$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0845ee78-882b-3f92-a3aa-1343f246c78a.roa File: 0845ee78-882b-3f92-a3aa-1343f246c78a.roa (raw, json) Hash identifier: rrgm9P6gRA5ybTCIidJHYN+jh2URj4EK3OjV+bvt5b8= Subject key identifier: EC:24:4B:83:CC:CF:29:7D:47:35:08:04:7D:5C:09:03:A7:6B:86:D9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BECA37B08325C3EA59A00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0845ee78-882b-3f92-a3aa-1343f246c78a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397222 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ec:a3:7b:08:32:5c:3e:a5:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=3cca1f30-b694-4096-9931-c37c21fb2830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:ec:16:d7:7f:57:1a:41:55:f2:c9:d1:9a: be:c3:a8:ab:69:d7:c5:b5:1b:3d:04:04:9e:59:b8: 24:1a:4f:c7:4a:89:e4:d4:c9:29:6b:45:4e:5f:44: 44:15:6d:f3:17:fb:8e:c8:5f:4f:4d:4b:1a:a7:25: 37:16:c4:ed:3e:02:de:60:96:c8:8a:d1:a7:02:df: 3e:e1:67:87:df:15:dd:2b:17:95:b8:1c:74:00:16: 51:c4:5d:f9:ca:26:cf:88:37:22:44:46:74:96:84: 3b:26:79:13:c1:a8:45:70:fd:3d:73:12:8c:91:be: 65:1b:e9:58:b1:7e:fb:da:56:cf:33:f2:1f:2f:a4: e4:e7:cc:5e:6b:2f:94:0d:42:58:40:a7:83:3c:3c: 95:6d:03:1b:3a:f1:30:ba:af:ca:64:80:eb:a9:f7: 38:9c:1a:bf:83:06:ab:ed:02:0a:f9:5f:0d:7b:b8: b6:5e:de:41:07:5c:09:0b:6e:f3:6d:1a:89:ce:0b: 14:dc:73:b2:13:3a:10:6a:5f:15:e5:98:06:9b:ac: 2f:6b:2f:97:6d:09:76:64:6e:3d:5b:bc:4d:e6:bb: 4e:f8:e8:37:8b:2a:ae:a1:71:c2:0d:c6:cc:c1:32: 9f:4f:1a:76:1a:3d:20:42:be:9c:1d:6e:5c:cf:1c: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:24:4B:83:CC:CF:29:7D:47:35:08:04:7D:5C:09:03:A7:6B:86:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0845ee78-882b-3f92-a3aa-1343f246c78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:61:23:89:46:03:61:01:cf:41:ac:7f:26:ee:a1:99:10:ff: e1:b6:42:0a:a3:b6:a3:9d:da:b1:aa:26:5a:91:d5:75:8e:5a: e2:0e:4b:bb:81:0e:d9:30:5e:f9:e8:16:49:81:ac:49:cf:12: be:35:af:bf:a1:c8:8b:9d:fb:8c:1f:a8:cb:1d:ca:bc:7c:91: d9:e5:a3:97:ac:14:f6:16:19:ef:62:49:a4:6c:a0:18:53:02: 85:6c:d4:b0:fe:a6:29:9e:3f:03:83:6f:9a:e2:42:f0:c1:42: 8b:eb:34:84:a1:98:f6:39:c2:1f:3e:1b:93:31:b9:05:46:1b: 25:b8:61:9c:fa:b7:41:02:7a:37:cb:c3:38:f6:3a:4a:c0:18: 6e:79:94:c1:a0:b1:7c:f6:dd:8b:c4:1d:a8:ef:a1:25:c2:69: b0:db:56:26:ed:29:f0:a9:11:8e:27:d8:8d:1b:fc:74:98:87: 38:3c:87:c4:be:72:e0:18:96:e4:65:52:8d:c5:d4:3f:2f:10: 89:22:2b:22:29:84:4a:36:32:a3:84:bc:71:a6:16:a5:0f:1f: e6:3e:b4:95:a4:4c:06:13:8b:d3:83:07:6f:4a:0c:04:68:e7: 7d:85:ec:d6:98:ec:89:43:c6:b7:ce:7d:f3:c5:71:ef:f9:20: f0:ce:75:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+yjewgyXD6lmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk M2NjYTFmMzAtYjY5NC00MDk2LTk5MzEtYzM3YzIxZmIyODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLrsFtd/VxpBVfLJ0Zq+w6iradfFtRs9BASe WbgkGk/HSonk1Mkpa0VOX0REFW3zF/uOyF9PTUsapyU3FsTtPgLeYJbIitGnAt8+ 4WeH3xXdKxeVuBx0ABZRxF35yibPiDciREZ0loQ7JnkTwahFcP09cxKMkb5lG+lY sX772lbPM/IfL6Tk58xeay+UDUJYQKeDPDyVbQMbOvEwuq/KZIDrqfc4nBq/gwar 7QIK+V8Ne7i2Xt5BB1wJC27zbRqJzgsU3HOyEzoQal8V5ZgGm6wvay+XbQl2ZG49 W7xN5rtO+Og3iyquoXHCDcbMwTKfTxp2Gj0gQr6cHW5czxw1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwkS4PMzyl9RzUIBH1cCQOna4bZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDg0NWVlNzgtODgyYi0z ZjkyLWEzYWEtMTM0M2YyNDZjNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAphI4lGA2EBz0GsfybuoZkQ/+G2QgqjtqOd2rGqJlqR1XWOWuIOS7uB DtkwXvnoFkmBrEnPEr41r7+hyIud+4wfqMsdyrx8kdnlo5esFPYWGe9iSaRsoBhT AoVs1LD+pimePwODb5riQvDBQovrNIShmPY5wh8+G5MxuQVGGyW4YZz6t0ECejfL wzj2OkrAGG55lMGgsXz23YvEHajvoSXCabDbVibtKfCpEY4n2I0b/HSYhzg8h8S+ cuAYluRlUo3F1D8vEIkiKyIphEo2MqOEvHGmFqUPH+Y+tJWkTAYTi9ODB29KDARo 532F7NaY7IlDxrfOffPFce/5IPDOddg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:05 2025 by rpki-client