$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa File: 00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa (raw, json) Hash identifier: 3I/YSevQVqv43K5nJv1cN25EuCwuDXb/MsfJT+d7jfk= Subject key identifier: 5E:87:DE:71:09:FB:7B:C6:19:CF:EF:BC:32:38:EE:76:38:25:38:F7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BEFF23CC470FF7E2B7F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397237 IP address blocks: 156.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ef:f2:3c:c4:70:ff:7e:2b:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=ab48fb6e-738f-44eb-bbe7-97fcb21c1282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:f1:dd:84:0b:a5:69:56:03:e8:f7:dd:eb: 21:e2:2b:d5:f0:8e:a0:3b:ef:a7:76:c0:eb:b6:4f: bf:64:83:46:8b:b5:d4:36:27:ec:ae:7a:7e:29:88: d1:66:aa:13:6e:f0:9b:7e:4f:7d:55:ef:c5:c2:c0: a1:24:21:db:61:b9:27:62:f6:12:3f:15:b2:bc:d5: ee:2b:02:1f:33:04:d1:a8:8b:6e:85:24:5a:df:47: e2:a8:9e:4b:03:69:59:c3:bf:32:f7:87:d0:45:5b: 19:ac:c4:4b:8d:56:32:a8:ec:ab:54:94:43:41:ec: e4:45:ce:8b:d8:21:f0:ee:e0:e8:27:17:06:2f:c9: ab:ca:8e:d6:80:c3:c6:82:1e:64:70:27:ef:1f:e5: 58:ee:54:3b:32:d3:90:21:1d:d7:a6:ab:00:ce:67: c9:b0:18:bc:04:2b:38:81:19:32:84:c2:b2:da:1c: e9:b3:0b:15:2f:99:a9:cc:7d:0e:64:40:4a:a1:a1: 30:5b:4c:12:d0:ff:52:5b:b9:e0:d8:3d:ea:be:e4: 46:27:08:da:d7:83:b0:35:da:d5:38:cd:48:18:f2: a8:af:e6:7e:33:aa:9b:8e:7e:fc:66:8e:75:d0:3a: 85:3f:35:ce:e4:0a:65:92:9e:dd:a9:57:aa:51:c0: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:DE:71:09:FB:7B:C6:19:CF:EF:BC:32:38:EE:76:38:25:38:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00f7d2d5-01eb-304e-b0a0-e570b948a09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:19:b8:21:ad:d7:8b:36:49:3c:0e:1d:e6:99:33:71:c2:fb: 34:b5:47:45:d3:e4:50:0a:74:1a:e3:04:2a:5c:0e:ea:fc:a2: df:f3:ac:de:d8:f3:6c:bb:1e:d1:99:df:e5:32:94:ed:09:0f: e1:9b:ab:fb:8e:ae:6b:c2:61:69:15:aa:f2:69:d6:38:fd:5c: f2:0c:74:a6:56:ac:c1:05:1b:85:7d:4d:00:dc:32:97:41:cf: e1:f9:e0:b8:5d:dc:d0:aa:ca:03:61:a0:fd:c3:97:02:74:7f: c0:1b:6e:02:a4:f5:2d:77:88:c2:bf:d5:b5:00:b9:f7:a8:f2: 61:ab:ee:56:f0:d9:a7:03:44:98:ad:c0:1e:e7:9c:cf:e1:75: 27:cc:c3:da:73:59:e1:5f:f5:9c:ca:b5:ce:d5:3b:d2:77:6c: 32:7b:2c:67:c7:2c:a5:25:d0:10:2e:e3:8e:e4:cd:04:8f:0c: ab:a8:dd:0e:f4:87:57:c1:a1:e0:56:1e:cf:45:b9:47:20:b1: e7:e1:ca:da:3c:c0:b7:a6:e2:a8:92:66:fe:94:b9:d7:ba:70: 25:ad:d8:0d:44:3c:20:96:00:12:d9:70:3b:9d:90:ce:a9:e9: 72:10:aa:e8:17:43:5c:5e:44:10:88:c4:21:a1:4b:df:9f:b6: 8f:b5:d5:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+/yPMRw/34rfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YWI0OGZiNmUtNzM4Zi00NGViLWJiZTctOTdmY2IyMWMxMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoDx3YQLpWlWA+j33esh4ivV8I6gO++ndsDr tk+/ZINGi7XUNifsrnp+KYjRZqoTbvCbfk99Ve/FwsChJCHbYbknYvYSPxWyvNXu KwIfMwTRqItuhSRa30fiqJ5LA2lZw78y94fQRVsZrMRLjVYyqOyrVJRDQezkRc6L 2CHw7uDoJxcGL8mryo7WgMPGgh5kcCfvH+VY7lQ7MtOQIR3XpqsAzmfJsBi8BCs4 gRkyhMKy2hzpswsVL5mpzH0OZEBKoaEwW0wS0P9SW7ng2D3qvuRGJwja14OwNdrV OM1IGPKor+Z+M6qbjn78Zo510DqFPzXO5Aplkp7dqVeqUcBkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6H3nEJ+3vGGc/vvDI47nY4JTj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDBmN2QyZDUtMDFlYi0z MDRlLWIwYTAtZTU3MGI5NDhhMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoZuCGt14s2STwOHeaZM3HC+zS1R0XT5FAKdBrjBCpcDur8ot/zrN7Y 82y7HtGZ3+UylO0JD+Gbq/uOrmvCYWkVqvJp1jj9XPIMdKZWrMEFG4V9TQDcMpdB z+H54Lhd3NCqygNhoP3DlwJ0f8AbbgKk9S13iMK/1bUAufeo8mGr7lbw2acDRJit wB7nnM/hdSfMw9pzWeFf9ZzKtc7VO9J3bDJ7LGfHLKUl0BAu447kzQSPDKuo3Q70 h1fBoeBWHs9FuUcgsefhyto8wLem4qiSZv6Uude6cCWt2A1EPCCWABLZcDudkM6p 6XIQqugXQ1xeRBCIxCGhS9+fto+11SY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:22 2025 by rpki-client