$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddac2057-8cfd-3f3b-b8d6-03bc3b59d6af.roa File: ddac2057-8cfd-3f3b-b8d6-03bc3b59d6af.roa (raw, json) Hash identifier: wJqUa6IriYjfVBNPlrULB0OuNKBZdL/VV634AacdEws= Subject key identifier: A0:79:70:57:6E:24:5E:27:D2:59:10:5D:F9:50:E0:D2:FE:EA:60:24 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0CE6AC4911653296D2EE0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddac2057-8cfd-3f3b-b8d6-03bc3b59d6af.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397230 IP address blocks: 156.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:ce:6a:c4:91:16:53:29:6d:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=283dcba8-62c3-46b5-b15e-6c021acc1e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:db:a3:03:d3:82:68:d7:ad:aa:6e:66:a3: 22:4a:3f:b3:1e:c4:05:0f:af:bb:0e:18:ff:1c:22: b6:ae:cd:f9:26:57:ca:10:da:bf:a9:b6:20:1e:1e: 5a:b7:df:c9:43:89:33:fe:c7:59:e3:c3:9c:5f:8f: f9:91:17:64:1b:ab:06:a4:82:10:9a:e8:a0:b2:fb: 9d:06:d8:b8:d5:ee:74:8a:ef:08:83:bb:63:cc:ab: cd:1d:74:b8:7f:41:1f:c3:d7:51:91:0b:dc:66:d6: e5:6c:91:15:21:f1:7a:70:0a:79:30:fa:d3:f8:df: 0f:88:b1:be:c5:1f:8a:d4:a9:9f:eb:bf:c0:fe:f4: 8b:d3:3c:c9:66:bc:2c:da:0e:2a:09:48:10:2f:17: 73:91:01:83:cf:a7:4b:dc:b1:f8:d6:29:3d:bb:12: 0f:2d:29:e4:11:df:30:d3:17:51:aa:6e:de:23:4c: 31:22:0b:9e:d2:c8:72:f4:91:e2:26:2f:e3:19:29: 31:c8:6d:cc:f9:79:72:2e:4e:7e:0d:5b:3c:2a:e5: 9f:8e:5b:4e:5d:64:d9:1b:cf:31:84:a2:60:60:a4: 69:31:e6:0d:41:9e:53:04:f7:e6:da:80:0c:9d:11: ae:c7:75:0b:6d:6d:64:51:c1:3d:74:d0:97:98:0a: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:79:70:57:6E:24:5E:27:D2:59:10:5D:F9:50:E0:D2:FE:EA:60:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ddac2057-8cfd-3f3b-b8d6-03bc3b59d6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ea:08:1d:7c:98:e5:1a:c0:6b:35:04:0b:4c:77:fc:0f:28: 90:33:c7:3d:d3:b6:e7:0f:3d:b8:da:e9:46:8d:12:ba:e9:2e: 86:8a:ef:88:c8:40:7a:2c:48:51:78:59:4d:59:8f:6a:c9:fe: d6:1e:a3:66:f1:ff:49:59:76:7e:53:8e:3d:98:46:43:c9:f4: a2:3c:ed:e9:e6:de:3e:66:37:b5:99:ee:5c:82:74:0f:5b:8a: 8a:93:43:4b:3c:92:77:7c:30:3a:2f:6b:d6:15:92:0a:7b:35: 77:f7:14:69:b7:d5:59:31:98:2f:5b:bd:c7:56:d4:82:e1:be: ce:a7:53:60:e7:7d:c0:99:e9:00:ca:ee:67:83:d8:43:da:41: 84:ed:f5:1b:1d:a0:e7:b5:7a:5e:b6:06:df:7b:8f:37:a6:41: 19:4d:ca:43:a4:c7:b2:94:9f:4d:97:fd:21:c0:58:fe:f3:bf: af:7c:e7:ad:e5:a1:e3:ef:db:61:07:ff:8c:75:44:90:49:81: bb:8c:37:12:29:6a:b4:c7:15:14:b6:d2:97:67:a0:8b:cf:d2: cc:19:c8:39:6c:59:61:2f:e4:40:3c:fb:62:c3:02:3b:29:e9: ea:1b:ca:5a:5f:1d:4c:5f:a2:28:b9:83:ab:f2:b3:c0:5a:12: ae:e3:31:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sM5qxJEWUyltLuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk MjgzZGNiYTgtNjJjMy00NmI1LWIxNWUtNmMwMjFhY2MxZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDjbowPTgmjXrapuZqMiSj+zHsQFD6+7Dhj/ HCK2rs35JlfKENq/qbYgHh5at9/JQ4kz/sdZ48OcX4/5kRdkG6sGpIIQmuigsvud Bti41e50iu8Ig7tjzKvNHXS4f0Efw9dRkQvcZtblbJEVIfF6cAp5MPrT+N8PiLG+ xR+K1Kmf67/A/vSL0zzJZrws2g4qCUgQLxdzkQGDz6dL3LH41ik9uxIPLSnkEd8w 0xdRqm7eI0wxIgue0shy9JHiJi/jGSkxyG3M+XlyLk5+DVs8KuWfjltOXWTZG88x hKJgYKRpMeYNQZ5TBPfm2oAMnRGux3ULbW1kUcE9dNCXmAo9XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB5cFduJF4n0lkQXflQ4NL+6mAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGRhYzIwNTctOGNmZC0z ZjNiLWI4ZDYtMDNiYzNiNTlkNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3qCB18mOUawGs1BAtMd/wPKJAzxz3TtucPPbja6UaNErrpLoaK74jI QHosSFF4WU1Zj2rJ/tYeo2bx/0lZdn5Tjj2YRkPJ9KI87enm3j5mN7WZ7lyCdA9b ioqTQ0s8knd8MDova9YVkgp7NXf3FGm31VkxmC9bvcdW1ILhvs6nU2DnfcCZ6QDK 7meD2EPaQYTt9RsdoOe1el62Bt97jzemQRlNykOkx7KUn02X/SHAWP7zv698563l oePv22EH/4x1RJBJgbuMNxIparTHFRS20pdnoIvP0swZyDlsWWEv5EA8+2LDAjsp 6eobylpfHUxfoii5g6vys8BaEq7jMRE= -----END CERTIFICATE-----Generated at Sun Jul 20 14:41:47 2025 by rpki-client