$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa File: e0a41d6a-fe27-377f-8ad1-2b2709489314.roa (raw, json) Hash identifier: 1Lzn99rbQrv845tN560drIxY9IublfHI5o6ES0jNIlY= Subject key identifier: 76:1E:16:8B:BA:3E:50:5B:19:BC:F3:F6:7E:B7:89:B9:E6:C1:7C:F7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682633C5B127755C84213880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 12008 IP address blocks: 156.154.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:33:c5:b1:27:75:5c:84:21:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=89f2a3c7-d434-4225-a93e-f1a3d2756701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e8:db:9e:ce:b7:2c:51:9a:e5:c1:98:d2:45: b0:d6:88:ba:21:bd:52:4f:57:85:3b:7e:24:fe:32: 16:f6:00:46:2d:48:87:53:86:fe:88:1b:da:3c:a6: 69:39:d4:9d:7b:8a:87:51:4f:1e:53:f7:a8:27:4d: 6b:8b:c7:39:3a:26:9d:09:98:22:cd:59:54:60:3a: bb:b0:89:4e:75:83:07:30:cd:14:8c:1a:e4:6e:79: 37:1b:7a:38:f3:25:85:4c:66:b6:af:18:79:48:be: 6a:58:4e:fa:6f:21:98:a0:d2:33:24:ff:0a:19:2f: 66:39:3b:af:89:a8:d7:b2:ff:ee:f4:c8:9a:97:e6: 1b:7f:a7:2e:6b:f7:01:3d:22:79:f4:bc:e7:fd:29: 8b:1c:26:97:0c:c9:2c:44:a8:d7:15:e2:1c:2a:1f: be:81:2a:6e:18:7f:3c:bf:8b:c3:cb:d5:a5:b0:6e: 9c:e7:2e:4b:6b:31:d7:9f:ea:f1:b0:7c:03:36:ee: d9:a8:77:89:db:41:bc:66:70:50:64:45:f4:31:bd: 82:e9:2a:a1:92:07:1c:78:27:b9:be:e0:b2:30:37: 40:9d:a3:98:08:f8:2e:9b:09:02:b0:ae:52:59:74: 15:1c:92:a3:96:18:91:ba:59:80:1c:d8:d8:89:87: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1E:16:8B:BA:3E:50:5B:19:BC:F3:F6:7E:B7:89:B9:E6:C1:7C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e0a41d6a-fe27-377f-8ad1-2b2709489314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a1:a1:77:a2:ad:e6:91:59:86:f4:c8:ed:3a:57:c6:aa:47: 27:ec:ab:27:a1:37:d8:55:50:09:05:d8:7c:34:72:1a:c1:f0: f1:cb:4f:95:62:fd:b2:ba:98:2e:9e:1e:08:18:ec:68:50:33: 40:3a:74:56:46:bf:a0:f8:61:2b:11:51:9e:e7:b8:c8:36:14: 10:c4:fd:03:eb:eb:f0:db:35:4a:2a:4f:7d:7f:29:cd:cd:94: ef:db:6a:d5:6e:2d:ba:ff:8a:86:b7:6e:82:07:39:cc:2d:d4: e6:4a:29:e0:3a:4c:b1:5e:cb:72:ab:cc:ed:ec:c1:2c:94:0d: c2:ed:cb:88:d3:46:0c:d2:c5:a6:dd:bf:c8:42:4d:c5:6a:2d: 35:67:46:53:8c:ab:68:c4:63:c2:de:61:8a:67:b6:66:b9:42: 0c:1b:0b:99:d2:cf:fa:bc:90:8b:d8:b9:32:c7:d3:98:cb:52: 1d:f8:8d:e0:dc:5e:7d:07:88:a1:fd:ae:60:6b:62:0d:f5:c1: 10:5d:37:49:39:78:00:f4:d9:01:cd:e7:c7:2e:e1:61:37:a0: 1d:23:29:76:57:bd:19:d7:f8:d6:ec:45:63:55:39:0d:3b:53: 3d:f3:c6:22:f8:9b:d3:27:fe:66:44:dd:13:9f:84:6a:89:e8: c9:1a:ff:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjPFsSd1XIQhOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ODlmMmEzYzctZDQzNC00MjI1LWE5M2UtZjFhM2QyNzU2NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+jbns63LFGa5cGY0kWw1oi6Ib1ST1eFO34k /jIW9gBGLUiHU4b+iBvaPKZpOdSde4qHUU8eU/eoJ01ri8c5OiadCZgizVlUYDq7 sIlOdYMHMM0UjBrkbnk3G3o48yWFTGa2rxh5SL5qWE76byGYoNIzJP8KGS9mOTuv iajXsv/u9Mial+Ybf6cua/cBPSJ59Lzn/SmLHCaXDMksRKjXFeIcKh++gSpuGH88 v4vDy9WlsG6c5y5LazHXn+rxsHwDNu7ZqHeJ20G8ZnBQZEX0Mb2C6SqhkgcceCe5 vuCyMDdAnaOYCPgumwkCsK5SWXQVHJKjlhiRulmAHNjYiYdbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYeFou6PlBbGbzz9n63ibnmwXz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZTBhNDFkNmEtZmUyNy0z NzdmLThhZDEtMmIyNzA5NDg5MzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGihoXeireaRWYb0yO06V8aqRyfsqyehN9hVUAkF2Hw0chrB8PHLT5Vi /bK6mC6eHggY7GhQM0A6dFZGv6D4YSsRUZ7nuMg2FBDE/QPr6/DbNUoqT31/Kc3N lO/batVuLbr/ioa3boIHOcwt1OZKKeA6TLFey3KrzO3swSyUDcLty4jTRgzSxabd v8hCTcVqLTVnRlOMq2jEY8LeYYpntma5QgwbC5nSz/q8kIvYuTLH05jLUh34jeDc Xn0HiKH9rmBrYg31wRBdN0k5eAD02QHN58cu4WE3oB0jKXZXvRnX+NbsRWNVOQ07 Uz3zxiL4m9Mn/mZE3ROfhGqJ6Mka//s= -----END CERTIFICATE-----Generated at Sun Jul 20 14:12:00 2025 by rpki-client