$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9e99f7-8bab-3800-8937-4159b66efd0c.roa File: ff9e99f7-8bab-3800-8937-4159b66efd0c.roa (raw, json) Hash identifier: D/3l1UagHWcNipl0cNC5yckKVJzMAgpEHEGOESsb9xY= Subject key identifier: 11:DE:DA:E2:02:57:EB:5D:FB:59:1E:FD:E9:07:2C:DB:24:4F:92:21 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A682636421B1F02320E109900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9e99f7-8bab-3800-8937-4159b66efd0c.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 397225 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:36:42:1b:1f:02:32:0e:10:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=9ef9d4f2-395e-4662-8cc0-e5e85ed75c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:91:52:52:47:58:99:ce:b6:76:65:11:be: 3c:51:31:89:04:d1:80:b5:dd:d3:4f:36:b5:70:97: c4:6e:2e:6d:3a:ab:cd:e1:d8:64:aa:67:16:73:02: fe:fc:9c:5c:b6:d5:78:77:ef:11:51:d4:8a:96:58: 4a:f3:b8:73:cb:b8:18:c6:a7:2e:52:f2:14:99:20: 7a:6b:35:ad:67:5e:34:35:c1:57:6d:24:37:13:6b: 80:79:6f:21:07:a3:06:9f:ff:20:38:e6:ba:fe:96: 09:16:41:74:69:78:16:bf:bb:f3:e2:e8:8a:29:ba: a7:88:4e:06:d3:26:22:89:3a:32:c3:a2:6f:88:2a: 4c:27:fe:f3:c2:72:5c:eb:85:6c:c7:e3:cf:93:d9: 96:5c:4a:cf:b0:71:5c:fc:57:a0:e7:42:79:88:55: 22:8b:b3:f5:14:db:85:2c:d5:9e:a7:27:33:21:4a: ee:cb:0e:eb:46:59:5e:ca:6b:aa:fe:ab:4e:74:04: 21:47:5d:cb:f0:89:66:20:e3:ec:db:96:28:76:fb: 8a:b5:d5:76:8b:8e:78:97:8c:4e:4f:7f:d6:f6:6b: ff:fa:5f:35:92:91:0f:30:91:eb:3d:2e:c9:43:e9: 3f:7f:7b:93:18:0b:0e:50:49:76:56:a2:a0:bc:8e: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DE:DA:E2:02:57:EB:5D:FB:59:1E:FD:E9:07:2C:DB:24:4F:92:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff9e99f7-8bab-3800-8937-4159b66efd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:dd:ae:aa:a3:08:18:1e:8e:40:9d:5f:0f:47:2b:39:26:a8: c2:1a:cd:4d:a0:fb:bb:0c:f6:b3:30:14:0b:af:c1:0f:cf:72: 90:30:b7:b2:7d:3d:62:4e:27:14:b0:3f:fb:88:87:86:6c:e2: 24:97:f1:0e:d0:c4:1f:0b:49:8f:7c:a6:7e:1c:1c:45:99:11: 8f:dc:2a:08:74:46:2e:73:81:fa:ef:71:57:8d:bc:10:5f:af: 90:b7:1c:2d:af:a3:ac:6a:97:a5:c7:ee:e2:f5:bd:f5:97:60: c2:5c:d1:ff:a3:49:fd:f7:e9:5c:91:ee:1c:3a:f1:e2:74:09: 67:d7:17:24:0c:35:93:2c:bf:2e:96:9a:6f:4a:21:a5:a7:da: de:0e:fe:c5:db:57:90:63:ba:48:5b:bd:65:aa:0c:30:0f:e5: fb:4c:fc:01:81:56:c7:9a:4a:9a:f3:d6:20:11:cd:26:7c:6d: 01:d7:0f:27:42:a3:ac:e0:d2:03:69:32:91:50:9b:ac:6b:92: ee:76:2e:cc:55:a9:47:9d:52:02:55:0e:5d:07:b8:b4:96:5b: 74:13:2f:5d:14:2a:1d:c4:89:7a:22:49:96:b8:c3:de:2c:70: 59:8b:9d:2a:da:f4:63:f1:b9:72:4e:17:02:c6:12:5d:d1:b1: 0a:00:a8:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjZCGx8CMg4QmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk OWVmOWQ0ZjItMzk1ZS00NjYyLThjYzAtZTVlODVlZDc1YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxCRUlJHWJnOtnZlEb48UTGJBNGAtd3TTza1 cJfEbi5tOqvN4dhkqmcWcwL+/JxcttV4d+8RUdSKllhK87hzy7gYxqcuUvIUmSB6 azWtZ140NcFXbSQ3E2uAeW8hB6MGn/8gOOa6/pYJFkF0aXgWv7vz4uiKKbqniE4G 0yYiiToyw6JviCpMJ/7zwnJc64Vsx+PPk9mWXErPsHFc/Feg50J5iFUii7P1FNuF LNWepyczIUruyw7rRlleymuq/qtOdAQhR13L8IlmIOPs25YodvuKtdV2i454l4xO T3/W9mv/+l81kpEPMJHrPS7JQ+k/f3uTGAsOUEl2VqKgvI4CjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHe2uICV+td+1ke/ekHLNskT5IhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmY5ZTk5ZjctOGJhYi0z ODAwLTg5MzctNDE1OWI2NmVmZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjdrqqjCBgejkCdXw9HKzkmqMIazU2g+7sM9rMwFAuvwQ/PcpAwt7J9 PWJOJxSwP/uIh4Zs4iSX8Q7QxB8LSY98pn4cHEWZEY/cKgh0Ri5zgfrvcVeNvBBf r5C3HC2vo6xql6XH7uL1vfWXYMJc0f+jSf336VyR7hw68eJ0CWfXFyQMNZMsvy6W mm9KIaWn2t4O/sXbV5BjukhbvWWqDDAP5ftM/AGBVseaSprz1iARzSZ8bQHXDydC o6zg0gNpMpFQm6xrku52LsxVqUedUgJVDl0HuLSWW3QTL10UKh3EiXoiSZa4w94s cFmLnSra9GPxuXJOFwLGEl3RsQoAqIE= -----END CERTIFICATE-----Generated at Sun Jul 27 10:06:39 2025 by rpki-client