$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc789d7c-68ae-34ca-a1a9-c42e0ff82a72.roa File: dc789d7c-68ae-34ca-a1a9-c42e0ff82a72.roa (raw, json) Hash identifier: 3rWgJSccLG3pGwF2tXrmrv46of9pcjWlEQfFw/of5c8= Subject key identifier: 68:4D:F1:94:63:64:73:E7:8E:0F:13:4E:91:2F:92:16:B7:BD:F4:C7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0D62002E99BCD561D42E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc789d7c-68ae-34ca-a1a9-c42e0ff82a72.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397226 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:d6:20:02:e9:9b:cd:56:1d:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=e4b277d3-a4ac-4fe9-9d76-03fec5387ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:ec:cd:5e:b1:fe:3e:f9:d7:d9:2e:91:b7: e4:16:81:05:d9:dc:d4:cf:6d:ab:4d:8f:6c:83:15: e1:23:03:ba:46:47:46:a5:52:49:3f:3b:39:45:64: 0f:68:9f:11:f6:97:27:4f:7d:dd:d2:67:40:45:83: 61:d0:06:0d:24:d4:ef:a1:5a:86:b3:2a:df:fc:e0: b3:56:52:43:a0:66:5e:38:9c:53:9c:32:6f:7c:f4: 85:2e:0c:19:ac:60:04:1a:69:80:ad:f8:c3:15:4d: b9:9b:43:3d:e0:3a:89:86:c0:cc:17:91:49:62:13: 0b:c6:71:ff:d2:de:03:d2:fa:00:18:f5:83:93:3c: d4:ea:dc:58:8e:39:f0:be:ba:ba:03:0c:e1:5f:22: dd:30:c0:2f:08:29:18:29:2b:65:fd:3a:ff:46:0f: 76:38:89:ae:62:62:d9:96:7a:d9:e8:3f:dd:8d:03: 83:d4:e0:92:e0:ae:ac:3c:05:85:35:a6:27:f1:5c: a0:73:b0:d4:c9:24:e3:a0:7a:05:4e:8e:b9:03:d2: 33:ce:37:4c:90:7b:a8:ef:81:57:5e:5a:ec:2b:af: 4b:0e:10:62:7d:4c:cc:1d:60:69:ab:36:e9:8d:a1: a1:70:e1:17:91:a2:64:ba:ca:d5:95:55:9f:16:af: 6d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4D:F1:94:63:64:73:E7:8E:0F:13:4E:91:2F:92:16:B7:BD:F4:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc789d7c-68ae-34ca-a1a9-c42e0ff82a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:dc:d6:0f:8a:7a:15:b3:11:8e:7a:83:36:78:f7:8e:1f:85: 09:cb:c9:5c:bc:8c:b5:56:8e:50:d9:6a:77:42:aa:ab:80:76: 0f:d1:88:b4:8f:a9:bf:06:77:47:6e:0f:26:19:21:4c:93:dc: 01:03:6c:a8:28:38:a3:be:ad:70:43:c9:35:ba:bf:64:ac:2f: b6:1e:64:a5:aa:31:e9:e9:27:c1:f4:04:14:12:fa:2f:45:c7: 34:ac:73:fd:37:91:ac:55:e0:bd:06:22:3d:42:b9:97:c0:3d: 04:c3:95:d3:bd:c9:0b:87:fe:2b:5b:56:4b:04:99:66:40:fa: 69:44:bc:0e:6c:b7:55:ee:0c:84:02:c0:4c:2b:95:c8:da:ef: 16:42:a6:53:4f:dc:c1:b7:38:b9:9c:3a:46:00:8b:b4:15:fd: 81:b0:40:68:a3:4f:08:2d:03:b9:d6:2a:6b:dd:14:f0:46:05: 3b:e8:79:c7:b4:6f:27:40:68:60:e5:7d:d3:ea:a0:dc:24:a2: d1:a1:04:35:07:90:a4:28:76:cf:84:1a:c6:ed:38:29:c5:2a: 32:1a:98:75:92:ec:5a:f0:86:b9:5e:74:31:fe:6d:59:62:4b: 99:44:66:c3:5f:e1:81:a7:51:06:49:d2:8e:17:98:66:63:5b: 6a:7f:73:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNYgAumbzVYdQuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZTRiMjc3ZDMtYTRhYy00ZmU5LTlkNzYtMDNmZWM1Mzg3ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+fszV6x/j7519kukbfkFoEF2dzUz22rTY9s gxXhIwO6RkdGpVJJPzs5RWQPaJ8R9pcnT33d0mdARYNh0AYNJNTvoVqGsyrf/OCz VlJDoGZeOJxTnDJvfPSFLgwZrGAEGmmArfjDFU25m0M94DqJhsDMF5FJYhMLxnH/ 0t4D0voAGPWDkzzU6txYjjnwvrq6AwzhXyLdMMAvCCkYKStl/Tr/Rg92OImuYmLZ lnrZ6D/djQOD1OCS4K6sPAWFNaYn8Vygc7DUySTjoHoFTo65A9IzzjdMkHuo74FX XlrsK69LDhBifUzMHWBpqzbpjaGhcOEXkaJkusrVlVWfFq9tZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhN8ZRjZHPnjg8TTpEvkha3vfTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGM3ODlkN2MtNjhhZS0z NGNhLWExYTktYzQyZTBmZjgyYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/c1g+KehWzEY56gzZ4944fhQnLyVy8jLVWjlDZandCqquAdg/RiLSP qb8Gd0duDyYZIUyT3AEDbKgoOKO+rXBDyTW6v2SsL7YeZKWqMenpJ8H0BBQS+i9F xzSsc/03kaxV4L0GIj1CuZfAPQTDldO9yQuH/itbVksEmWZA+mlEvA5st1XuDIQC wEwrlcja7xZCplNP3MG3OLmcOkYAi7QV/YGwQGijTwgtA7nWKmvdFPBGBTvoece0 bydAaGDlfdPqoNwkotGhBDUHkKQods+EGsbtOCnFKjIamHWS7FrwhrledDH+bVli S5lEZsNf4YGnUQZJ0o4XmGZjW2p/c40= -----END CERTIFICATE-----Generated at Sun Jul 20 21:19:20 2025 by rpki-client