$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa File: f206ae86-3c5f-3629-9092-609e9f195de2.roa (raw, json) Hash identifier: 1lso8ky7EyBMfIe0G0jHsnzRNJMtSAkNCh9KcJrmCYE= Subject key identifier: 09:9E:09:4A:CF:E0:5B:FB:23:BD:5B:B5:66:BB:41:7B:8C:30:3A:B3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0DB53FCF4A73C1CE53F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397220 IP address blocks: 156.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:db:53:fc:f4:a7:3c:1c:e5:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=9ae7a255-70fe-42d1-bba1-bc89478a3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:06:60:b8:7e:9e:e3:bd:b3:35:31:85:4f:63: 5a:a3:9c:d8:0e:d6:45:42:b2:68:84:78:63:07:87: 6f:72:cf:20:73:de:e0:64:f5:bf:41:11:ab:1c:44: dc:d1:b7:aa:eb:89:ef:15:01:48:f2:4d:03:2b:eb: ce:b8:e6:a1:be:9d:8d:0a:bc:65:53:2f:db:e4:f4: 74:8e:69:2a:58:c0:ed:3a:6f:e7:36:35:79:f4:ab: 42:54:40:24:ce:99:17:e6:d9:17:b7:18:32:aa:34: 7e:98:c9:8e:e6:68:0c:a3:0c:75:12:a2:9a:ce:c5: a7:83:08:bb:bb:4a:77:05:9e:20:55:15:69:77:a2: 87:b2:1e:a0:59:ad:36:ad:f4:0b:bc:8c:d8:b7:4f: e0:8a:31:c4:21:92:65:47:c7:63:c2:af:72:98:3e: 7c:f7:bb:2f:e8:8d:4d:01:6c:ea:3c:44:7a:74:5b: 75:1e:50:dc:78:2a:15:eb:56:53:f2:5b:b1:7d:0b: 63:fa:72:4b:d1:06:7d:9e:d7:64:37:07:a5:a5:d8: 0c:31:da:ee:2f:74:af:21:ec:8f:b7:80:af:8c:76: ae:a7:86:0d:7b:e6:98:59:c3:23:ab:ad:a0:d1:30: 9f:a1:cb:37:a3:36:90:2a:85:fe:b2:3c:bb:22:76: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9E:09:4A:CF:E0:5B:FB:23:BD:5B:B5:66:BB:41:7B:8C:30:3A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f206ae86-3c5f-3629-9092-609e9f195de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:af:2b:0d:d3:e7:a5:71:1a:48:99:06:1d:a0:30:2c:03:55: b7:71:9f:13:ac:12:9e:12:f1:6a:28:c4:98:ac:d8:77:54:48: 18:95:c4:c5:f5:50:40:a5:85:70:17:dc:07:de:2f:68:62:9e: d6:07:c0:4c:db:35:b2:dc:59:5c:51:c4:8a:43:70:b8:aa:a9: 51:93:ce:95:e7:d9:87:36:1c:25:e8:15:80:1c:da:d4:20:5f: f1:ca:5d:c2:53:3a:6a:20:df:39:1f:57:9c:68:8b:ae:07:77: 0a:9a:fb:8d:05:0b:db:88:50:e9:2c:a1:c7:83:f1:c8:99:cf: 78:84:c6:3f:38:5e:2b:25:02:23:6d:ce:30:95:e4:47:7e:60: 0c:51:fc:ed:0b:26:58:1c:21:39:11:f3:35:df:41:f4:25:ee: 3b:64:67:28:8d:fe:aa:21:f1:b6:4c:89:6e:c8:e6:e3:b7:67: 9a:46:7f:19:e7:43:6a:67:bf:d3:46:5f:cf:14:ff:a6:8f:90: 00:72:76:26:6a:af:13:2b:46:e5:61:80:86:39:91:57:d3:9e: 2f:a8:0d:06:5f:a1:56:e3:ee:02:c2:2f:18:9e:e0:88:58:f1: 3d:1d:36:cf:ed:4a:59:41:7d:5e:69:4f:bd:84:c8:e1:35:a2: 7e:53:cf:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sNtT/PSnPBzlP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk OWFlN2EyNTUtNzBmZS00MmQxLWJiYTEtYmM4OTQ3OGEzYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AZguH6e472zNTGFT2Nao5zYDtZFQrJohHhj B4dvcs8gc97gZPW/QRGrHETc0beq64nvFQFI8k0DK+vOuOahvp2NCrxlUy/b5PR0 jmkqWMDtOm/nNjV59KtCVEAkzpkX5tkXtxgyqjR+mMmO5mgMowx1EqKazsWngwi7 u0p3BZ4gVRVpd6KHsh6gWa02rfQLvIzYt0/gijHEIZJlR8djwq9ymD5897sv6I1N AWzqPER6dFt1HlDceCoV61ZT8luxfQtj+nJL0QZ9ntdkNwelpdgMMdruL3SvIeyP t4CvjHaup4YNe+aYWcMjq62g0TCfocs3ozaQKoX+sjy7InZ3BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmeCUrP4Fv7I71btWa7QXuMMDqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjIwNmFlODYtM2M1Zi0z NjI5LTkwOTItNjA5ZTlmMTk1ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+vKw3T56VxGkiZBh2gMCwDVbdxnxOsEp4S8WooxJis2HdUSBiVxMX1 UEClhXAX3AfeL2hintYHwEzbNbLcWVxRxIpDcLiqqVGTzpXn2Yc2HCXoFYAc2tQg X/HKXcJTOmog3zkfV5xoi64Hdwqa+40FC9uIUOksoceD8ciZz3iExj84XislAiNt zjCV5Ed+YAxR/O0LJlgcITkR8zXfQfQl7jtkZyiN/qoh8bZMiW7I5uO3Z5pGfxnn Q2pnv9NGX88U/6aPkABydiZqrxMrRuVhgIY5kVfTni+oDQZfoVbj7gLCLxie4IhY 8T0dNs/tSllBfV5pT72EyOE1on5Tz/M= -----END CERTIFICATE-----Generated at Sun Jul 27 10:10:48 2025 by rpki-client