$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d1a12ea-3963-35c6-b4f8-3d4e32c495aa.roa File: 5d1a12ea-3963-35c6-b4f8-3d4e32c495aa.roa (raw, json) Hash identifier: aO+cUh4vh+ZcC2qtK7cq/uOSmtjVVMJQBXMH6D5oo3I= Subject key identifier: BC:5F:E9:F1:CA:05:4A:F7:B4:24:2D:96:1A:FD:8A:AC:D3:20:46:E4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C42BC0540A92E29E7380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d1a12ea-3963-35c6-b4f8-3d4e32c495aa.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397229 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c4:2b:c0:54:0a:92:e2:9e:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=97ee01eb-e1dc-48dd-8be0-2101b6a18478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:f6:f1:ef:16:48:e4:36:00:2d:6c:25:a3: 27:65:20:f1:71:aa:5a:2e:d4:5d:dc:6f:47:a3:a0: 36:18:b6:a0:04:c0:75:fe:15:54:ec:73:2b:3d:1c: 95:81:a1:85:d0:8e:f3:43:75:69:95:e1:dd:ba:14: 7a:1b:60:33:e6:5c:58:c2:36:6f:9c:60:78:34:b3: 87:ea:e7:f8:b3:e2:14:cc:1f:4b:5e:12:4a:f4:0d: d5:f4:ad:08:5e:c9:0f:c4:f2:29:de:64:9a:f2:3f: 76:99:1b:0d:a3:1f:7f:69:d0:d9:e7:82:98:29:38: 0b:ae:0d:6e:74:92:ef:bb:24:a1:53:f1:11:23:70: 9d:7f:7f:e6:de:2f:fd:d9:2a:b1:a6:85:3b:f3:1a: 84:9f:f5:4c:27:49:c1:53:cf:e1:34:bd:03:50:a5: 18:1d:f2:b2:88:a1:4a:9f:5d:83:17:b1:70:2a:61: 8a:88:2a:7f:82:18:25:ea:e9:2f:af:a3:46:64:d4: 62:c9:ef:a9:51:1c:d8:1d:29:59:31:bc:fd:b1:e7: 51:ce:f0:3f:92:9d:65:64:f0:0d:65:88:88:be:37: c5:62:bf:a0:85:67:d7:16:79:af:73:0b:32:89:89: 96:00:b9:6b:86:58:5e:bb:6a:b2:ab:df:b5:c4:80: 06:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5F:E9:F1:CA:05:4A:F7:B4:24:2D:96:1A:FD:8A:AC:D3:20:46:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5d1a12ea-3963-35c6-b4f8-3d4e32c495aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:37:c3:31:23:eb:79:94:41:2e:1d:bc:2f:23:be:80:fb:6f: 80:03:84:fe:dd:12:76:d0:0d:fa:fb:fb:c9:08:fe:12:02:e3: a7:b0:46:97:70:06:47:04:d1:98:18:f9:b9:be:db:0a:5e:35: de:78:47:a4:76:09:e9:5f:6f:f7:1e:8a:8d:ae:4b:87:44:d3: a3:74:d1:4d:ef:e3:d4:dc:df:9c:7e:fe:e0:a5:82:18:e6:95: dc:18:86:a5:c4:03:8f:bc:b4:3e:3d:af:32:48:a9:1e:01:5f: 63:38:03:4c:03:de:56:1c:cd:86:41:d8:41:c6:66:a6:30:55: 6a:e4:de:56:1f:33:6c:dc:de:08:17:4b:cf:ef:60:fe:03:0a: b6:97:12:f4:5f:db:e8:c3:6e:88:70:51:6f:d7:3d:00:a5:07: d4:0c:00:f2:95:f6:99:aa:86:33:28:d1:59:d1:05:b8:f8:72: 8d:31:4b:2e:83:06:7c:22:85:e0:9a:b4:97:b2:be:b9:44:31: a4:14:90:13:48:f2:e0:9c:b5:81:9f:56:e5:d6:77:85:24:74: f8:f8:42:18:27:67:96:3d:71:11:96:f8:a0:38:70:8c:6b:ef: 48:5c:a2:7e:5f:6d:49:3b:30:a7:36:dc:c2:98:c5:5c:7d:69: 3e:53:f9:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsQrwFQKkuKec4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OTdlZTAxZWItZTFkYy00OGRkLThiZTAtMjEwMWI2YTE4NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOD28e8WSOQ2AC1sJaMnZSDxcapaLtRd3G9H o6A2GLagBMB1/hVU7HMrPRyVgaGF0I7zQ3VpleHduhR6G2Az5lxYwjZvnGB4NLOH 6uf4s+IUzB9LXhJK9A3V9K0IXskPxPIp3mSa8j92mRsNox9/adDZ54KYKTgLrg1u dJLvuyShU/ERI3Cdf3/m3i/92SqxpoU78xqEn/VMJ0nBU8/hNL0DUKUYHfKyiKFK n12DF7FwKmGKiCp/ghgl6ukvr6NGZNRiye+pURzYHSlZMbz9sedRzvA/kp1lZPAN ZYiIvjfFYr+ghWfXFnmvcwsyiYmWALlrhlheu2qyq9+1xIAGjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxf6fHKBUr3tCQtlhr9iqzTIEbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWQxYTEyZWEtMzk2My0z NWM2LWI0ZjgtM2Q0ZTMyYzQ5NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE3wzEj63mUQS4dvC8jvoD7b4ADhP7dEnbQDfr7+8kI/hIC46ewRpdw BkcE0ZgY+bm+2wpeNd54R6R2Celfb/ceio2uS4dE06N00U3v49Tc35x+/uClghjm ldwYhqXEA4+8tD49rzJIqR4BX2M4A0wD3lYczYZB2EHGZqYwVWrk3lYfM2zc3ggX S8/vYP4DCraXEvRf2+jDbohwUW/XPQClB9QMAPKV9pmqhjMo0VnRBbj4co0xSy6D BnwiheCatJeyvrlEMaQUkBNI8uCctYGfVuXWd4UkdPj4QhgnZ5Y9cRGW+KA4cIxr 70hcon5fbUk7MKc23MKYxVx9aT5T+XA= -----END CERTIFICATE-----Generated at Sat Sep 6 12:24:27 2025 by rpki-client