$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d89c4e-80a1-3f32-bfd4-4d44eef0a775.roa File: 03d89c4e-80a1-3f32-bfd4-4d44eef0a775.roa (raw, json) Hash identifier: 0ZR3XMCBDbdrlnF/dVAzDPd46P14KXYqta/ggTOJeJ8= Subject key identifier: D0:7C:DD:1D:F1:BF:87:39:24:F2:53:86:13:14:30:9A:68:75:6E:37 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AECC4BDC0AB5D5738D4DEE000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d89c4e-80a1-3f32-bfd4-4d44eef0a775.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 399170 IP address blocks: 156.154.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:bd:c0:ab:5d:57:38:d4:de:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9dfa04dc-98c2-4f85-aa87-31226d7614f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:82:21:76:0f:36:7b:b9:16:94:c7:0b:db: 16:08:c9:14:e9:c0:d4:bd:e6:44:c2:77:31:98:5a: 87:03:4c:8b:b9:aa:1f:9d:3b:2b:a0:48:cd:8f:6d: ba:50:3e:29:9f:d1:e6:b1:ca:fa:f5:00:57:8f:77: 53:94:aa:f3:cb:27:54:33:3b:5f:44:91:5c:08:7a: 96:b6:f9:3b:cd:7d:65:e9:af:eb:79:44:63:05:d9: a9:0b:90:d2:4f:1c:bd:06:68:79:75:71:91:2a:49: e3:a7:5b:f9:43:dc:45:f1:c0:f2:d3:42:0d:0a:1b: 7b:15:c6:ee:4b:98:a2:75:6d:78:20:b0:3c:1b:03: a8:44:da:30:54:8e:28:16:3f:e5:08:12:63:2f:8a: bb:e1:44:ff:56:c3:c0:c2:b3:c7:46:c4:ac:e5:52: 02:5f:76:4e:d2:86:40:74:fe:a3:5b:83:28:86:ac: 5f:34:92:ce:2b:8c:a6:be:7d:40:20:74:92:2f:a9: 96:d1:9e:be:82:28:ab:6a:82:d6:a8:ff:e0:f5:61: 0e:f7:20:21:6b:69:8d:f5:05:47:aa:0a:db:c9:ae: d6:6f:94:17:5e:08:e1:5d:18:75:c5:cc:17:81:49: a8:4e:95:20:8e:a2:02:f0:92:dc:e7:6f:75:08:da: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7C:DD:1D:F1:BF:87:39:24:F2:53:86:13:14:30:9A:68:75:6E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/03d89c4e-80a1-3f32-bfd4-4d44eef0a775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b9:1b:ff:42:71:cf:6f:3e:32:53:41:0e:eb:a0:8c:68:49: c1:5a:9a:dc:e3:dd:29:f7:03:68:bc:a0:14:74:01:14:d8:62: f0:59:bb:f3:d1:2d:fb:aa:af:78:6d:54:17:c3:a1:09:cf:21: 68:d7:d0:07:8b:5a:9d:39:0e:6e:b0:67:28:28:d9:09:9c:0a: 14:76:7b:63:64:ab:ba:17:1e:23:58:7f:b3:04:d9:20:bd:87: 2f:36:f6:ad:10:d3:6a:bd:f8:f7:ee:8b:72:3b:1a:2c:3f:81: 73:1d:0b:28:41:87:8d:26:24:04:f9:e4:af:14:16:1c:e2:0e: b3:bd:97:0c:34:4d:bd:08:05:2c:f0:53:2f:b4:8c:2e:eb:ed: 22:e0:97:58:fc:c2:7a:ee:ef:dd:5c:8f:71:a7:50:ff:b1:3d: 78:7e:f5:b9:ce:f7:2b:b9:4c:a7:f2:4b:67:b1:4e:75:58:32: 9b:f5:32:7d:01:87:02:4b:08:82:79:23:d1:a3:a3:41:6c:7b: 30:2d:a5:8e:a6:68:9e:17:0d:e6:d4:5b:64:0c:d8:84:04:6b: 4b:08:f4:ce:1d:1a:04:fe:1e:26:90:39:c2:7c:44:0d:57:39: 02:6f:d7:e3:af:6b:df:93:06:e1:82:d3:ad:e3:c7:00:98:db: 5d:a6:4f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxL3Aq11XONTe4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWRmYTA0ZGMtOThjMi00Zjg1LWFhODctMzEyMjZkNzYxNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQOCIXYPNnu5FpTHC9sWCMkU6cDUveZEwncx mFqHA0yLuaofnTsroEjNj226UD4pn9Hmscr69QBXj3dTlKrzyydUMztfRJFcCHqW tvk7zX1l6a/reURjBdmpC5DSTxy9Bmh5dXGRKknjp1v5Q9xF8cDy00INCht7Fcbu S5iidW14ILA8GwOoRNowVI4oFj/lCBJjL4q74UT/VsPAwrPHRsSs5VICX3ZO0oZA dP6jW4MohqxfNJLOK4ymvn1AIHSSL6mW0Z6+giiraoLWqP/g9WEO9yAha2mN9QVH qgrbya7Wb5QXXgjhXRh1xcwXgUmoTpUgjqIC8JLc5291CNqx2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB83R3xv4c5JPJThhMUMJpodW43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDNkODljNGUtODBhMS0z ZjMyLWJmZDQtNGQ0NGVlZjBhNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC65G/9Ccc9vPjJTQQ7roIxoScFamtzj3Sn3A2i8oBR0ARTYYvBZu/PR Lfuqr3htVBfDoQnPIWjX0AeLWp05Dm6wZygo2QmcChR2e2Nkq7oXHiNYf7ME2SC9 hy829q0Q02q9+Pfui3I7Giw/gXMdCyhBh40mJAT55K8UFhziDrO9lww0Tb0IBSzw Uy+0jC7r7SLgl1j8wnru791cj3GnUP+xPXh+9bnO9yu5TKfyS2exTnVYMpv1Mn0B hwJLCIJ5I9Gjo0FsezAtpY6maJ4XDebUW2QM2IQEa0sI9M4dGgT+HiaQOcJ8RA1X OQJv1+Ova9+TBuGC063jxwCY212mT6M= -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:27 2025 by rpki-client