$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbf2c10-0591-3093-baea-dd92653f74f8.roa File: 1cbf2c10-0591-3093-baea-dd92653f74f8.roa (raw, json) Hash identifier: KapCGKsCXmTmZXzOpCgNecbrg8s6jqvz8OU2+rzkHp4= Subject key identifier: E9:0A:C9:DF:E0:D3:19:E1:B1:E4:57:46:7F:EC:68:B5:AE:64:5B:17 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF89D101E695F6D877700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbf2c10-0591-3093-baea-dd92653f74f8.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397228 IP address blocks: 156.154.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f8:9d:10:1e:69:5f:6d:87:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f4afc89b-1558-486d-9d9d-3e6b3893f4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:d1:56:4f:a1:c6:cd:21:e0:11:a5:d4:5b: 98:58:ff:db:2c:2f:94:eb:43:64:92:5b:ca:3c:ad: e2:11:18:eb:af:ac:c3:28:a3:b4:1c:8b:6a:6e:6d: 51:4a:62:85:bb:bb:ab:f7:c3:fa:3f:b1:58:cb:be: 8b:13:24:70:00:c0:96:e9:79:59:26:bb:04:5b:d7: 2f:fd:57:3c:22:58:7a:5e:e4:23:d2:4b:38:e0:71: a9:66:3f:18:15:eb:53:d9:b6:7d:36:c9:7b:1e:bb: f9:ac:12:21:33:aa:2b:12:18:a6:8e:24:96:73:00: af:c9:76:15:25:ed:6e:b5:ad:65:4c:57:f2:18:50: 17:19:8b:04:1b:38:2d:8e:cc:f6:56:d5:3b:88:62: ad:36:7d:7c:19:24:30:fe:6a:54:62:a9:9e:3a:40: 8d:1a:7f:57:0f:44:b2:56:90:72:c6:a8:df:76:59: f8:aa:53:17:47:2e:7c:10:95:20:92:49:4b:58:c6: 30:c1:a7:28:b3:ae:78:75:d1:69:cb:55:4b:ae:1d: f7:6e:51:5c:91:5c:a6:70:cf:91:24:c0:4c:11:cf: 80:be:9f:89:08:97:63:87:22:f0:21:5c:c8:d8:07: 41:1d:06:b8:23:cf:5d:bc:01:a2:63:73:f5:f7:a9: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:C9:DF:E0:D3:19:E1:B1:E4:57:46:7F:EC:68:B5:AE:64:5B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbf2c10-0591-3093-baea-dd92653f74f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:98:78:91:88:98:f7:bb:48:6d:a8:51:03:d0:be:72:2f:73: 7f:2a:ee:32:5a:ed:37:2f:79:37:23:8f:a6:59:9e:1c:bf:44: 8d:5e:3b:27:ad:ac:c6:b5:9b:d6:81:30:ad:1a:44:59:24:f5: c8:90:d3:2f:e1:bc:e2:df:5d:c9:e5:5a:b5:3b:7a:d2:2b:f5: 7d:df:d4:80:aa:f0:d9:48:58:8c:65:34:95:c2:25:fb:2b:6c: 19:37:ef:e4:89:14:74:17:30:28:cd:bd:95:fc:1e:e1:91:3c: f2:dd:a6:04:d2:11:43:22:a8:18:da:06:64:09:31:c2:79:0f: 3b:ed:1c:6c:8d:15:69:71:e1:f3:15:ac:d4:f1:d7:46:c3:0c: 47:8d:ce:5e:9d:74:33:14:a0:89:84:c8:f2:a7:84:40:2d:8f: 87:50:e1:16:fd:cf:6f:0b:61:47:d0:7a:11:a5:a7:8c:38:bc: 2f:3d:75:b3:89:67:9d:00:b1:73:3d:cc:06:ef:49:5e:da:3e: 30:fc:19:ac:a8:cd:17:1f:12:65:66:87:98:91:f1:7d:7d:9f: 35:d6:c3:f0:5a:6d:39:4d:55:a4:2d:15:59:e7:1f:3e:3e:62: a5:95:32:e0:bf:f9:7c:cb:23:a5:b2:9a:2e:84:ec:74:51:04: 71:63:72:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/idEB5pX22HdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZjRhZmM4OWItMTU1OC00ODZkLTlkOWQtM2U2YjM4OTNmNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8fRVk+hxs0h4BGl1FuYWP/bLC+U60NkklvK PK3iERjrr6zDKKO0HItqbm1RSmKFu7ur98P6P7FYy76LEyRwAMCW6XlZJrsEW9cv /Vc8Ilh6XuQj0ks44HGpZj8YFetT2bZ9Nsl7Hrv5rBIhM6orEhimjiSWcwCvyXYV Je1uta1lTFfyGFAXGYsEGzgtjsz2VtU7iGKtNn18GSQw/mpUYqmeOkCNGn9XD0Sy VpByxqjfdln4qlMXRy58EJUgkklLWMYwwacos654ddFpy1VLrh33blFckVymcM+R JMBMEc+Avp+JCJdjhyLwIVzI2AdBHQa4I89dvAGiY3P196lBBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkKyd/g0xnhseRXRn/saLWuZFsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMWNiZjJjMTAtMDU5MS0z MDkzLWJhZWEtZGQ5MjY1M2Y3NGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2YeJGImPe7SG2oUQPQvnIvc38q7jJa7TcveTcjj6ZZnhy/RI1eOyet rMa1m9aBMK0aRFkk9ciQ0y/hvOLfXcnlWrU7etIr9X3f1ICq8NlIWIxlNJXCJfsr bBk37+SJFHQXMCjNvZX8HuGRPPLdpgTSEUMiqBjaBmQJMcJ5DzvtHGyNFWlx4fMV rNTx10bDDEeNzl6ddDMUoImEyPKnhEAtj4dQ4Rb9z28LYUfQehGlp4w4vC89dbOJ Z50AsXM9zAbvSV7aPjD8GayozRcfEmVmh5iR8X19nzXWw/BabTlNVaQtFVnnHz4+ YqWVMuC/+XzLI6Wymi6E7HRRBHFjcmo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:16:21 2025 by rpki-client