$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7930b8b-f3c9-3495-adee-103fd2c5eb5a.roa File: f7930b8b-f3c9-3495-adee-103fd2c5eb5a.roa (raw, json) Hash identifier: gN9sJaSHIIc6txCIesrgjCp6qe7eRg4/Xgdi0rDAO/E= Subject key identifier: 03:F1:06:F9:42:10:6F:AE:5D:17:C7:B6:38:98:E6:43:05:2B:0C:64 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0BB2E55436CF8E689AE40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7930b8b-f3c9-3495-adee-103fd2c5eb5a.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 156.154.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:bb:2e:55:43:6c:f8:e6:89:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=387f14b3-4b64-40da-9e70-0c3075768431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:41:2f:eb:ec:15:0d:29:46:85:35:fe:a3: 21:c9:84:58:02:93:c5:d9:d1:55:09:0d:e5:42:44: ee:02:30:3d:a5:e1:13:10:8d:85:3d:08:76:09:80: 97:f3:ca:61:fb:80:45:12:9f:c7:ad:12:af:f9:21: a9:93:ab:1c:c5:f9:df:0f:79:17:ee:fd:e4:42:30: c4:ab:ce:b0:69:d8:bd:c1:6b:9b:e2:04:f7:e0:1c: 29:77:5a:68:25:6d:a7:cf:ca:1e:4d:0f:5b:42:08: 45:65:c5:92:1d:95:f5:6b:cd:a2:07:7f:5a:aa:7c: 2f:99:a8:79:70:f6:0d:d3:34:4c:ae:58:f2:4a:a1: 2e:8c:67:1b:17:5e:54:9e:36:95:b9:4d:28:fe:29: b9:4d:7c:70:bb:b1:e7:46:fe:47:e2:0c:2c:75:d0: 98:ef:ba:28:84:9c:dd:81:23:93:2e:dd:4b:4e:db: 86:4c:17:c4:63:fa:cc:81:f9:ce:03:cf:4c:42:2d: 07:7f:32:18:c9:1d:c2:c0:27:9e:15:7b:4c:7e:ed: 9a:72:f1:bc:32:0f:9b:ef:c6:0d:42:fa:a9:a3:9b: ee:7b:59:f0:fe:66:08:c7:a4:7a:2f:a3:85:f6:51: 60:44:2f:b4:82:c8:f8:22:16:5e:7a:25:66:14:b5: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F1:06:F9:42:10:6F:AE:5D:17:C7:B6:38:98:E6:43:05:2B:0C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f7930b8b-f3c9-3495-adee-103fd2c5eb5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:44:7a:fe:f4:76:bd:e2:45:70:56:3a:5f:81:07:5a:0d:58: 2a:fe:82:83:55:03:e2:fe:b8:c8:b1:6b:11:a9:c2:79:7d:5c: 84:9c:5c:20:89:87:49:98:ae:0b:76:48:6f:73:7f:c1:00:d9: e3:05:60:b9:14:b1:a5:5f:1f:d1:3f:59:3a:35:55:6f:fe:6b: 84:28:26:50:3a:e1:05:d3:f4:aa:23:f8:e6:57:34:a0:3a:94: 80:73:68:3f:7d:e2:2d:51:1c:54:ac:52:c1:cf:b9:20:cc:40: 61:a7:54:1d:9f:b7:b4:c3:80:9e:32:4e:cd:49:49:f9:85:e0: 40:98:85:99:f3:21:29:9a:67:69:51:32:27:de:bf:c4:0b:51: ae:4d:f5:3b:33:88:97:f1:79:5a:aa:2f:73:ef:b5:78:af:22: 11:ca:1c:0e:24:b9:e5:75:0c:bf:29:be:84:fb:cf:d8:02:0c: 93:93:4c:90:4d:8f:c5:52:b7:0a:0a:ec:54:5b:ff:5c:d5:f8: 55:d0:23:af:1a:0d:09:82:46:ff:ae:fe:0d:5e:b1:96:d8:07: e7:44:03:8f:31:67:99:a9:f8:78:a6:a8:7d:a2:39:8a:04:d9: dc:e5:fe:e4:60:d5:e9:29:89:9f:f0:e3:06:c5:64:c1:50:25: 82:90:3e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sLsuVUNs+OaJrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk Mzg3ZjE0YjMtNGI2NC00MGRhLTllNzAtMGMzMDc1NzY4NDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0VBL+vsFQ0pRoU1/qMhyYRYApPF2dFVCQ3l QkTuAjA9peETEI2FPQh2CYCX88ph+4BFEp/HrRKv+SGpk6scxfnfD3kX7v3kQjDE q86wadi9wWub4gT34Bwpd1poJW2nz8oeTQ9bQghFZcWSHZX1a82iB39aqnwvmah5 cPYN0zRMrljySqEujGcbF15UnjaVuU0o/im5TXxwu7HnRv5H4gwsddCY77oohJzd gSOTLt1LTtuGTBfEY/rMgfnOA89MQi0HfzIYyR3CwCeeFXtMfu2acvG8Mg+b78YN Qvqpo5vue1nw/mYIx6R6L6OF9lFgRC+0gsj4IhZeeiVmFLWjAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPxBvlCEG+uXRfHtjiY5kMFKwxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjc5MzBiOGItZjNjOS0z NDk1LWFkZWUtMTAzZmQyYzVlYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhEev70dr3iRXBWOl+BB1oNWCr+goNVA+L+uMixaxGpwnl9XIScXCCJ h0mYrgt2SG9zf8EA2eMFYLkUsaVfH9E/WTo1VW/+a4QoJlA64QXT9Koj+OZXNKA6 lIBzaD994i1RHFSsUsHPuSDMQGGnVB2ft7TDgJ4yTs1JSfmF4ECYhZnzISmaZ2lR Mifev8QLUa5N9TsziJfxeVqqL3PvtXivIhHKHA4kueV1DL8pvoT7z9gCDJOTTJBN j8VStwoK7FRb/1zV+FXQI68aDQmCRv+u/g1esZbYB+dEA48xZ5mp+HimqH2iOYoE 2dzl/uRg1ekpiZ/w4wbFZMFQJYKQPlI= -----END CERTIFICATE-----Generated at Sun Jul 20 09:24:00 2025 by rpki-client