$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5a038e0-4366-341b-a33f-78fa9268b238.roa File: c5a038e0-4366-341b-a33f-78fa9268b238.roa (raw, json) Hash identifier: teya0PgaGudQiZfbGiQWGQbGL27BaRCdIWUTTmRQbTo= Subject key identifier: 8D:46:B6:27:5F:52:B2:43:AF:E5:68:CA:84:8A:54:09:19:BD:4E:73 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C30E98D32EE0C0442880 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5a038e0-4366-341b-a33f-78fa9268b238.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397214 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c3:0e:98:d3:2e:e0:c0:44:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=658baa2f-7d33-4543-88bd-e61a7747f2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:29:8b:49:19:33:55:3b:10:6f:22:ba:9d: b9:b2:72:4c:1f:1f:f8:c3:5c:0d:d5:e8:c2:a6:af: 2d:db:1f:66:d4:73:12:74:03:f6:cc:45:0e:7e:74: 62:b7:9a:2c:a5:12:8d:62:ce:fa:de:4f:47:fd:6b: 92:ac:0d:c3:28:5d:4e:91:c9:c0:7d:d6:98:dc:79: be:83:70:53:4e:4d:45:8c:ba:40:a9:10:ac:5e:95: f4:5d:10:bc:59:c0:14:9d:d9:66:6a:23:50:19:15: b0:34:7d:38:ad:ba:c7:0d:92:34:d8:83:69:f3:c5: 26:b8:64:b7:3d:8b:aa:cd:df:f9:59:99:f2:af:83: 7a:e9:4b:bf:9b:83:3f:7f:9f:d2:5c:67:e9:54:bc: 9b:c3:d0:ca:fc:72:42:31:15:98:b4:e2:4b:ed:8b: 82:2f:66:47:2e:87:e4:87:f1:0a:ff:37:0c:66:40: 92:25:a6:16:07:d6:24:9e:70:5c:30:01:25:76:cd: dc:c1:49:1c:9d:86:43:5f:d0:46:95:b3:7a:7f:7e: 5f:e3:fc:a3:45:fb:15:c5:af:a7:6f:22:12:da:15: 97:0c:ea:82:c7:c5:a6:31:c4:ff:68:b3:5a:e0:a7: 14:61:6f:c6:52:ae:9e:54:d0:9f:29:cd:02:c1:ed: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:46:B6:27:5F:52:B2:43:AF:E5:68:CA:84:8A:54:09:19:BD:4E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c5a038e0-4366-341b-a33f-78fa9268b238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:28:da:6f:75:ce:c1:a5:08:b7:72:66:ab:7a:17:6c:7b:b4: 85:4d:af:90:47:62:aa:4f:ef:ce:11:26:ce:90:71:33:2a:7e: c7:ef:23:0c:86:57:99:ba:1c:62:bd:7d:63:58:7d:33:fd:e7: 00:a9:69:8e:d7:7f:41:85:60:49:4f:80:7a:74:af:fd:e0:b7: 11:64:30:9e:cf:2a:da:6e:17:be:d9:80:86:df:40:5e:d9:df: bc:04:29:f2:2e:34:03:ae:15:99:eb:ea:71:30:97:0e:84:19: 81:8e:88:43:5d:0e:49:df:af:8e:91:0e:16:78:28:98:56:10: 66:4d:67:00:65:aa:1b:f6:12:c8:f2:5a:20:ca:72:f8:d7:b7: 20:93:03:54:d2:c5:6a:d2:1d:e2:56:e7:d9:7a:0a:d2:bc:77: 91:4e:7a:4a:a2:9f:10:61:62:5a:68:52:7f:b7:70:76:54:b8: ff:b7:a5:da:5e:b0:af:d1:81:60:bc:ca:f7:b7:04:8e:86:74: 31:ba:62:e3:a8:1d:d0:ae:08:3d:d9:5f:1a:a5:32:d8:fa:e4: e8:a0:77:fa:e7:a3:c6:6f:db:5a:8c:86:a4:32:6d:ee:fc:5c: 8d:c8:69:c6:b1:de:1d:ea:0f:f4:34:48:7d:39:20:97:c9:41: b3:18:88:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsMOmNMu4MBEKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NjU4YmFhMmYtN2QzMy00NTQzLTg4YmQtZTYxYTc3NDdmMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5opi0kZM1U7EG8iup25snJMHx/4w1wN1ejC pq8t2x9m1HMSdAP2zEUOfnRit5ospRKNYs763k9H/WuSrA3DKF1OkcnAfdaY3Hm+ g3BTTk1FjLpAqRCsXpX0XRC8WcAUndlmaiNQGRWwNH04rbrHDZI02INp88UmuGS3 PYuqzd/5WZnyr4N66Uu/m4M/f5/SXGfpVLybw9DK/HJCMRWYtOJL7YuCL2ZHLofk h/EK/zcMZkCSJaYWB9YknnBcMAElds3cwUkcnYZDX9BGlbN6f35f4/yjRfsVxa+n byIS2hWXDOqCx8WmMcT/aLNa4KcUYW/GUq6eVNCfKc0Cwe36AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1GtidfUrJDr+VoyoSKVAkZvU5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzVhMDM4ZTAtNDM2Ni0z NDFiLWEzM2YtNzhmYTkyNjhiMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUo2m91zsGlCLdyZqt6F2x7tIVNr5BHYqpP784RJs6QcTMqfsfvIwyG V5m6HGK9fWNYfTP95wCpaY7Xf0GFYElPgHp0r/3gtxFkMJ7PKtpuF77ZgIbfQF7Z 37wEKfIuNAOuFZnr6nEwlw6EGYGOiENdDknfr46RDhZ4KJhWEGZNZwBlqhv2Esjy WiDKcvjXtyCTA1TSxWrSHeJW59l6CtK8d5FOekqinxBhYlpoUn+3cHZUuP+3pdpe sK/RgWC8yve3BI6GdDG6YuOoHdCuCD3ZXxqlMtj65Oigd/rno8Zv21qMhqQybe78 XI3Iacax3h3qD/Q0SH05IJfJQbMYiCU= -----END CERTIFICATE-----Generated at Sat Sep 6 12:18:36 2025 by rpki-client