$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f830a64e-68ca-3fbc-a51b-2a10048c6dd4.roa File: f830a64e-68ca-3fbc-a51b-2a10048c6dd4.roa (raw, json) Hash identifier: KvYGRqWe9bRoNZJBkLJNJ0qK0e/vWmW2peP5H58BFMc= Subject key identifier: FE:E7:C3:A7:AF:CB:A4:47:26:F3:EE:EB:95:CC:A6:2C:4B:8C:67:2A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584B0B76C6C34733EFEF61E7F980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f830a64e-68ca-3fbc-a51b-2a10048c6dd4.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397232 IP address blocks: 156.154.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c6:c3:47:33:ef:ef:61:e7:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=f1bb5d4d-3553-4f8c-b3de-cf3e3dbc8452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:f0:ec:68:ab:1d:cd:f5:bb:3d:1c:f6:34: 08:a5:17:e0:f1:e3:84:d7:cd:bf:bf:93:4b:27:a2: a2:48:6e:2e:dc:67:fa:9f:b0:94:fd:2e:33:91:4c: e4:41:51:8f:ff:1c:6c:8c:da:91:e5:11:d8:a8:61: 09:69:65:38:39:48:6e:ca:58:2f:88:29:9c:cb:21: aa:0a:ab:20:2d:23:27:7f:02:f3:a4:0a:d9:e4:ba: 18:8c:6f:27:08:10:0e:9e:5e:b7:cc:47:79:6e:2b: c8:b0:d1:b3:74:c6:b3:ed:ed:79:fa:b7:e6:f7:80: 90:8b:27:5d:1d:ac:41:7b:9a:99:84:4b:6a:b4:4b: 14:c4:42:f5:56:c0:43:1f:e0:d2:fd:ec:6c:82:80: de:ea:a7:50:f6:41:3d:99:2e:24:6e:6c:24:04:58: 57:79:23:e0:42:cf:f6:b2:ae:62:8e:9a:18:40:42: 90:88:02:05:50:6e:68:fc:b3:6b:40:c4:7c:2d:92: e9:72:be:d8:08:88:57:0e:76:b8:a4:60:6c:eb:df: e0:8a:47:50:58:62:7c:0f:47:36:1c:70:fd:3b:3c: 46:bb:83:21:7f:09:bb:39:fb:ac:dd:6e:4a:8b:5c: 53:74:b4:24:cd:d1:b0:40:5b:54:38:ea:d3:66:21: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E7:C3:A7:AF:CB:A4:47:26:F3:EE:EB:95:CC:A6:2C:4B:8C:67:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f830a64e-68ca-3fbc-a51b-2a10048c6dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:69:6b:2d:1e:0a:41:97:d1:f9:4a:21:b5:91:98:58:c9:7a: f9:8c:f8:f1:14:13:d9:c4:cc:af:a0:35:df:f8:70:70:69:ba: 48:95:47:2f:bd:cd:39:d5:a2:07:b0:39:94:c1:43:86:82:7a: 21:d1:bd:7c:ff:8d:41:ac:c7:a9:f4:43:cc:62:68:6e:41:7e: f6:2b:27:2d:21:b7:47:5a:76:56:e6:45:35:a2:e4:86:de:34: 66:47:06:b2:07:ca:50:f4:ee:7e:d2:3d:f9:b2:31:b9:cc:bb: be:8d:29:01:58:03:e2:f7:47:ee:10:89:b3:a4:87:2f:aa:ee: 0c:62:d9:a3:67:32:26:da:54:f5:66:be:e0:4e:56:2f:65:4c: 0a:5e:aa:f3:31:27:88:d6:7d:10:93:02:2d:bc:3c:88:f1:5c: a0:32:9a:fd:8f:12:07:db:93:9d:8a:dd:19:c4:e1:d9:40:f1: 1f:3b:6b:fd:1c:7c:6b:2b:73:9e:5f:85:05:9f:7f:aa:f0:a9: 80:1f:68:0e:24:96:07:36:c0:7b:ee:ae:65:07:8a:1f:03:de: 10:c8:81:d5:88:1a:40:be:6c:79:98:ea:cb:2d:b4:be:20:2f: ae:ca:95:4e:ad:01:a2:ec:b4:78:ae:5a:3f:46:16:4a:cb:e3: 7e:f3:41:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsbDRzPv72Hn+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZjFiYjVkNGQtMzU1My00ZjhjLWIzZGUtY2YzZTNkYmM4NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumnw7GirHc31uz0c9jQIpRfg8eOE182/v5NL J6KiSG4u3Gf6n7CU/S4zkUzkQVGP/xxsjNqR5RHYqGEJaWU4OUhuylgviCmcyyGq CqsgLSMnfwLzpArZ5LoYjG8nCBAOnl63zEd5bivIsNGzdMaz7e15+rfm94CQiydd HaxBe5qZhEtqtEsUxEL1VsBDH+DS/exsgoDe6qdQ9kE9mS4kbmwkBFhXeSPgQs/2 sq5ijpoYQEKQiAIFUG5o/LNrQMR8LZLpcr7YCIhXDna4pGBs69/gikdQWGJ8D0c2 HHD9OzxGu4Mhfwm7Ofus3W5Ki1xTdLQkzdGwQFtUOOrTZiF4mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7nw6evy6RHJvPu65XMpixLjGcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjgzMGE2NGUtNjhjYS0z ZmJjLWE1MWItMmExMDA0OGM2ZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJo2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9pay0eCkGX0flKIbWRmFjJevmM+PEUE9nEzK+gNd/4cHBpukiVRy+9 zTnVogewOZTBQ4aCeiHRvXz/jUGsx6n0Q8xiaG5BfvYrJy0ht0dadlbmRTWi5Ibe NGZHBrIHylD07n7SPfmyMbnMu76NKQFYA+L3R+4QibOkhy+q7gxi2aNnMibaVPVm vuBOVi9lTApeqvMxJ4jWfRCTAi28PIjxXKAymv2PEgfbk52K3RnE4dlA8R87a/0c fGsrc55fhQWff6rwqYAfaA4klgc2wHvurmUHih8D3hDIgdWIGkC+bHmY6ssttL4g L67KlU6tAaLstHiuWj9GFkrL437zQYE= -----END CERTIFICATE-----Generated at Sat Sep 6 10:25:09 2025 by rpki-client