$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96cb70dd-ffa1-30e5-98b8-26e62a4119a3.roa File: 96cb70dd-ffa1-30e5-98b8-26e62a4119a3.roa (raw, json) Hash identifier: Lw6/qAOT+6ACldO/IDsVeyDj26MJYKSu7/EeLU3CakE= Subject key identifier: 51:42:41:CC:1E:C6:FB:25:B8:B4:A7:B4:01:0D:ED:2F:1E:C0:3E:5D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C6D5B438EF1621779F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96cb70dd-ffa1-30e5-98b8-26e62a4119a3.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397233 IP address blocks: 156.154.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c6:d5:b4:38:ef:16:21:77:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=8e1d8c1d-11f2-42f4-b4ab-4943a4785828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:30:40:ec:88:d1:69:08:34:c9:35:ff:18: b6:15:c5:ee:35:f2:88:d4:26:f7:65:b7:96:92:45: f8:be:82:84:ba:e3:56:c0:3b:a5:46:ed:62:89:7f: 65:c2:e6:1a:3a:ec:02:cf:ce:16:78:7e:54:01:ef: e8:60:9a:f5:e0:ba:f5:79:e8:56:96:37:fc:ce:93: 40:b5:59:63:86:7a:c1:6e:60:d1:af:ad:cd:59:4c: 73:53:87:c6:d3:94:aa:63:b1:95:98:71:c9:49:8d: e9:4a:c6:82:e8:f1:4e:40:9d:6b:c2:da:c0:5a:d1: 32:b4:a9:eb:11:5a:96:39:46:d8:2b:81:7b:1f:5e: 62:7b:e0:a2:10:0a:a8:a5:f7:4a:5a:20:b5:5d:3b: 57:4f:31:bd:4b:91:94:c0:75:59:a1:0b:69:d4:94: ab:52:26:02:56:b1:2d:c0:8f:60:f0:5d:80:85:b0: 4d:fd:5e:a7:7d:ac:aa:cc:d9:ac:bf:8c:82:86:fe: e1:46:d0:ce:67:77:24:89:42:2b:2b:89:5f:4a:92: d9:9b:5f:63:26:2f:0a:3b:22:2f:62:e1:06:bb:4e: 93:a9:33:86:f0:88:49:23:48:c7:41:0c:e1:6f:99: f4:b7:06:28:b0:78:0a:e5:86:c1:a7:af:34:cb:e4: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:42:41:CC:1E:C6:FB:25:B8:B4:A7:B4:01:0D:ED:2F:1E:C0:3E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/96cb70dd-ffa1-30e5-98b8-26e62a4119a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fa:26:03:23:44:9a:8a:c0:d2:cd:fb:0c:42:5d:36:0f:c6: 75:41:64:87:a0:cb:e6:1f:80:c6:2f:f8:32:88:51:52:89:61: a4:81:d0:75:1e:17:4c:8b:13:8a:8e:2f:22:64:4a:40:70:13: 98:dc:9f:f7:d0:16:23:f6:3d:f9:62:23:d9:82:98:0a:6d:fa: 4b:e3:e4:2b:5e:68:55:ad:54:b2:90:a6:cd:ba:01:46:61:ff: 6f:1b:1b:cf:92:d3:35:01:00:9e:4d:b9:0e:4b:8a:30:8f:68: b4:04:dd:3b:22:0e:ff:2e:6e:79:4a:08:05:85:fb:40:8f:5e: 5a:82:ba:a3:f9:99:ad:95:76:cc:7b:06:22:15:db:6a:db:10: 7f:9b:e4:67:fd:cd:7b:60:66:05:83:59:f0:f3:10:a8:f6:47: 65:18:2c:94:52:ec:28:90:c6:0e:e7:64:ef:0a:fc:b5:c7:d3: 22:68:bc:70:0c:af:9d:e2:98:bc:ef:99:47:21:98:03:c7:18: 45:6b:92:4f:79:14:0e:d8:ae:89:74:28:ff:83:68:bf:e3:6a: 13:47:fd:a2:95:db:9b:b0:d2:f4:0a:0d:9c:a8:a1:ee:ee:59: d2:05:99:2e:b5:7c:13:a2:c4:1a:61:7c:c1:36:b3:6b:10:1c: 05:52:83:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsbVtDjvFiF3nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OGUxZDhjMWQtMTFmMi00MmY0LWI0YWItNDk0M2E0Nzg1ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3cwQOyI0WkINMk1/xi2FcXuNfKI1Cb3ZbeW kkX4voKEuuNWwDulRu1iiX9lwuYaOuwCz84WeH5UAe/oYJr14Lr1eehWljf8zpNA tVljhnrBbmDRr63NWUxzU4fG05SqY7GVmHHJSY3pSsaC6PFOQJ1rwtrAWtEytKnr EVqWOUbYK4F7H15ie+CiEAqopfdKWiC1XTtXTzG9S5GUwHVZoQtp1JSrUiYCVrEt wI9g8F2AhbBN/V6nfayqzNmsv4yChv7hRtDOZ3ckiUIrK4lfSpLZm19jJi8KOyIv YuEGu06TqTOG8IhJI0jHQQzhb5n0twYosHgK5YbBp680y+SH4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFCQcwexvsluLSntAEN7S8ewD5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTZjYjcwZGQtZmZhMS0z MGU1LTk4YjgtMjZlNjJhNDExOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF36JgMjRJqKwNLN+wxCXTYPxnVBZIegy+YfgMYv+DKIUVKJYaSB0HUe F0yLE4qOLyJkSkBwE5jcn/fQFiP2PfliI9mCmApt+kvj5CteaFWtVLKQps26AUZh /28bG8+S0zUBAJ5NuQ5LijCPaLQE3TsiDv8ubnlKCAWF+0CPXlqCuqP5ma2Vdsx7 BiIV22rbEH+b5Gf9zXtgZgWDWfDzEKj2R2UYLJRS7CiQxg7nZO8K/LXH0yJovHAM r53imLzvmUchmAPHGEVrkk95FA7Yrol0KP+DaL/jahNH/aKV25uw0vQKDZyooe7u WdIFmS61fBOixBphfME2s2sQHAVSg+k= -----END CERTIFICATE-----Generated at Sat Sep 6 10:25:46 2025 by rpki-client