$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f2855b1-3872-33a9-99f9-3156b9dc3a04.roa File: 2f2855b1-3872-33a9-99f9-3156b9dc3a04.roa (raw, json) Hash identifier: pbH1QrCdHI00NnL+DnOmM/3hWJj12d687xloEeNsTFM= Subject key identifier: 25:42:E7:2A:36:84:8E:35:20:D2:B9:02:60:C0:60:BB:F0:DF:61:BA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C514D7ECA8280ADA5900 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f2855b1-3872-33a9-99f9-3156b9dc3a04.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397242 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c5:14:d7:ec:a8:28:0a:da:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d82c36b1-0839-4abe-b8cc-476b6497c030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:fb:56:1d:f7:c5:c2:3d:ed:b5:a2:76:c1: 8a:65:30:d2:4a:3f:0b:c4:bd:57:37:e2:f7:b0:03: 91:a4:60:87:55:2f:ad:d7:f9:60:b6:52:3e:b3:3d: 71:a4:ab:d8:27:ce:92:1e:be:73:16:20:e8:0f:4f: a7:01:8e:6f:55:4e:94:5e:e3:c1:6a:80:fc:cf:92: 36:2e:4b:27:3d:dc:90:11:97:2d:d3:66:44:c2:a0: a0:40:62:f8:c2:ed:0e:64:56:ba:0b:44:b1:ca:61: 66:83:d3:a3:07:cd:31:fd:9b:24:ed:e4:8d:80:96: 90:22:e4:49:5c:98:2f:e3:89:a1:77:a4:a5:b5:2f: c3:24:da:58:e3:3e:a8:22:1f:b1:bb:5c:9c:e1:ea: 38:4d:29:78:12:62:56:50:c4:f3:4d:af:c1:24:3c: 19:e4:01:85:6b:57:5c:9a:54:d2:fb:13:90:5b:0a: e6:39:d4:ff:00:02:24:b8:ec:50:bc:37:0e:17:e9: 0b:5d:48:3a:5f:f1:75:ea:64:e5:a2:2f:b1:23:ee: 8e:8b:68:1b:30:1d:d3:57:27:67:c7:e6:98:60:0d: 3a:04:1a:1b:06:83:37:ce:72:0a:f6:8b:02:a0:59: 97:05:69:b8:39:99:af:0d:d7:04:b6:f2:15:1d:f9: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:42:E7:2A:36:84:8E:35:20:D2:B9:02:60:C0:60:BB:F0:DF:61:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2f2855b1-3872-33a9-99f9-3156b9dc3a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d2:6b:f2:4e:dc:58:2c:0d:29:29:4b:5a:d1:da:c4:07:e1: 7f:1e:0d:2d:bf:9f:a9:2a:9d:0a:2f:9a:f1:0e:8c:74:a1:0c: a9:4d:4a:14:a9:e1:74:c5:1e:a3:34:4f:a8:ec:db:0a:b9:37: df:89:33:b6:e8:2b:82:9c:9c:14:cc:24:7a:57:bd:5f:0e:a4: 00:47:f2:9c:81:85:11:db:2d:89:28:e8:44:a9:97:68:78:ca: 65:ca:6a:6f:0e:29:70:53:0b:98:81:c7:a8:92:16:45:ab:1d: f2:22:1e:85:29:ff:1b:4e:13:ea:d7:d4:fd:5b:05:e2:d9:8c: b0:cc:43:e8:ed:b6:8c:3a:38:24:1e:a4:af:67:b0:53:8f:df: 2b:09:de:f4:e1:43:d7:1f:ec:26:b1:57:be:0c:31:78:55:16: 27:fe:03:c0:28:bd:54:81:c4:69:32:9e:0e:c9:21:01:e9:fe: a4:fc:b6:a7:de:b9:ac:ee:2b:e7:be:f3:bb:ad:5a:21:34:56: 8b:a3:19:1f:5d:60:08:ad:fb:c5:6e:f7:0e:95:81:19:54:c0: ec:90:05:c8:eb:50:3a:28:be:41:ab:7c:bd:9a:b3:42:85:45: 0b:5f:9f:b1:b4:13:a8:3f:ce:3e:6c:fe:ae:c7:59:72:a6:44: 7e:b8:82:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsUU1+yoKAraWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDgyYzM2YjEtMDgzOS00YWJlLWI4Y2MtNDc2YjY0OTdjMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vX7Vh33xcI97bWidsGKZTDSSj8LxL1XN+L3 sAORpGCHVS+t1/lgtlI+sz1xpKvYJ86SHr5zFiDoD0+nAY5vVU6UXuPBaoD8z5I2 LksnPdyQEZct02ZEwqCgQGL4wu0OZFa6C0SxymFmg9OjB80x/Zsk7eSNgJaQIuRJ XJgv44mhd6SltS/DJNpY4z6oIh+xu1yc4eo4TSl4EmJWUMTzTa/BJDwZ5AGFa1dc mlTS+xOQWwrmOdT/AAIkuOxQvDcOF+kLXUg6X/F16mTloi+xI+6Oi2gbMB3TVydn x+aYYA06BBobBoM3znIK9osCoFmXBWm4OZmvDdcEtvIVHfkWgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVC5yo2hI41INK5AmDAYLvw32G6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmYyODU1YjEtMzg3Mi0z M2E5LTk5ZjktMzE1NmI5ZGMzYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnSa/JO3FgsDSkpS1rR2sQH4X8eDS2/n6kqnQovmvEOjHShDKlNShSp 4XTFHqM0T6js2wq5N9+JM7boK4KcnBTMJHpXvV8OpABH8pyBhRHbLYko6ESpl2h4 ymXKam8OKXBTC5iBx6iSFkWrHfIiHoUp/xtOE+rX1P1bBeLZjLDMQ+jttow6OCQe pK9nsFOP3ysJ3vThQ9cf7CaxV74MMXhVFif+A8AovVSBxGkyng7JIQHp/qT8tqfe uazuK+e+87utWiE0VoujGR9dYAit+8Vu9w6VgRlUwOyQBcjrUDoovkGrfL2as0KF RQtfn7G0E6g/zj5s/q7HWXKmRH64gv0= -----END CERTIFICATE-----Generated at Sat Sep 6 10:23:30 2025 by rpki-client