$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3940438d-02a9-34ff-99ba-636f26d47c13.roa File: 3940438d-02a9-34ff-99ba-636f26d47c13.roa (raw, json) Hash identifier: c+BkToHtRNFX+nED+ysThHd0Kby7YWFzr5PhVtnPXME= Subject key identifier: 8C:C4:55:B0:B6:84:33:40:C7:30:27:CC:F4:E4:12:21:FA:54:61:84 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C4745E93969593A1F740 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3940438d-02a9-34ff-99ba-636f26d47c13.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397233 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c4:74:5e:93:96:95:93:a1:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=f8998ceb-9fd5-49a8-b79d-c1c805727571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:fe:5a:8c:54:5f:0f:85:02:45:b8:47:91: 28:6a:8e:fa:24:a8:a1:95:c6:46:22:2a:be:05:9b: 65:9c:7c:66:33:67:4a:00:88:35:76:de:37:d9:83: 2b:4e:88:d0:e6:32:c5:47:9c:39:9f:97:43:e7:bc: df:4f:28:b3:d8:55:84:f1:8a:80:91:8b:ac:d7:63: 28:c0:be:75:f8:60:78:57:17:6e:5a:4b:5a:27:09: 41:49:cf:d9:d3:72:4e:d0:01:19:41:ea:03:6e:5b: 88:a5:5e:06:d7:6a:07:0d:b5:5f:cc:26:3e:33:29: af:2b:e4:f4:1e:c8:e2:c6:4f:31:fe:40:7d:89:56: 56:f2:d2:2e:b6:8d:aa:b3:d6:ae:f0:02:e4:60:fb: 90:1b:ee:6d:54:6d:e8:2b:08:fc:bc:b7:f5:8e:9b: 8c:9d:b9:36:7d:a4:b6:54:4b:ef:6b:ca:d0:ef:9c: a5:6e:30:ca:f9:06:0f:7d:2f:b7:57:ee:23:97:d9: 35:73:a1:7a:3a:18:93:a5:3c:ef:4a:d8:94:de:69: 47:97:56:54:b0:d5:93:55:e6:74:6a:fa:f9:94:b0: 30:1c:d9:b1:83:96:66:48:4a:d1:36:f8:4a:c3:77: 36:41:4c:b4:f7:8d:ac:66:6e:cc:b7:63:4b:16:b5: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C4:55:B0:B6:84:33:40:C7:30:27:CC:F4:E4:12:21:FA:54:61:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3940438d-02a9-34ff-99ba-636f26d47c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ec:88:bf:7c:c9:5c:5b:85:c6:1d:40:e4:b9:63:3f:37:97: f5:e1:ab:5e:5f:c6:1d:c4:c3:77:dc:66:ce:61:b0:78:36:48: b3:69:45:c8:6b:84:35:f4:9d:50:df:d6:a4:b6:e5:b9:7b:47: a6:56:d2:74:45:f1:24:6e:c1:c2:89:28:4b:63:d4:55:df:20: ea:0b:23:55:21:1a:21:b9:6f:d4:0c:84:be:de:48:8d:fd:75: 70:d7:66:c6:7b:cb:2a:e1:86:0e:80:e4:cc:f4:f0:4c:7d:52: 09:5e:fb:3e:ff:62:2a:cc:25:b7:9b:1b:bd:48:76:a8:8f:01: da:66:8f:d0:6b:9e:78:af:83:82:00:c9:26:ca:52:2d:75:33: 94:4e:96:06:90:a8:bf:80:f1:5c:29:67:d2:38:aa:20:94:c5: 37:cb:24:1a:60:9d:b5:55:0d:88:c1:df:c8:71:4d:46:29:79: a8:7b:67:cd:3f:0e:66:e9:87:2b:8f:3d:cb:a2:28:1d:30:21: 50:d2:45:66:9d:f2:03:ef:c4:0a:1e:b9:4a:91:d1:6b:00:b2: b7:88:56:6a:fb:ae:ed:54:35:e4:69:28:f2:57:3b:e1:16:c2: 44:e1:1b:af:c3:b3:ef:b2:5e:0d:f3:8c:44:26:e6:07:f6:bc: 68:84:4b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsR0XpOWlZOh90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Zjg5OThjZWItOWZkNS00OWE4LWI3OWQtYzFjODA1NzI3NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUf+WoxUXw+FAkW4R5Eoao76JKihlcZGIiq+ BZtlnHxmM2dKAIg1dt432YMrTojQ5jLFR5w5n5dD57zfTyiz2FWE8YqAkYus12Mo wL51+GB4VxduWktaJwlBSc/Z03JO0AEZQeoDbluIpV4G12oHDbVfzCY+MymvK+T0 Hsjixk8x/kB9iVZW8tIuto2qs9au8ALkYPuQG+5tVG3oKwj8vLf1jpuMnbk2faS2 VEvva8rQ75ylbjDK+QYPfS+3V+4jl9k1c6F6OhiTpTzvStiU3mlHl1ZUsNWTVeZ0 avr5lLAwHNmxg5ZmSErRNvhKw3c2QUy0942sZm7Mt2NLFrWRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzEVbC2hDNAxzAnzPTkEiH6VGGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzk0MDQzOGQtMDJhOS0z NGZmLTk5YmEtNjM2ZjI2ZDQ3YzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzsiL98yVxbhcYdQOS5Yz83l/Xhq15fxh3Ew3fcZs5hsHg2SLNpRchr hDX0nVDf1qS25bl7R6ZW0nRF8SRuwcKJKEtj1FXfIOoLI1UhGiG5b9QMhL7eSI39 dXDXZsZ7yyrhhg6A5Mz08Ex9Ugle+z7/YirMJbebG71IdqiPAdpmj9Brnnivg4IA ySbKUi11M5ROlgaQqL+A8VwpZ9I4qiCUxTfLJBpgnbVVDYjB38hxTUYpeah7Z80/ DmbphyuPPcuiKB0wIVDSRWad8gPvxAoeuUqR0WsAsreIVmr7ru1UNeRpKPJXO+EW wkThG6/Ds++yXg3zjEQm5gf2vGiES+g= -----END CERTIFICATE-----Generated at Sat Sep 6 10:20:20 2025 by rpki-client