75:49:a4:9f: fb:4d:b7:99:18:5a:a7:af:33:ab:43:09:f7:7c:b5: 24:e0:b5:9b:36:aa:44:7f:96:ac:e9:ec:e6:7d:1c: e6:23:d4:46:ad:f5:c3:24:f3:51:41:64:21:63:5f: c6:4d:39:ad:59:7d:98:5e:6d:a5:d6:7b:72:46:2e: 75:50:95:3c:3f:18:f5:84:ee:81:11:56:4f:22:0f: 7e:6a:07:44:b5:22:9b:59:cf:f4:85:92:7a:49:52: 66:26:0d:df:1e:68:ff:e7:1e:15:94:4b:9c:04:7c: 53:39:05:8d:49:31:62:f6:c1:d8:dd:a5:bf:51:a7: b1:e3:09:1f:72:06:c6:e7:f9:e5:02:c4:90:bf:5e: 98:d0:91:ff:c1:1d:6d:06:63:6c:e6:0e:89:99:4d: 6e:ee:44:a9:dc:5d:e8:39:e0:97:ba:40:cc:12:47: 8e:9a:e5:ae:94:09:f4:8b:a3:5f:b3:c5:98:18:2d: d2:f2:89:28:bc:6d:f4:d4:ca:77:13:c2:23:b3:e5: 75:4c:e0:7b:a2:91:72:04:4f:26:5f:68:a0:f8:a5: 18:54:1e:8a:b2:ef:12:fc:90:bc:ff:aa:4f:34:e9: 6f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1B:FB:E1:68:F3:8E:5C:03:B3:98:92:DF:02:63:5F:07:B2:CE:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0b8c29f-1480-36f1-b42e-c8b8bc11d106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c7:40:c7:69:f1:ee:60:18:92:7d:7f:26:cf:a1:05:e7:b6: 26:08:42:28:5a:97:27:1c:9e:0d:9d:84:6e:95:71:cd:41:7f: 6b:05:43:47:8a:3a:f9:db:9f:ec:11:3b:a8:07:30:ce:5e:22: 0e:6a:1e:64:be:95:f1:51:cd:00:fc:64:c7:20:9c:47:ac:ab: 1e:db:2f:b5:81:63:2f:c9:51:b2:70:1f:75:0c:a9:cd:e6:ca: e9:f4:ae:7f:25:a3:da:07:1c:4d:d5:2a:2a:05:dc:d0:f9:fc: 95:a7:be:f6:82:e9:51:9a:b2:98:f6:33:8b:1f:6a:b2:4e:0d: 8b:03:85:ed:f0:52:81:62:d6:7d:7b:0c:8b:5e:a2:f8:6b:de: 14:ee:58:41:ee:6a:d4:40:1e:d6:a2:7f:1b:66:ae:78:8d:b4: 66:85:f5:e0:9e:31:cf:7e:6e:0b:d8:12:ba:98:08:92:d5:59: aa:45:09:fc:df:cc:6e:a1:ca:ca:05:aa:7a:fe:85:3a:ac:3d: c9:8b:6f:20:91:29:9b:a4:e5:28:5c:a8:7d:db:65:26:31:89: 59:fb:1e:b5:e9:df:86:e1:fa:9e:3e:03:8e:66:98:fc:ad:26: 2a:f0:2e:f5:2e:7a:62:5f:c0:04:2f:22:38:2d:e1:ec:cc:f9: b1:9e:38:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJi/b4ojl1g51G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk N2EyNzU5OGItYjBmOC00YThiLWE0ZTYtODhmZjQ3NzA3Mzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKudbQqG66tRIYWgQXDcLqOjSV4b1Iq0l3VJ pJ/7TbeZGFqnrzOrQwn3fLUk4LWbNqpEf5as6ezmfRzmI9RGrfXDJPNRQWQhY1/G TTmtWX2YXm2l1ntyRi51UJU8Pxj1hO6BEVZPIg9+agdEtSKbWc/0hZJ6SVJmJg3f Hmj/5x4VlEucBHxTOQWNSTFi9sHY3aW/Uaex4wkfcgbG5/nlAsSQv16Y0JH/wR1t BmNs5g6JmU1u7kSp3F3oOeCXukDMEkeOmuWulAn0i6Nfs8WYGC3S8okovG301Mp3 E8Ijs+V1TOB7opFyBE8mX2ig+KUYVB6Ksu8S/JC8/6pPNOlvrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4b++Fo845cA7OYkt8CY18Hss62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDBiOGMyOWYtMTQ4MC0z NmYxLWI0MmUtYzhiOGJjMTFkMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITHQMdp8e5gGJJ9fybPoQXntiYIQihalyccng2dhG6Vcc1Bf2sFQ0eK Ovnbn+wRO6gHMM5eIg5qHmS+lfFRzQD8ZMcgnEesqx7bL7WBYy/JUbJwH3UMqc3m yun0rn8lo9oHHE3VKioF3ND5/JWnvvaC6VGaspj2M4sfarJODYsDhe3wUoFi1n17 DIteovhr3hTuWEHuatRAHtaifxtmrniNtGaF9eCeMc9+bgvYErqYCJLVWapFCfzf zG6hysoFqnr+hTqsPcmLbyCRKZuk5ShcqH3bZSYxiVn7HrXp34bh+p4+A45mmPyt JirwLvUuemJfwAQvIjgt4ezM+bGeOI4= -----END CERTIFICATE-----Generated at Sun Jul 27 10:00:52 2025 by rpki-client