$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ef90444-2e16-349c-b820-ac7277ef5606.roa File: 8ef90444-2e16-349c-b820-ac7277ef5606.roa (raw, json) Hash identifier: GszZcMyyXpea1FtxKB5ze1CVKmD3/8l2relDcCI9dDE= Subject key identifier: 67:D7:CF:A4:5C:45:61:AA:AA:9A:C2:AD:FF:F6:A2:B9:FA:52:10:2C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C526284CB0197078D060 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ef90444-2e16-349c-b820-ac7277ef5606.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397243 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c5:26:28:4c:b0:19:70:78:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=019aae50-04fd-4821-9de7-87fc2c584e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:e0:c3:26:ef:cc:b8:18:0e:3a:5e:84:43: 5a:83:3d:55:8a:f2:5d:24:f2:b7:f3:a0:3d:b2:58: 90:61:28:55:9f:3f:a1:19:b5:ec:37:18:a4:88:e7: b2:bb:ca:b0:49:b2:72:5c:84:ce:87:f9:db:2e:f0: d2:07:72:fa:99:e3:b3:59:a0:3b:98:f2:8b:de:53: ae:12:f0:21:9e:e4:c8:4a:38:b7:0e:c5:36:04:7e: b3:6a:03:69:50:7d:30:d7:72:a6:19:40:09:24:5e: dc:9e:a5:a7:f0:e8:77:28:a1:4e:5d:2f:c3:11:6c: 2c:b1:a7:6c:c8:45:8d:07:22:85:50:2c:76:93:f4: 3a:a1:b8:39:dc:f3:e0:fc:24:54:94:6e:0e:3d:d9: f5:c6:f8:ca:6a:3e:e8:2a:8a:4e:57:62:8a:c7:1d: 7e:78:2f:f5:da:70:84:26:1e:64:11:83:50:20:28: 3d:2c:d3:3d:c3:cc:70:12:f3:55:14:b3:de:77:1e: 29:2c:b5:2c:5d:ec:4b:83:27:59:91:f7:28:72:d1: 84:d1:3d:9e:8e:68:b5:4c:f6:8b:69:c4:81:e4:28: 42:2e:ad:cd:22:50:20:9b:f1:83:a4:03:0e:08:64: c5:6d:65:1b:bf:de:81:16:a0:6f:e4:b5:85:a7:84: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D7:CF:A4:5C:45:61:AA:AA:9A:C2:AD:FF:F6:A2:B9:FA:52:10:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ef90444-2e16-349c-b820-ac7277ef5606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d2:70:3a:3d:04:8b:20:13:e0:62:cc:67:94:bf:27:d1:9c: b8:b0:ba:88:d6:17:db:9f:26:b8:f9:eb:3c:3a:6e:37:aa:7e: 37:da:4f:f1:70:53:5b:94:c4:90:57:d0:bc:58:0c:02:4d:6d: 4f:c9:de:e0:92:c2:ee:c5:02:d7:63:03:a3:6e:ec:36:32:7e: da:e8:c6:8f:e9:87:60:04:47:c4:6b:5d:c5:23:5f:fa:b6:14: 9e:5e:87:65:16:c7:19:39:b5:b4:63:04:26:25:a8:30:85:58: 9d:cd:dd:f4:11:de:38:51:8e:63:78:66:bb:3b:83:db:aa:53: e0:e4:70:3a:4a:f6:3a:b3:62:38:8c:aa:38:30:c6:4c:0c:ab: d7:a3:74:93:a1:0c:48:53:b5:d1:99:a0:c4:fe:ec:2a:b5:10: d2:c6:28:cd:f2:80:a4:cd:19:62:a7:fa:f2:d2:e8:e6:11:90: 76:64:86:49:7b:d0:60:dc:ee:9f:20:e3:da:62:02:2d:45:42: 3d:de:c9:84:44:41:97:20:6f:1b:a1:c4:67:6f:b4:d7:fb:83: f9:5e:49:09:d8:11:42:6f:d7:24:f0:a1:db:65:be:20:ca:cf: 14:35:d3:4a:c6:6e:6d:49:b9:c0:2a:88:24:91:1b:2b:b8:7b: 90:a9:cb:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsUmKEywGXB40GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MDE5YWFlNTAtMDRmZC00ODIxLTlkZTctODdmYzJjNTg0ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqrgwybvzLgYDjpehENagz1VivJdJPK386A9 sliQYShVnz+hGbXsNxikiOeyu8qwSbJyXITOh/nbLvDSB3L6meOzWaA7mPKL3lOu EvAhnuTISji3DsU2BH6zagNpUH0w13KmGUAJJF7cnqWn8Oh3KKFOXS/DEWwssads yEWNByKFUCx2k/Q6obg53PPg/CRUlG4OPdn1xvjKaj7oKopOV2KKxx1+eC/12nCE Jh5kEYNQICg9LNM9w8xwEvNVFLPedx4pLLUsXexLgydZkfcoctGE0T2ejmi1TPaL acSB5ChCLq3NIlAgm/GDpAMOCGTFbWUbv96BFqBv5LWFp4S++wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfXz6RcRWGqqprCrf/2orn6UhAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGVmOTA0NDQtMmUxNi0z NDljLWI4MjAtYWM3Mjc3ZWY1NjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLScDo9BIsgE+BizGeUvyfRnLiwuojWF9ufJrj56zw6bjeqfjfaT/Fw U1uUxJBX0LxYDAJNbU/J3uCSwu7FAtdjA6Nu7DYyftroxo/ph2AER8RrXcUjX/q2 FJ5eh2UWxxk5tbRjBCYlqDCFWJ3N3fQR3jhRjmN4Zrs7g9uqU+DkcDpK9jqzYjiM qjgwxkwMq9ejdJOhDEhTtdGZoMT+7Cq1ENLGKM3ygKTNGWKn+vLS6OYRkHZkhkl7 0GDc7p8g49piAi1FQj3eyYREQZcgbxuhxGdvtNf7g/leSQnYEUJv1yTwodtlviDK zxQ100rGbm1JucAqiCSRGyu4e5Cpy58= -----END CERTIFICATE-----Generated at Sat Sep 6 12:18:35 2025 by rpki-client