$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cafd41ab-ab45-3fd2-9692-b7f1aba4c290.roa File: cafd41ab-ab45-3fd2-9692-b7f1aba4c290.roa (raw, json) Hash identifier: 1aunwd4Cx2/Vcy++kIuueSZeekPgu6/crGd/BLo4hBg= Subject key identifier: E6:0A:4C:9A:75:C4:24:4C:7B:7C:FC:8E:F6:97:AC:3F:29:92:C5:09 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C5D77705671932BE8B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cafd41ab-ab45-3fd2-9692-b7f1aba4c290.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397219 IP address blocks: 156.154.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c5:d7:77:05:67:19:32:be:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=85349d03-dd12-4a42-baff-b213a3262bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:f6:4c:38:65:54:8a:27:11:8a:62:c4:6a: 35:79:1b:7a:9a:a3:76:4d:6d:bb:bb:84:9c:e3:1f: e0:60:ec:63:92:9c:d8:df:3a:ec:a1:33:8f:89:f5: 79:10:51:7f:87:11:19:c2:5b:03:7e:72:44:0a:00: 86:79:ed:14:47:39:41:9c:cc:b6:5b:86:36:4a:82: 31:cd:13:43:a6:4a:27:fd:e0:bc:0c:dd:b3:7b:5e: f3:eb:05:14:75:6a:58:9e:1f:1b:70:e6:67:98:98: 78:0d:90:a9:64:ac:68:a6:07:5d:ad:c1:dd:23:df: 2b:42:9b:4f:98:60:32:4e:7a:06:a1:1a:a9:0f:b8: 8f:4b:11:c5:26:02:c8:99:3a:26:41:c5:e1:b1:ea: 7c:44:f0:83:11:ee:7f:ed:d5:6c:d5:9d:47:bc:a8: 41:f0:86:d2:88:d0:62:4b:3a:66:a1:30:fc:b9:3c: 10:cb:96:70:0e:ed:ea:5e:a8:bf:0b:73:ef:78:6f: e3:74:eb:e5:6b:1c:6a:98:ac:f4:5d:8c:b5:d5:01: 73:a1:40:46:ec:c9:b0:27:b2:36:9d:c3:a5:60:6b: 4b:c5:8a:1e:70:32:43:c5:95:90:30:a5:49:f3:64: 4d:04:ce:07:a1:95:04:9e:26:17:0a:74:a0:8b:d2: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0A:4C:9A:75:C4:24:4C:7B:7C:FC:8E:F6:97:AC:3F:29:92:C5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cafd41ab-ab45-3fd2-9692-b7f1aba4c290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:86:2f:80:1f:e6:85:de:f3:91:ea:38:ee:3c:28:de:48:65: 9a:35:89:d7:ff:85:b1:de:0c:e3:32:36:88:0b:4d:70:65:49: 9c:88:6d:1e:62:db:c8:6b:fe:86:ac:d1:16:21:a0:4e:53:2a: f8:7c:bd:98:56:dd:fc:7c:31:45:9c:4d:be:b3:2e:96:3a:5b: 13:76:ec:13:96:b0:17:ef:77:b8:a2:31:86:39:4f:d9:20:80: b6:8c:52:18:21:c4:52:84:02:86:21:4f:ff:73:ec:08:55:17: 08:5e:8e:b6:92:89:33:cf:6f:67:d5:ef:0f:59:ff:37:a6:09: 3e:cc:66:06:83:c6:aa:fc:a9:76:c1:21:aa:ca:a4:98:7d:37: 97:7b:cd:6a:ec:eb:ed:2c:81:08:fb:58:c7:6f:a3:fe:63:db: 6e:5e:d7:d5:e0:a9:c6:90:07:89:2b:5f:4d:d3:9c:f2:e1:07: 7c:4d:b6:12:98:1a:1b:8c:d9:c0:ac:e1:11:5b:4c:6b:be:4d: e4:80:e1:25:b6:5f:ea:ba:14:86:f5:9b:2f:09:05:e9:f2:10: df:d6:8d:92:82:ca:3c:a8:5b:24:28:db:3d:7b:a6:ca:0e:b0: e8:9f:40:14:39:a3:df:f9:a2:96:04:16:f3:84:5f:58:2a:31: f6:64:59:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsXXdwVnGTK+i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ODUzNDlkMDMtZGQxMi00YTQyLWJhZmYtYjIxM2EzMjYyYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5H2TDhlVIonEYpixGo1eRt6mqN2TW27u4Sc 4x/gYOxjkpzY3zrsoTOPifV5EFF/hxEZwlsDfnJECgCGee0URzlBnMy2W4Y2SoIx zRNDpkon/eC8DN2ze17z6wUUdWpYnh8bcOZnmJh4DZCpZKxopgddrcHdI98rQptP mGAyTnoGoRqpD7iPSxHFJgLImTomQcXhsep8RPCDEe5/7dVs1Z1HvKhB8IbSiNBi SzpmoTD8uTwQy5ZwDu3qXqi/C3PveG/jdOvlaxxqmKz0XYy11QFzoUBG7MmwJ7I2 ncOlYGtLxYoecDJDxZWQMKVJ82RNBM4HoZUEniYXCnSgi9J9xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYKTJp1xCRMe3z8jvaXrD8pksUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2FmZDQxYWItYWI0NS0z ZmQyLTk2OTItYjdmMWFiYTRjMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOGL4Af5oXe85HqOO48KN5IZZo1idf/hbHeDOMyNogLTXBlSZyIbR5i 28hr/oas0RYhoE5TKvh8vZhW3fx8MUWcTb6zLpY6WxN27BOWsBfvd7iiMYY5T9kg gLaMUhghxFKEAoYhT/9z7AhVFwhejraSiTPPb2fV7w9Z/zemCT7MZgaDxqr8qXbB IarKpJh9N5d7zWrs6+0sgQj7WMdvo/5j225e19XgqcaQB4krX03TnPLhB3xNthKY GhuM2cCs4RFbTGu+TeSA4SW2X+q6FIb1my8JBenyEN/WjZKCyjyoWyQo2z17psoO sOifQBQ5o9/5opYEFvOEX1gqMfZkWQc= -----END CERTIFICATE-----Generated at Sat Sep 6 10:25:06 2025 by rpki-client