$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6c610a-4152-3814-9c79-38de3a5e38f7.roa File: ee6c610a-4152-3814-9c79-38de3a5e38f7.roa (raw, json) Hash identifier: niKUt9fgLQz43sWrur5HKdAfO3BWIdF3+HQW7JWAGVQ= Subject key identifier: 89:CA:C7:31:B0:76:50:4C:38:6B:9C:67:23:90:84:5D:4E:CA:F4:C4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0DCC5B4EF984A4D0B9100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6c610a-4152-3814-9c79-38de3a5e38f7.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 156.154.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:dc:c5:b4:ef:98:4a:4d:0b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=cf0a8998-f86e-41d4-94a6-f60865087384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:27:c5:e0:7c:48:84:8e:8e:cd:60:37:19: 0a:84:9b:81:a4:83:1b:94:ff:b3:92:89:f1:78:58: d6:47:2c:77:b9:b2:67:6c:d8:29:be:93:da:7e:30: f1:17:11:61:ea:b3:47:30:84:af:91:0c:7a:cb:40: fb:15:81:20:55:da:ac:4f:ba:4f:a8:d8:8b:62:5e: c6:0a:29:e7:66:85:50:69:d6:72:56:f9:6f:29:d2: fa:67:aa:cd:06:70:d5:0b:92:74:8b:ed:96:fa:14: 58:d9:72:2d:25:de:ad:2d:f3:ee:bc:81:95:f3:6c: 41:9e:f2:01:00:be:7a:2b:85:bc:98:a3:75:d7:b8: 89:ba:28:ab:9a:13:5e:8b:a7:e9:fd:db:0e:5a:9a: c2:e0:12:e9:49:43:6c:2f:5f:5b:44:a2:c6:94:4a: 8b:d2:1e:ec:00:76:8f:db:4f:31:b9:4e:33:82:f3: 36:00:39:b4:5c:3f:6e:6c:3b:dd:26:f0:b3:55:83: 40:e2:b8:08:fc:ec:a0:ba:3b:64:d2:31:80:f2:34: 11:0c:9c:93:34:ec:3f:77:d9:23:53:b1:e9:fb:79: 7e:8f:5a:f0:08:67:a0:0b:08:cb:b6:ec:26:ac:48: 4a:58:c0:12:0e:24:21:7e:c2:a2:c4:43:ce:96:c3: 86:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CA:C7:31:B0:76:50:4C:38:6B:9C:67:23:90:84:5D:4E:CA:F4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee6c610a-4152-3814-9c79-38de3a5e38f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b3:3f:98:d3:ce:5b:71:6c:d1:4d:5c:4c:cb:71:58:0e:b5: 3f:49:fc:1c:1c:0c:f9:ec:22:35:f2:c6:6e:b2:5a:11:d7:65: 4e:f8:f1:d2:bc:4e:db:bd:a1:aa:69:96:2a:3b:80:67:f7:5c: 1a:1b:82:bc:42:5e:3c:d9:b9:5f:f3:c5:27:71:93:26:36:c4: d4:41:e6:67:b4:c3:be:17:bd:4c:52:01:d0:b2:2b:b7:44:56: 0c:08:96:10:3d:4b:f1:c1:60:a6:bf:90:62:da:3c:49:81:cc: 6c:cd:fe:57:34:d8:d9:5c:05:99:fa:01:0c:54:f2:0a:87:64: 4d:97:3c:f7:7e:9f:a1:66:64:b8:9f:58:54:5e:2c:f4:a7:3c: 64:71:f0:9e:5e:40:95:d0:5c:1f:e5:0c:82:cf:05:8e:50:01: 40:1c:b4:89:58:70:dc:30:f4:f0:dd:db:17:b6:a3:da:80:72: 83:6d:75:fc:90:87:51:18:3b:26:cc:95:38:be:9c:13:7e:06: e7:e2:27:95:c8:8e:ee:fb:51:d2:94:90:5d:64:06:1a:a0:76: 74:3d:fd:fb:18:f5:ee:7c:33:b3:e4:08:c6:4a:8b:a2:7e:55: 03:f2:8f:b0:ef:63:55:44:53:7c:bb:33:c5:fd:fe:d3:99:43: 4f:fa:c7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNzFtO+YSk0LkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk Y2YwYTg5OTgtZjg2ZS00MWQ0LTk0YTYtZjYwODY1MDg3Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq94nxeB8SISOjs1gNxkKhJuBpIMblP+zkonx eFjWRyx3ubJnbNgpvpPafjDxFxFh6rNHMISvkQx6y0D7FYEgVdqsT7pPqNiLYl7G CinnZoVQadZyVvlvKdL6Z6rNBnDVC5J0i+2W+hRY2XItJd6tLfPuvIGV82xBnvIB AL56K4W8mKN117iJuiirmhNei6fp/dsOWprC4BLpSUNsL19bRKLGlEqL0h7sAHaP 208xuU4zgvM2ADm0XD9ubDvdJvCzVYNA4rgI/Oygujtk0jGA8jQRDJyTNOw/d9kj U7Hp+3l+j1rwCGegCwjLtuwmrEhKWMASDiQhfsKixEPOlsOGrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInKxzGwdlBMOGucZyOQhF1OyvTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWU2YzYxMGEtNDE1Mi0z ODE0LTljNzktMzhkZTNhNWUzOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqzP5jTzltxbNFNXEzLcVgOtT9J/BwcDPnsIjXyxm6yWhHXZU748dK8 Ttu9oapplio7gGf3XBobgrxCXjzZuV/zxSdxkyY2xNRB5me0w74XvUxSAdCyK7dE VgwIlhA9S/HBYKa/kGLaPEmBzGzN/lc02NlcBZn6AQxU8gqHZE2XPPd+n6FmZLif WFReLPSnPGRx8J5eQJXQXB/lDILPBY5QAUActIlYcNww9PDd2xe2o9qAcoNtdfyQ h1EYOybMlTi+nBN+BufiJ5XIju77UdKUkF1kBhqgdnQ9/fsY9e58M7PkCMZKi6J+ VQPyj7DvY1VEU3y7M8X9/tOZQ0/6x+k= -----END CERTIFICATE-----Generated at Sun Jul 20 09:33:15 2025 by rpki-client