$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa File: daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa (raw, json) Hash identifier: 7C9EAMzz2B/soDxMzyRTXayQe7Vz74g6l/KazycEbc8= Subject key identifier: A7:C0:12:0A:10:47:A0:D2:D3:9B:FB:A9:7C:3B:B5:3E:60:63:AB:DD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A6826331E21EC4DC8F31E58F0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397232 IP address blocks: 156.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:33:1e:21:ec:4d:c8:f3:1e:58:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=7f0d4664-6279-4bd0-a959-7e5338ae401d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:a8:b6:01:ef:35:52:43:d2:67:09:91:ba: 5f:5c:e6:75:b5:64:c9:ca:8b:2d:cd:d0:89:01:a6: 37:58:1e:d8:ee:1d:a2:af:c2:6a:79:47:18:ee:9e: e3:2f:69:1c:52:44:83:77:fa:85:b5:21:c0:9e:55: 25:ff:96:da:22:16:b6:02:97:6a:24:3e:fe:3b:12: 6b:b3:8a:16:0d:84:44:1e:33:2e:b2:c9:4e:9e:b8: 2b:01:2a:ad:1f:15:04:13:62:6d:ff:0e:0c:03:7b: ce:d2:b1:08:4b:e8:0c:98:9a:49:35:2c:c9:e2:80: 8b:4d:33:f9:30:de:f3:b4:af:8f:a2:1d:46:53:2c: 10:d0:cf:a6:ff:17:09:5e:5b:45:92:44:a6:43:69: 09:99:15:26:57:bc:da:c0:77:7d:bf:d9:7c:78:9c: e3:8e:c8:d2:3b:8d:43:4b:42:38:f7:35:f9:25:ea: 25:bf:3d:3c:db:90:fa:e6:a1:c1:de:a8:a7:c8:06: d6:f9:9b:b0:d6:35:89:85:62:17:bf:7c:46:41:19: 0e:24:0b:e8:c8:d3:e3:4d:c5:62:12:eb:92:f6:f2: d6:45:6b:c5:24:55:7d:5f:8d:a7:0b:50:7f:ba:15: 0e:d2:ff:0d:d6:e6:17:95:d9:b0:bb:f5:6f:56:b6: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C0:12:0A:10:47:A0:D2:D3:9B:FB:A9:7C:3B:B5:3E:60:63:AB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/daa90d6a-ec8a-32a6-9490-d5dbaccce9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4d:12:24:5d:0c:b8:c9:64:9c:db:e3:29:0b:68:cd:e0:84: 17:20:61:66:a0:d6:30:0f:70:50:ca:09:b7:4a:04:ed:40:ce: c1:47:f5:41:0a:98:b8:d5:da:96:f1:3b:40:b5:0c:52:e3:0f: 9d:8b:b9:79:5b:8a:70:47:ad:74:5a:e2:3b:c7:f2:c4:d3:b6: a5:66:ed:55:70:d9:7a:4b:29:8d:b5:57:1f:7b:eb:0b:d7:a9: d2:89:44:3d:19:d5:1a:97:39:53:52:fd:27:45:44:f7:fa:8d: b6:f5:65:00:e0:2f:99:d7:d4:d7:31:f9:90:7e:0a:20:1a:d1: d1:b0:b6:4b:eb:a7:f9:91:ed:cd:f5:07:40:e1:9d:bc:9a:68: 6f:af:eb:df:31:ee:83:be:cf:7c:fa:0b:02:71:ff:8b:b7:2e: b8:c7:e2:e3:7d:5d:e9:7b:74:1c:14:1c:9a:e0:d2:10:44:db: a9:38:0c:af:48:c1:85:f1:2a:54:7f:45:77:33:64:67:de:8a: e4:1a:9d:23:fa:77:fb:3f:41:4b:f9:8a:1a:25:27:c3:68:19: 01:de:e4:32:f3:e6:9a:6a:fa:cc:1a:7d:48:97:82:67:d2:6a: 86:89:07:c0:0d:1b:70:f2:1e:8d:9d:af:ce:2a:05:e8:70:a3: 1d:5f:c3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjMeIexNyPMeWPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk N2YwZDQ2NjQtNjI3OS00YmQwLWE5NTktN2U1MzM4YWU0MDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr6otgHvNVJD0mcJkbpfXOZ1tWTJyostzdCJ AaY3WB7Y7h2ir8JqeUcY7p7jL2kcUkSDd/qFtSHAnlUl/5baIha2ApdqJD7+OxJr s4oWDYREHjMusslOnrgrASqtHxUEE2Jt/w4MA3vO0rEIS+gMmJpJNSzJ4oCLTTP5 MN7ztK+Poh1GUywQ0M+m/xcJXltFkkSmQ2kJmRUmV7zawHd9v9l8eJzjjsjSO41D S0I49zX5Jeolvz0825D65qHB3qinyAbW+Zuw1jWJhWIXv3xGQRkOJAvoyNPjTcVi EuuS9vLWRWvFJFV9X42nC1B/uhUO0v8N1uYXldmwu/VvVrY1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfAEgoQR6DS05v7qXw7tT5gY6vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGFhOTBkNmEtZWM4YS0z MmE2LTk0OTAtZDVkYmFjY2NlOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtNEiRdDLjJZJzb4ykLaM3ghBcgYWag1jAPcFDKCbdKBO1AzsFH9UEK mLjV2pbxO0C1DFLjD52LuXlbinBHrXRa4jvH8sTTtqVm7VVw2XpLKY21Vx976wvX qdKJRD0Z1RqXOVNS/SdFRPf6jbb1ZQDgL5nX1Ncx+ZB+CiAa0dGwtkvrp/mR7c31 B0DhnbyaaG+v698x7oO+z3z6CwJx/4u3LrjH4uN9Xel7dBwUHJrg0hBE26k4DK9I wYXxKlR/RXczZGfeiuQanSP6d/s/QUv5iholJ8NoGQHe5DLz5ppq+swafUiXgmfS aoaJB8ANG3DyHo2dr84qBehwox1fw3A= -----END CERTIFICATE-----Generated at Sun Jul 20 14:51:42 2025 by rpki-client