$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed6ab19f-efa6-352b-a6dc-5c8969c5562b.roa File: ed6ab19f-efa6-352b-a6dc-5c8969c5562b.roa (raw, json) Hash identifier: Fe+tPcqE7wrqiMOgiBLkKlb3SnnsCkdrYX5PXf/C1dY= Subject key identifier: 0E:F3:88:C3:2D:02:51:4D:F7:54:44:B3:F3:31:84:DC:DF:84:DC:5C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0D5C4FB82272DF2207E80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed6ab19f-efa6-352b-a6dc-5c8969c5562b.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397220 IP address blocks: 156.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:d5:c4:fb:82:27:2d:f2:20:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=412afbee-9a29-442f-9a7b-59cac4e334a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:a2:05:66:44:fe:1a:93:39:28:ac:09:71: 84:9e:0a:ad:27:f1:f5:04:20:15:61:1a:75:e7:30: 4c:cc:b6:72:4c:f3:39:c9:72:c7:30:37:73:b3:fe: 2f:50:29:a2:b4:2d:1a:88:bc:8a:80:b2:f5:ee:13: a7:a0:23:45:a1:7c:12:58:ce:45:6e:c7:03:89:df: b1:5c:38:00:18:24:8b:d4:cd:e9:aa:5d:ce:d3:35: 50:fa:a8:34:5b:48:6a:11:dc:3a:c7:5a:65:b0:bd: 6d:da:f6:b1:93:4a:97:c4:6a:c3:4c:50:9d:22:20: c8:35:64:4a:01:75:bf:42:60:3d:19:38:04:96:52: 0f:15:33:37:e6:7d:86:6f:3e:1c:2b:66:d0:29:ff: 85:e2:be:80:2e:34:ef:e3:67:a0:70:f6:84:8d:ee: d3:58:b2:09:1c:26:40:37:28:7e:07:b8:5b:df:dc: 54:6b:93:e9:cf:e1:90:05:ae:49:05:41:ae:86:84: 51:d8:a6:4c:ce:f7:d4:c2:8e:1a:55:78:57:15:35: 81:84:fb:ab:e3:2f:13:6b:bc:46:3f:49:19:be:14: dd:19:ab:4c:f0:3e:9d:5b:84:61:c5:9c:70:4b:c5: f1:77:f0:8e:b2:55:9f:96:0a:5a:62:91:16:46:00: 47:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F3:88:C3:2D:02:51:4D:F7:54:44:B3:F3:31:84:DC:DF:84:DC:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ed6ab19f-efa6-352b-a6dc-5c8969c5562b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:31:15:c0:1a:26:56:78:7e:80:e9:ac:a9:97:d3:6e:ca:21: 3d:a5:bd:86:83:1d:ba:18:ad:d6:5a:e5:8e:89:76:11:04:ce: 00:a0:35:2c:71:a9:c1:24:10:37:81:60:ce:bb:81:1f:41:c9: 4b:c9:4b:ac:78:40:15:74:78:f4:02:fc:21:e5:d8:3b:06:70: 38:a0:89:ba:15:ac:b0:45:69:1d:74:bd:e6:f0:ce:30:20:63: 5a:45:57:3a:d6:80:70:5c:9f:96:bb:0e:ee:65:c2:9e:9b:c3: 91:c1:21:c1:0f:87:df:38:d5:c5:fc:ff:9c:96:59:5d:53:f1: a7:03:61:5b:2c:25:fa:dc:a4:a5:91:e7:f7:70:88:a1:62:64: ff:39:8c:89:a7:60:b8:62:11:d8:40:2f:a3:0e:8c:51:6a:9d: 12:f8:ac:88:dc:0a:fd:9d:70:d0:c3:d8:72:2d:8f:56:3c:fa: 5a:2e:14:69:f2:3e:4c:0f:6a:59:ba:e7:16:10:f4:95:64:57: e4:09:3c:d7:ce:4e:22:95:2d:be:08:09:b3:4c:e3:e2:12:e5: 56:f7:69:08:a0:d1:bf:71:76:cd:42:eb:0c:ef:25:73:43:0b: d4:78:ea:e1:19:24:41:9f:7d:04:63:f3:98:86:0c:8c:0c:f1: f6:26:9b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNXE+4InLfIgfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk NDEyYWZiZWUtOWEyOS00NDJmLTlhN2ItNTljYWM0ZTMzNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRKiBWZE/hqTOSisCXGEngqtJ/H1BCAVYRp1 5zBMzLZyTPM5yXLHMDdzs/4vUCmitC0aiLyKgLL17hOnoCNFoXwSWM5FbscDid+x XDgAGCSL1M3pql3O0zVQ+qg0W0hqEdw6x1plsL1t2vaxk0qXxGrDTFCdIiDINWRK AXW/QmA9GTgEllIPFTM35n2Gbz4cK2bQKf+F4r6ALjTv42egcPaEje7TWLIJHCZA Nyh+B7hb39xUa5Ppz+GQBa5JBUGuhoRR2KZMzvfUwo4aVXhXFTWBhPur4y8Ta7xG P0kZvhTdGatM8D6dW4RhxZxwS8Xxd/COslWflgpaYpEWRgBHWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7ziMMtAlFN91REs/MxhNzfhNxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWQ2YWIxOWYtZWZhNi0z NTJiLWE2ZGMtNWM4OTY5YzU1NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAxFcAaJlZ4foDprKmX027KIT2lvYaDHboYrdZa5Y6JdhEEzgCgNSxx qcEkEDeBYM67gR9ByUvJS6x4QBV0ePQC/CHl2DsGcDigiboVrLBFaR10vebwzjAg Y1pFVzrWgHBcn5a7Du5lwp6bw5HBIcEPh9841cX8/5yWWV1T8acDYVssJfrcpKWR 5/dwiKFiZP85jImnYLhiEdhAL6MOjFFqnRL4rIjcCv2dcNDD2HItj1Y8+louFGny PkwPalm65xYQ9JVkV+QJPNfOTiKVLb4ICbNM4+IS5Vb3aQig0b9xds1C6wzvJXND C9R46uEZJEGffQRj85iGDIwM8fYmm/g= -----END CERTIFICATE-----Generated at Sun Jul 27 10:02:29 2025 by rpki-client