$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa File: 0f2a680b-f04d-33e8-9d09-15281372c2f9.roa (raw, json) Hash identifier: 1emN9b77Tg8fJKixYzkMYQNUDROvScyXNvTlUF4tZQc= Subject key identifier: A1:83:0C:76:F6:5E:4D:82:6C:37:B0:C1:F8:D8:70:1C:13:30:3B:74 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF51CF2C802BA8B081980 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 12008 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f5:1c:f2:c8:02:ba:8b:08:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=fbc217f1-fbc0-44b0-b76b-94a4b132384c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:4d:0d:c7:91:76:78:01:63:2d:a1:e1:3b: 55:c1:33:d7:62:37:91:4f:64:82:64:83:5b:9b:af: 0e:2c:02:30:15:51:4d:c5:9c:fb:f7:92:3e:0a:27: df:6f:58:d1:65:33:87:12:8d:0f:35:1f:78:60:3b: a9:77:4e:ef:9a:3a:e3:ef:a5:b9:53:b7:79:a9:e6: 6f:29:e7:20:c7:22:ae:a1:e5:6c:97:2e:c3:e0:14: c7:b0:f5:49:55:dc:81:b3:fe:50:95:bc:5e:6d:02: c0:06:e2:9d:a6:53:25:ff:03:93:41:df:3d:ff:ee: 01:9b:cc:c5:40:3e:f4:c2:d6:7b:dc:fc:d8:f4:c1: be:a7:af:13:23:cb:7e:c7:e7:2b:dc:41:d5:bb:4e: d9:90:91:db:bd:54:9f:65:f5:e4:97:08:45:7b:cb: 0a:3f:43:1c:a5:33:8f:7c:f9:99:d1:78:cb:13:33: 13:39:56:20:f3:96:fd:89:1d:78:f2:f4:94:f6:b2: a7:be:08:13:e0:3f:2f:15:1e:ed:ea:34:ae:f9:22: 1c:af:ac:ac:4b:90:36:2d:cc:90:22:05:af:96:91: b8:c6:be:94:b1:05:18:25:df:b1:f6:8f:84:d0:9f: 11:a2:17:21:39:df:82:27:5d:95:23:06:cb:72:e0: 3b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:83:0C:76:F6:5E:4D:82:6C:37:B0:C1:F8:D8:70:1C:13:30:3B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0f2a680b-f04d-33e8-9d09-15281372c2f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:78:94:16:46:e8:25:6b:fb:6c:bf:8b:b2:b3:e2:90:ef:2f: 14:e7:c7:cc:42:f6:3d:ac:e0:7d:af:1c:00:8d:e7:bb:c5:5e: 4f:8a:2a:68:82:ea:a6:89:c3:ee:b2:c8:d3:3d:c4:94:7b:93: c3:72:d5:c6:b9:3b:20:8e:1d:7c:36:f3:34:17:d6:19:20:4e: b5:00:b7:6f:df:eb:53:1b:e4:fa:96:44:a5:64:aa:57:bb:ca: 7e:5c:4d:09:99:2a:5a:69:80:1a:1a:32:89:1a:22:f6:ff:5e: da:de:a5:a1:5e:93:3a:68:f1:95:c4:81:fc:d3:29:55:dc:53: a2:83:48:73:23:7d:3b:8b:24:ed:15:94:f7:e0:68:44:ce:c7: a4:14:d0:62:74:6f:f4:a0:91:79:f1:c7:6f:b2:96:41:1e:8d: 06:8e:46:b7:04:04:dd:d2:5f:dc:9c:cb:07:1d:70:cb:44:35: 62:a7:db:f5:76:81:7e:16:e8:69:6a:aa:db:93:b7:66:07:9a: 91:71:b0:cb:6f:17:45:97:78:ee:15:d3:2b:3b:14:f8:cf:6c: 97:47:df:f5:88:2a:df:04:23:94:c3:d6:5b:ca:7b:a4:aa:0b: 10:6c:cc:44:c6:42:a7:25:63:ec:a7:44:35:6f:8a:d8:b8:c5: 01:24:18:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/Uc8sgCuosIGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmJjMjE3ZjEtZmJjMC00NGIwLWI3NmItOTRhNGIxMzIzODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYFNDceRdngBYy2h4TtVwTPXYjeRT2SCZINb m68OLAIwFVFNxZz795I+Ciffb1jRZTOHEo0PNR94YDupd07vmjrj76W5U7d5qeZv KecgxyKuoeVsly7D4BTHsPVJVdyBs/5QlbxebQLABuKdplMl/wOTQd89/+4Bm8zF QD70wtZ73PzY9MG+p68TI8t+x+cr3EHVu07ZkJHbvVSfZfXklwhFe8sKP0McpTOP fPmZ0XjLEzMTOVYg85b9iR148vSU9rKnvggT4D8vFR7t6jSu+SIcr6ysS5A2LcyQ IgWvlpG4xr6UsQUYJd+x9o+E0J8RohchOd+CJ12VIwbLcuA7ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGDDHb2Xk2CbDewwfjYcBwTMDt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMGYyYTY4MGItZjA0ZC0z M2U4LTlkMDktMTUyODEzNzJjMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC94lBZG6CVr+2y/i7Kz4pDvLxTnx8xC9j2s4H2vHACN57vFXk+KKmiC 6qaJw+6yyNM9xJR7k8Ny1ca5OyCOHXw28zQX1hkgTrUAt2/f61Mb5PqWRKVkqle7 yn5cTQmZKlppgBoaMokaIvb/XtrepaFekzpo8ZXEgfzTKVXcU6KDSHMjfTuLJO0V lPfgaETOx6QU0GJ0b/SgkXnxx2+ylkEejQaORrcEBN3SX9ycywcdcMtENWKn2/V2 gX4W6GlqqtuTt2YHmpFxsMtvF0WXeO4V0ys7FPjPbJdH3/WIKt8EI5TD1lvKe6Sq CxBszETGQqclY+ynRDVviti4xQEkGAI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:40 2025 by rpki-client