$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de681059-fe5b-3428-afcf-a5a3d13603a8.roa File: de681059-fe5b-3428-afcf-a5a3d13603a8.roa (raw, json) Hash identifier: KJDyItLsX2grTErN/x/xQK3fslWddYDtRZ28wfkIVws= Subject key identifier: 9B:37:14:2A:19:A6:F1:29:DA:C9:E8:5A:91:E0:50:30:B7:44:4B:73 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C4500B03C21A51A41480 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de681059-fe5b-3428-afcf-a5a3d13603a8.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397231 IP address blocks: 156.154.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c4:50:0b:03:c2:1a:51:a4:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=2c25aeb9-ccc4-45fe-a92d-778cccad11ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:88:7e:55:56:10:c1:50:70:2a:9d:a0:d4:07: 63:3b:d8:1b:bc:66:0f:ba:68:ce:fd:de:c1:0d:b4: bc:15:a2:43:a3:a4:af:b8:5c:ff:f5:20:3f:6e:1b: fa:16:21:af:3a:95:23:27:94:00:c5:45:c3:40:20: c3:3a:1a:1a:70:b8:ee:98:1d:73:3c:d9:87:9a:61: 16:03:f9:0d:b6:a8:5a:57:27:0a:4f:28:91:3c:93: 7e:35:40:e7:e3:78:a1:f2:67:0b:ed:24:e2:c0:af: cd:76:bb:b0:4e:37:fb:3e:b0:21:28:9b:b7:c5:aa: 03:2c:62:61:5c:4c:97:50:db:45:54:ba:24:67:d9: c9:7b:0b:3e:e2:57:a7:3e:e1:82:6c:3c:2e:46:08: 5c:08:b3:86:76:85:db:4e:1e:6f:62:9f:6e:f9:0e: f9:6e:61:e8:7f:5b:35:47:75:2d:2a:50:9f:84:b6: b5:51:2d:c2:23:49:8f:88:75:c0:8c:d6:c5:7a:f6: e9:f8:16:5c:49:58:83:8d:a0:02:af:4f:54:25:0b: 80:a7:06:ee:75:5a:37:ac:54:98:80:2b:1a:ec:67: 25:fb:72:28:5a:c6:01:31:42:24:cc:e9:75:ac:ce: 20:9c:0e:33:8b:0d:10:09:c1:b7:07:aa:6e:1d:02: 8c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:37:14:2A:19:A6:F1:29:DA:C9:E8:5A:91:E0:50:30:B7:44:4B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/de681059-fe5b-3428-afcf-a5a3d13603a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7b:f6:de:9f:8e:95:6f:c3:cd:96:56:ee:3c:cb:12:2e:4a: 46:6a:ab:d0:5a:9c:f3:5c:91:a0:ce:d5:69:dc:60:e0:2a:11: 0a:9e:4b:90:7c:7d:bd:5a:46:57:bd:6d:15:49:39:28:e1:fd: c7:e9:b4:7a:4b:d2:bf:0a:23:80:7d:17:a7:cc:da:31:24:b0: a6:d0:b2:7b:f5:0a:62:b1:a1:69:ae:b3:fa:98:1c:49:50:c9: 53:f3:e6:c3:7f:6b:c5:c1:4f:63:7e:a2:09:3a:7b:8d:ab:26: 7a:94:a0:fc:96:8c:13:6e:48:90:1c:14:bf:44:33:3d:83:2f: 1f:1b:34:43:a5:dc:a7:75:36:0f:1a:ce:f8:ed:a6:4e:6a:98: 8a:d5:80:44:02:da:a3:ef:eb:cf:11:f3:bb:f9:70:eb:6f:f4: 84:75:2f:40:1c:ea:4a:be:34:0a:8e:c3:92:d8:a9:76:34:f8: e1:b5:d1:34:21:17:88:51:bf:1e:e4:1c:32:a2:16:00:61:8e: 1f:13:28:f8:e5:19:4f:c6:11:5e:38:9a:a8:d0:a3:e2:51:a7: b4:44:e0:ef:3a:ac:77:e5:3e:c5:e5:e4:c4:aa:f1:6d:08:d7: ad:94:aa:c5:24:9b:51:f6:d5:f3:4e:ab:a5:2c:7f:bc:cf:a5: 0a:f3:11:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsRQCwPCGlGkFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MmMyNWFlYjktY2NjNC00NWZlLWE5MmQtNzc4Y2NjYWQxMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYh+VVYQwVBwKp2g1AdjO9gbvGYPumjO/d7B DbS8FaJDo6SvuFz/9SA/bhv6FiGvOpUjJ5QAxUXDQCDDOhoacLjumB1zPNmHmmEW A/kNtqhaVycKTyiRPJN+NUDn43ih8mcL7STiwK/NdruwTjf7PrAhKJu3xaoDLGJh XEyXUNtFVLokZ9nJews+4lenPuGCbDwuRghcCLOGdoXbTh5vYp9u+Q75bmHof1s1 R3UtKlCfhLa1US3CI0mPiHXAjNbFevbp+BZcSViDjaACr09UJQuApwbudVo3rFSY gCsa7Gcl+3IoWsYBMUIkzOl1rM4gnA4ziw0QCcG3B6puHQKMnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs3FCoZpvEp2snoWpHgUDC3REtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGU2ODEwNTktZmU1Yi0z NDI4LWFmY2YtYTVhM2QxMzYwM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl79t6fjpVvw82WVu48yxIuSkZqq9BanPNckaDO1WncYOAqEQqeS5B8 fb1aRle9bRVJOSjh/cfptHpL0r8KI4B9F6fM2jEksKbQsnv1CmKxoWmus/qYHElQ yVPz5sN/a8XBT2N+ogk6e42rJnqUoPyWjBNuSJAcFL9EMz2DLx8bNEOl3Kd1Ng8a zvjtpk5qmIrVgEQC2qPv688R87v5cOtv9IR1L0Ac6kq+NAqOw5LYqXY0+OG10TQh F4hRvx7kHDKiFgBhjh8TKPjlGU/GEV44mqjQo+JRp7RE4O86rHflPsXl5MSq8W0I 162UqsUkm1H21fNOq6Usf7zPpQrzEQc= -----END CERTIFICATE-----Generated at Sat Sep 6 12:24:30 2025 by rpki-client