$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd89aa0c-03f9-36fb-bc16-c6180ded791f.roa File: fd89aa0c-03f9-36fb-bc16-c6180ded791f.roa (raw, json) Hash identifier: a4y89MenKBFpPHE0dlZPxmmXVe7UkIaEfK+Row5bMTw= Subject key identifier: E6:8F:4A:92:21:47:63:DD:25:50:34:24:D0:EC:27:CE:4A:D1:21:12 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682617AD9BA0EECEF2927F80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd89aa0c-03f9-36fb-bc16-c6180ded791f.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397241 IP address blocks: 156.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:17:ad:9b:a0:ee:ce:f2:92:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=a3434d3a-9ba3-4449-a58e-004e32906958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:c6:91:88:9a:3f:e2:e6:d8:04:1c:3d:38: bf:4b:70:fc:c1:23:d3:f5:00:e8:c5:34:38:f1:97: 01:1f:fc:74:75:af:04:2f:bd:b5:37:2e:65:4a:75: 02:77:cf:aa:02:23:36:cc:e3:3a:98:89:6a:61:78: fc:0d:af:23:2f:8b:db:d5:c3:2d:f6:ae:f6:d9:b7: 67:c0:ec:43:ab:fd:5f:d5:01:0e:f7:81:d3:32:f2: 55:41:7c:3b:b7:eb:44:17:8c:2a:77:31:7e:3d:fb: 9b:22:0c:90:65:83:30:b1:a6:a2:83:3b:4a:44:e7: f3:e9:c6:21:a6:be:8c:67:27:60:df:75:68:e3:37: de:a2:44:1b:96:08:6e:21:f7:2c:cd:c1:e4:54:5c: 0b:b0:89:84:c2:d7:23:ba:c1:95:c5:5e:e5:2a:81: 40:1c:22:9d:41:49:24:2b:41:f1:c0:9a:53:c3:26: 44:f1:ea:c1:bc:08:52:9a:7f:65:a4:f9:b2:a1:77: 77:60:a6:4b:69:6a:1b:a5:67:ba:0f:ca:af:00:43: b4:ea:7a:f7:58:00:29:0d:bb:74:ea:63:e7:74:d2: 25:11:38:6a:63:98:d8:b0:c7:04:ca:fe:cb:dc:a2: d3:b9:07:58:44:2d:04:1d:6e:3b:d7:55:d9:90:a8: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8F:4A:92:21:47:63:DD:25:50:34:24:D0:EC:27:CE:4A:D1:21:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd89aa0c-03f9-36fb-bc16-c6180ded791f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:77:49:c7:9a:a9:8c:51:26:b4:71:b8:86:ac:fe:6e:f5:d0: 7c:78:24:8b:62:a4:81:cb:d7:6b:42:8b:52:60:0c:f8:d3:1b: 98:5e:95:f8:56:b5:96:b6:94:c6:83:20:4d:24:90:37:0c:72: 80:51:82:cb:0c:71:d9:9b:fb:a5:d2:89:8f:a0:f7:7c:ff:8c: 28:25:6a:ee:d0:1d:db:d2:7f:67:80:5a:16:07:4d:15:37:38: 83:cc:49:31:ad:6a:ad:d2:18:73:ef:28:fa:8d:e8:8c:90:d4: b8:44:27:43:17:2c:4c:a9:0f:60:19:5d:cc:27:33:fc:45:09: 6c:32:0a:0c:b0:9a:79:3a:8b:74:fc:f9:01:43:b9:af:85:3c: 77:e9:b5:d1:52:1f:ac:47:88:23:f2:7e:0c:5b:04:0b:6c:0f: 50:96:c8:90:7d:28:f4:8a:55:cd:8d:26:bc:3e:01:96:c6:c3: a0:e4:c2:25:bd:4d:e1:af:66:dc:02:ad:18:2e:53:b1:6c:57: dd:57:e6:bc:2f:23:63:d3:0f:11:a8:25:6a:34:6c:40:cd:16: 09:b6:a1:92:73:70:3f:a2:b7:a6:ba:77:07:b6:84:50:94:ac: 68:93:7d:0f:2d:cd:a6:4c:c9:bf:9b:a7:02:be:97:00:ce:9a: 36:32:06:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhetm6DuzvKSf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk YTM0MzRkM2EtOWJhMy00NDQ5LWE1OGUtMDA0ZTMyOTA2OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBPGkYiaP+Lm2AQcPTi/S3D8wSPT9QDoxTQ4 8ZcBH/x0da8EL721Ny5lSnUCd8+qAiM2zOM6mIlqYXj8Da8jL4vb1cMt9q722bdn wOxDq/1f1QEO94HTMvJVQXw7t+tEF4wqdzF+PfubIgyQZYMwsaaigztKROfz6cYh pr6MZydg33Vo4zfeokQblghuIfcszcHkVFwLsImEwtcjusGVxV7lKoFAHCKdQUkk K0HxwJpTwyZE8erBvAhSmn9lpPmyoXd3YKZLaWobpWe6D8qvAEO06nr3WAApDbt0 6mPndNIlEThqY5jYsMcEyv7L3KLTuQdYRC0EHW4711XZkKgYrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaPSpIhR2PdJVA0JNDsJ85K0SESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmQ4OWFhMGMtMDNmOS0z NmZiLWJjMTYtYzYxODBkZWQ3OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ3SceaqYxRJrRxuIas/m710Hx4JItipIHL12tCi1JgDPjTG5helfhW tZa2lMaDIE0kkDcMcoBRgssMcdmb+6XSiY+g93z/jCglau7QHdvSf2eAWhYHTRU3 OIPMSTGtaq3SGHPvKPqN6IyQ1LhEJ0MXLEypD2AZXcwnM/xFCWwyCgywmnk6i3T8 +QFDua+FPHfptdFSH6xHiCPyfgxbBAtsD1CWyJB9KPSKVc2NJrw+AZbGw6DkwiW9 TeGvZtwCrRguU7FsV91X5rwvI2PTDxGoJWo0bEDNFgm2oZJzcD+it6a6dwe2hFCU rGiTfQ8tzaZMyb+bpwK+lwDOmjYyBnA= -----END CERTIFICATE-----Generated at Sun Jul 27 09:58:06 2025 by rpki-client