$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa File: ff45faf5-56ca-3c45-8e73-885c0701be83.roa (raw, json) Hash identifier: 9DVxVO5HJwQL0INdoHoMUasVmV8tSp7OykvSKIn+XNM= Subject key identifier: 0B:3A:37:B1:19:34:F7:0D:B5:EC:55:48:2C:7D:46:CD:52:3A:B9:B1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A7BB0C05A236C821D76FA97C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 397227 IP address blocks: 156.154.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:c0:5a:23:6c:82:1d:76:fa:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=a4d912db-8d2b-4e3e-a1c3-a6510e7829c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:cf:a9:9c:f4:1b:38:cb:25:d1:17:ab:5b: 72:54:f2:29:fb:f2:29:06:1b:87:bf:54:5a:f5:67: 11:0b:0a:b7:6b:3c:97:e9:2a:cf:dd:c8:3a:6b:02: ce:c3:b6:4e:d3:79:b6:0a:fe:a4:10:00:fb:6f:e0: c3:86:19:34:bc:7a:35:dc:19:b1:2d:d7:b1:72:b5: 49:f4:12:ad:cd:72:17:47:4b:dd:51:21:a9:db:52: 6f:1e:43:24:4d:49:a9:87:ec:12:c2:1f:02:c2:4a: ac:94:5f:d9:8c:7f:20:f4:75:ad:2e:2f:4f:f2:bc: 10:f3:75:46:68:71:12:83:75:5b:5a:e9:f7:c1:a0: 07:e7:ec:85:0a:02:bc:d6:4c:64:60:e3:9e:bb:51: 3d:5f:6b:a0:0e:24:0f:2c:32:84:21:0d:32:6b:d4: e7:3d:36:7d:00:58:52:87:4b:1a:37:1a:f2:94:7a: 44:60:52:97:ed:40:44:33:31:cb:11:18:c9:38:6f: d4:56:ff:f8:0c:67:b6:5e:d2:21:d9:f4:51:ba:94: eb:f4:bb:b0:80:40:e7:6d:e4:c2:8a:27:ba:9c:6a: 39:83:29:c1:6f:02:7b:fe:9f:3d:e2:29:4f:aa:2a: 53:38:26:06:aa:bf:0b:1e:c5:c0:d8:28:53:b5:21: 18:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3A:37:B1:19:34:F7:0D:B5:EC:55:48:2C:7D:46:CD:52:3A:B9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff45faf5-56ca-3c45-8e73-885c0701be83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:27:5a:10:08:c1:89:95:25:60:e2:96:61:a3:19:e4:4d:53: 1b:7d:dd:42:6b:70:4c:4b:4f:1c:6e:54:cc:dc:c7:a3:e5:5f: c9:62:91:25:7d:5a:64:8d:95:a8:b1:d4:cf:e2:0b:ab:c0:2c: 7c:bf:8c:36:76:ae:9b:28:65:ef:b8:e3:58:90:68:41:e1:94: 10:25:ac:1f:6f:54:9a:7b:71:e6:de:f5:d2:a6:99:63:b6:5e: 4a:d7:70:1f:5f:b0:ad:e0:55:e4:6f:e1:67:0b:61:eb:47:1e: 3e:b9:16:b7:2f:7f:cb:57:33:d3:09:a2:9e:bd:19:4c:81:0f: d4:15:45:2d:ae:74:f4:8c:7d:bc:5d:c4:84:2b:0d:68:ac:3e: 22:d2:7f:b2:d4:8b:33:dc:8f:0a:e1:dd:8b:eb:ff:ce:14:50: a8:03:87:54:86:81:0c:96:31:76:22:0f:81:59:f6:49:b2:b4: 6f:bc:4c:f6:76:45:97:3d:22:ee:e6:4f:32:83:3f:c9:1e:fc: 19:66:cc:c5:ba:ce:37:39:b4:23:59:aa:0c:79:32:b5:d3:45: 82:fe:24:e7:44:aa:94:6c:b0:8b:66:65:26:13:63:9d:02:3a: f7:82:3f:c5:69:5f:40:48:c8:21:44:2d:96:8d:73:28:65:92: d2:b0:c0:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sMBaI2yCHXb6l8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk YTRkOTEyZGItOGQyYi00ZTNlLWExYzMtYTY1MTBlNzgyOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFLPqZz0GzjLJdEXq1tyVPIp+/IpBhuHv1Ra 9WcRCwq3azyX6SrP3cg6awLOw7ZO03m2Cv6kEAD7b+DDhhk0vHo13BmxLdexcrVJ 9BKtzXIXR0vdUSGp21JvHkMkTUmph+wSwh8CwkqslF/ZjH8g9HWtLi9P8rwQ83VG aHESg3VbWun3waAH5+yFCgK81kxkYOOeu1E9X2ugDiQPLDKEIQ0ya9TnPTZ9AFhS h0saNxrylHpEYFKX7UBEMzHLERjJOG/UVv/4DGe2XtIh2fRRupTr9LuwgEDnbeTC iie6nGo5gynBbwJ7/p894ilPqipTOCYGqr8LHsXA2ChTtSEY0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs6N7EZNPcNtexVSCx9Rs1SOrmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmY0NWZhZjUtNTZjYS0z YzQ1LThlNzMtODg1YzA3MDFiZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYnWhAIwYmVJWDilmGjGeRNUxt93UJrcExLTxxuVMzcx6PlX8likSV9 WmSNlaix1M/iC6vALHy/jDZ2rpsoZe+441iQaEHhlBAlrB9vVJp7cebe9dKmmWO2 XkrXcB9fsK3gVeRv4WcLYetHHj65Frcvf8tXM9MJop69GUyBD9QVRS2udPSMfbxd xIQrDWisPiLSf7LUizPcjwrh3Yvr/84UUKgDh1SGgQyWMXYiD4FZ9kmytG+8TPZ2 RZc9Iu7mTzKDP8ke/BlmzMW6zjc5tCNZqgx5MrXTRYL+JOdEqpRssItmZSYTY50C OveCP8VpX0BIyCFELZaNcyhlktKwwAQ= -----END CERTIFICATE-----Generated at Sun Jul 27 10:13:50 2025 by rpki-client