$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa File: d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa (raw, json) Hash identifier: xUAqFkMjwhslsTyPEcCvTgP7UfYa9LS3pcT1pCgW9ok= Subject key identifier: 10:8B:12:55:FE:5F:38:55:D6:0E:4C:BD:14:93:C4:82:B6:AC:55:77 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0D142CF1A9D4FD05A73E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 12008 IP address blocks: 156.154.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:d1:42:cf:1a:9d:4f:d0:5a:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=dcc53b6c-fb3b-4ca1-81c8-41c688a74ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:72:77:60:8e:c2:5f:fa:df:8d:fa:4a:cb: e9:fc:0d:ce:19:eb:c4:76:8b:1e:f0:a0:21:e8:91: 80:34:40:0c:16:e6:6b:18:04:91:5d:3b:43:bd:e1: d9:25:a7:60:ec:d4:bb:8f:d0:d2:c6:d3:ab:27:23: c5:24:e5:10:41:6d:15:0c:47:51:ba:3b:24:b3:89: bc:2c:54:37:64:76:50:43:71:c8:30:f1:d8:45:cf: 45:df:bc:95:47:92:3c:ff:34:26:a4:8c:ba:0b:ec: 9b:4a:cf:a5:dd:4c:37:da:2f:ce:11:07:79:68:6a: d5:40:d9:12:b9:01:d4:c3:32:0a:72:ed:93:4c:64: ff:53:2a:a2:af:c6:0b:13:80:ea:b0:4b:76:b4:55: 48:94:fd:f9:48:d2:07:3c:95:b4:48:db:a1:ea:f0: 92:2d:54:c1:9a:ff:50:84:64:c1:da:2a:11:cd:fd: 00:b9:8f:4e:7a:29:bc:69:21:50:e7:ea:a0:c2:8f: 79:24:73:66:57:3c:0c:a0:44:92:0c:52:9a:e6:4d: b8:43:98:66:09:e5:6e:70:e5:dd:eb:38:8e:c1:6c: b7:60:55:0d:54:27:7f:c3:a5:f7:7a:14:1a:5b:a8: ae:cb:e7:0e:8d:c7:86:ab:3d:da:65:f3:e3:3d:b9: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:12:55:FE:5F:38:55:D6:0E:4C:BD:14:93:C4:82:B6:AC:55:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d8ebcaaf-3ea7-3784-8ded-f9e683574800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a1:63:ca:6e:13:63:be:8f:ec:c0:24:7e:3d:64:03:b9:64: ed:21:c5:ab:e8:59:68:08:fb:5f:6a:fa:96:e1:b9:30:10:af: d7:ea:b2:25:df:5d:b5:35:0a:64:a1:9e:83:94:46:64:d1:e0: 04:ce:0b:1f:0b:fa:66:5c:44:5f:33:7c:60:c4:f1:c7:1c:b0: e0:f8:93:3d:28:c9:8d:fd:9a:3d:c1:03:8e:8a:d1:5f:83:3a: c4:3b:5d:96:39:a7:6c:8c:9a:e6:d9:2f:e9:d3:38:5a:01:72: d8:6e:e5:c8:18:fa:8f:e1:a9:b7:5d:e5:81:dd:75:cd:08:e4: 4a:82:2d:45:94:28:a2:ff:a9:e4:2e:df:c7:e4:ff:a8:9d:f1: d4:11:bc:c8:83:b6:59:93:46:5f:b4:5f:81:ed:e6:9e:31:d0: 29:e0:d0:98:ac:fe:e9:9a:07:08:2f:18:29:84:30:94:fd:7d: 8d:ea:35:29:42:70:f3:fb:a0:b3:6a:28:e1:88:da:f7:de:ac: 2a:9a:01:a5:9a:a9:ac:20:ac:2e:77:69:81:9e:cd:a1:76:17: d4:2f:68:16:5b:6e:0f:b0:22:44:8b:a4:ad:fd:ba:1a:d3:b2: 27:c9:4f:20:db:19:4b:14:90:a4:62:14:b3:62:f6:cf:9c:2d: 43:0e:2c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNFCzxqdT9Bac+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZGNjNTNiNmMtZmIzYi00Y2ExLTgxYzgtNDFjNjg4YTc0ZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl5yd2COwl/63436Ssvp/A3OGevEdose8KAh 6JGANEAMFuZrGASRXTtDveHZJadg7NS7j9DSxtOrJyPFJOUQQW0VDEdRujsks4m8 LFQ3ZHZQQ3HIMPHYRc9F37yVR5I8/zQmpIy6C+ybSs+l3Uw32i/OEQd5aGrVQNkS uQHUwzIKcu2TTGT/Uyqir8YLE4DqsEt2tFVIlP35SNIHPJW0SNuh6vCSLVTBmv9Q hGTB2ioRzf0AuY9Oeim8aSFQ5+qgwo95JHNmVzwMoESSDFKa5k24Q5hmCeVucOXd 6ziOwWy3YFUNVCd/w6X3ehQaW6iuy+cOjceGqz3aZfPjPbmNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCLElX+XzhV1g5MvRSTxIK2rFV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDhlYmNhYWYtM2VhNy0z Nzg0LThkZWQtZjllNjgzNTc0ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOhY8puE2O+j+zAJH49ZAO5ZO0hxavoWWgI+19q+pbhuTAQr9fqsiXf XbU1CmShnoOURmTR4ATOCx8L+mZcRF8zfGDE8cccsOD4kz0oyY39mj3BA46K0V+D OsQ7XZY5p2yMmubZL+nTOFoBcthu5cgY+o/hqbdd5YHddc0I5EqCLUWUKKL/qeQu 38fk/6id8dQRvMiDtlmTRl+0X4Ht5p4x0Cng0Jis/umaBwgvGCmEMJT9fY3qNSlC cPP7oLNqKOGI2vferCqaAaWaqawgrC53aYGezaF2F9QvaBZbbg+wIkSLpK39uhrT sifJTyDbGUsUkKRiFLNi9s+cLUMOLP8= -----END CERTIFICATE-----Generated at Mon Jul 21 02:12:58 2025 by rpki-client