$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7008b7-8e1a-325f-b86c-d1dd8bedafd1.roa File: 2b7008b7-8e1a-325f-b86c-d1dd8bedafd1.roa (raw, json) Hash identifier: 6xxx5kogd4mRMQR+CutcfkLjpJ0UoNdxQlpvPKSMS+A= Subject key identifier: B0:6E:84:C7:36:3E:9E:9B:07:B3:EB:FF:9E:A9:55:8B:27:C3:D3:4B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C35968B65C8B1A47FF00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7008b7-8e1a-325f-b86c-d1dd8bedafd1.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397218 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c3:59:68:b6:5c:8b:1a:47:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=c860a9d2-bc7e-4944-a3b3-f15f8e863663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dd:af:6b:ad:07:4f:cf:8a:e5:e7:49:2f:4d: 22:d8:38:ca:95:a2:e3:f7:48:d8:90:51:00:d1:0d: d5:80:1a:24:48:01:5a:14:75:45:fd:9a:03:51:1b: 59:de:0f:50:82:a5:61:1f:4b:04:bd:04:c2:f5:6c: 87:41:11:fc:73:d3:33:d3:bc:9c:12:72:3c:bf:05: 31:4c:3b:02:cc:19:5f:be:39:25:9e:f8:1b:fd:83: 28:b9:32:8c:48:47:b6:37:a7:4c:81:61:56:6e:ce: 74:9d:18:90:70:49:62:99:fa:cd:71:5d:30:ae:6b: 4d:fc:aa:86:dd:66:12:6f:ec:cf:99:ee:ba:c1:4f: fb:d0:92:17:ac:ac:46:ca:50:eb:41:dc:e0:b7:c5: 9e:97:bb:4b:d5:5a:f5:6e:81:db:d2:d6:9a:b6:e0: ce:00:79:f5:f0:23:29:3f:f8:57:e3:11:6f:bf:9c: c0:7e:19:a7:27:4f:45:ea:b5:9a:eb:3c:4c:9c:30: 3b:36:4d:3f:d0:61:c8:92:25:9d:a1:0c:f4:76:26: a1:eb:bc:a5:1e:4e:ee:16:4b:1a:ec:49:b1:e2:35: 45:4f:48:f4:e1:ea:f3:95:79:0c:2b:bb:52:c0:ca: 24:45:be:4c:b9:f9:32:ad:a2:eb:3b:82:a3:ef:ee: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6E:84:C7:36:3E:9E:9B:07:B3:EB:FF:9E:A9:55:8B:27:C3:D3:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b7008b7-8e1a-325f-b86c-d1dd8bedafd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:58:5d:82:72:70:41:74:74:90:25:48:9b:87:74:47:1c:fc: d4:44:c1:07:1e:03:37:02:e4:a0:55:f1:b4:88:9a:2c:55:15: 14:e5:6f:46:a1:64:36:7a:44:76:56:0c:c6:76:9a:11:17:cf: bc:87:18:9b:05:df:c7:00:bd:a7:12:7d:04:57:25:d9:a9:0d: 52:17:d5:31:c3:8e:00:13:81:12:5c:39:42:c3:21:fc:60:65: ff:cb:79:e8:c5:13:1a:58:d4:11:5b:83:d9:6a:ff:19:7d:cb: b1:ca:7f:24:54:7d:c6:ba:ab:10:1f:67:fb:57:c6:be:1d:27: b5:3c:66:bc:59:ad:c4:56:87:d1:12:46:85:1e:af:f2:f5:19: 40:6c:ec:4c:06:41:5b:09:bd:67:25:4a:57:79:a4:ba:85:83: 8b:03:ba:dc:fa:46:52:1f:96:6a:e7:50:fd:60:d4:a8:e8:c9: 20:fc:76:d1:88:5c:54:2e:27:fa:fc:84:5f:5a:aa:8c:29:8a: ed:b6:7b:95:1e:88:e0:bf:43:72:21:84:28:1c:e2:33:5f:b3: 2b:4e:c0:4c:f0:ad:2e:6f:45:9a:51:b7:45:5b:75:37:5e:b0: aa:73:14:fb:4f:d6:d2:b0:61:0f:ac:13:d3:2a:11:fe:98:6e: 45:36:6d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsNZaLZcixpH/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Yzg2MGE5ZDItYmM3ZS00OTQ0LWEzYjMtZjE1ZjhlODYzNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t2va60HT8+K5edJL00i2DjKlaLj90jYkFEA 0Q3VgBokSAFaFHVF/ZoDURtZ3g9QgqVhH0sEvQTC9WyHQRH8c9Mz07ycEnI8vwUx TDsCzBlfvjklnvgb/YMouTKMSEe2N6dMgWFWbs50nRiQcElimfrNcV0wrmtN/KqG 3WYSb+zPme66wU/70JIXrKxGylDrQdzgt8Wel7tL1Vr1boHb0taatuDOAHn18CMp P/hX4xFvv5zAfhmnJ09F6rWa6zxMnDA7Nk0/0GHIkiWdoQz0diah67ylHk7uFksa 7Emx4jVFT0j04erzlXkMK7tSwMokRb5MufkyraLrO4Kj7+7buQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBuhMc2Pp6bB7Pr/56pVYsnw9NLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmI3MDA4YjctOGUxYS0z MjVmLWI4NmMtZDFkZDhiZWRhZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBYXYJycEF0dJAlSJuHdEcc/NREwQceAzcC5KBV8bSImixVFRTlb0ah ZDZ6RHZWDMZ2mhEXz7yHGJsF38cAvacSfQRXJdmpDVIX1THDjgATgRJcOULDIfxg Zf/LeejFExpY1BFbg9lq/xl9y7HKfyRUfca6qxAfZ/tXxr4dJ7U8ZrxZrcRWh9ES RoUer/L1GUBs7EwGQVsJvWclSld5pLqFg4sDutz6RlIflmrnUP1g1KjoySD8dtGI XFQuJ/r8hF9aqowpiu22e5UeiOC/Q3IhhCgc4jNfsytOwEzwrS5vRZpRt0VbdTde sKpzFPtP1tKwYQ+sE9MqEf6YbkU2bUM= -----END CERTIFICATE-----Generated at Sat Sep 6 10:15:37 2025 by rpki-client