$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df4ea5dd-53cc-3150-80fe-a745e1f5809c.roa File: df4ea5dd-53cc-3150-80fe-a745e1f5809c.roa (raw, json) Hash identifier: 5YaVVyFvXenX2To0fziT7rgjQGigbpoEE2/3aRd/afo= Subject key identifier: DA:57:2E:B7:99:A0:85:68:2D:3D:42:B0:22:7E:6E:B0:52:BB:B6:DF Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A68262D467CACC21BEB7EBEC0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df4ea5dd-53cc-3150-80fe-a745e1f5809c.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397225 IP address blocks: 156.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:2d:46:7c:ac:c2:1b:eb:7e:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=7c84bcac-1e9d-4c06-8d94-7818f9c73ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:28:47:fc:02:60:9c:34:d8:43:48:04:45: 38:26:30:ed:ce:51:50:ab:64:e5:a2:98:a2:8e:1d: 1b:c2:1a:18:dd:39:d3:d5:99:9e:26:e5:46:82:04: 1d:b5:74:b1:0b:65:6d:ed:5b:20:85:62:cf:09:24: 1a:cd:a7:0d:60:16:b8:47:86:9e:93:5b:b2:a3:36: 50:79:88:5c:78:71:e4:97:b4:45:4b:d2:57:90:98: f7:c9:1e:2b:c2:bf:e8:76:a9:5b:5e:50:e2:e4:77: b0:1b:cc:2e:71:94:d9:31:11:dc:0b:87:6f:01:51: 4c:83:35:da:67:4c:4b:b4:7b:5e:29:5f:75:1c:0e: 31:b6:b9:86:fe:90:e2:5c:db:d7:1c:6e:ca:3c:a6: 4e:fc:41:c8:da:44:11:fe:33:c2:49:c3:8c:bc:5e: e8:be:59:cd:cc:45:1a:99:35:28:89:ab:7c:2a:6f: 73:54:84:c4:63:d2:c1:7a:0c:0e:86:02:58:ac:30: 81:b3:ce:91:60:e3:49:90:64:f8:5d:3a:d2:8b:84: 2f:f3:19:6c:3e:4d:e7:e6:14:91:96:3d:41:d6:f1: a1:cd:45:84:6b:06:71:8c:ad:c0:e5:87:de:4a:9a: 0b:92:b1:67:b5:ad:41:3f:3e:0d:f9:15:13:64:90: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:57:2E:B7:99:A0:85:68:2D:3D:42:B0:22:7E:6E:B0:52:BB:B6:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df4ea5dd-53cc-3150-80fe-a745e1f5809c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ee:c2:1d:92:6b:18:d3:47:30:49:df:a8:58:1c:a0:ea:09: ab:27:68:9e:a8:e1:b1:1f:31:86:42:86:92:f7:a0:58:e7:3a: 5f:79:3f:08:e9:b2:db:74:96:ab:b7:f7:af:f3:ab:0a:fa:43: b0:bb:9f:93:a7:2b:67:50:eb:30:e6:cc:08:b9:07:a6:01:d2: 19:58:cc:4a:d3:71:a5:4b:b0:6e:72:70:d6:bc:bb:44:1d:06: 6a:e2:b3:7a:88:ce:bb:0c:b5:7c:18:f3:53:7a:bf:f7:e1:9e: 9c:11:d9:a3:0e:eb:75:19:ce:aa:32:b5:e2:73:08:61:93:75: c4:3c:72:8d:48:c5:9a:34:4d:cf:12:cd:6c:d7:ff:2b:44:38: 47:fd:cb:d6:17:81:1b:b2:d3:22:48:82:60:c7:f9:c4:75:1a: 99:56:ec:16:f2:4b:2e:7f:17:c3:66:f4:3a:41:69:1c:16:c1: 21:00:08:11:69:44:8c:92:08:30:67:b5:36:31:26:7d:86:b0: 2f:41:8e:c5:73:a0:4a:64:f0:b4:a2:bf:cc:77:fa:50:20:4e: 55:6b:bb:97:66:30:7b:5d:d8:52:33:66:ac:cc:5a:fd:9a:31: 04:68:85:d3:0c:29:a5:71:a3:8d:0a:33:0f:9d:e6:5b:cb:a6: e7:71:9a:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJi1GfKzCG+t+vsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk N2M4NGJjYWMtMWU5ZC00YzA2LThkOTQtNzgxOGY5YzczZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDgoR/wCYJw02ENIBEU4JjDtzlFQq2Tlopii jh0bwhoY3TnT1ZmeJuVGggQdtXSxC2Vt7VsghWLPCSQazacNYBa4R4aek1uyozZQ eYhceHHkl7RFS9JXkJj3yR4rwr/odqlbXlDi5HewG8wucZTZMRHcC4dvAVFMgzXa Z0xLtHteKV91HA4xtrmG/pDiXNvXHG7KPKZO/EHI2kQR/jPCScOMvF7ovlnNzEUa mTUoiat8Km9zVITEY9LBegwOhgJYrDCBs86RYONJkGT4XTrSi4Qv8xlsPk3n5hSR lj1B1vGhzUWEawZxjK3A5YfeSpoLkrFnta1BPz4N+RUTZJC0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpXLreZoIVoLT1CsCJ+brBSu7bfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGY0ZWE1ZGQtNTNjYy0z MTUwLTgwZmUtYTc0NWUxZjU4MDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnuwh2SaxjTRzBJ36hYHKDqCasnaJ6o4bEfMYZChpL3oFjnOl95Pwjp stt0lqu396/zqwr6Q7C7n5OnK2dQ6zDmzAi5B6YB0hlYzErTcaVLsG5ycNa8u0Qd Bmris3qIzrsMtXwY81N6v/fhnpwR2aMO63UZzqoyteJzCGGTdcQ8co1IxZo0Tc8S zWzX/ytEOEf9y9YXgRuy0yJIgmDH+cR1GplW7BbySy5/F8Nm9DpBaRwWwSEACBFp RIySCDBntTYxJn2GsC9BjsVzoEpk8LSiv8x3+lAgTlVru5dmMHtd2FIzZqzMWv2a MQRohdMMKaVxo40KMw+d5lvLpudxmpg= -----END CERTIFICATE-----Generated at Sun Jul 27 09:59:45 2025 by rpki-client