$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21ed2456-099d-3b2c-87d2-3850f42cb6c6.roa File: 21ed2456-099d-3b2c-87d2-3850f42cb6c6.roa (raw, json) Hash identifier: SbWhHprNMpOVj2mroUoh1ViTAgll17nsJh20xgSu60s= Subject key identifier: EB:32:4F:86:59:25:08:79:CE:A9:E5:F6:63:4B:CC:1E:0B:BC:2B:B3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BE8DB3C5AF7AFC46F90A6 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21ed2456-099d-3b2c-87d2-3850f42cb6c6.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397229 IP address blocks: 156.154.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:e8:db:3c:5a:f7:af:c4:6f:90:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=40923a65-750d-4f58-a1c0-1b65e7ebcc89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:04:35:f9:6f:bb:23:13:16:78:76:36:44:17: fc:7a:9e:80:c8:70:48:75:8d:56:86:4b:b2:39:a4: b1:04:56:92:8b:35:10:15:6a:a1:bb:38:2d:e5:aa: 91:47:74:96:94:b7:81:2c:a0:0e:0a:8b:85:97:d9: 9c:0e:76:ad:55:1a:3e:61:14:a2:66:0e:fa:d9:76: be:df:05:74:6c:f0:88:72:da:7e:60:25:28:8b:5e: 8b:67:e7:49:60:92:b5:5e:96:89:fa:d5:9a:9b:77: 01:4c:c0:16:e9:7c:96:cf:26:f2:bb:c2:31:47:ec: d1:c1:8f:7d:6c:2c:4e:48:a7:d7:11:ff:d1:56:e0: 27:63:88:11:ad:cf:d8:0a:9a:aa:cd:d6:74:c5:a7: 95:b7:13:75:92:c1:55:1e:a2:33:dd:04:79:64:e2: 3b:2f:9a:13:40:28:71:e7:e2:52:dd:8a:1a:aa:9c: 65:97:1a:ee:49:0d:a1:d3:82:4e:18:02:44:f4:d3: 6b:bf:93:0d:50:26:05:a0:91:69:d8:5c:cf:36:47: af:15:ec:d9:10:5b:85:f4:4a:bc:89:13:cd:be:d2: c1:a4:29:62:e9:4f:4f:c8:37:93:b7:34:80:a4:81: 56:51:c3:7a:5e:03:30:98:f2:97:17:26:20:bf:33: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:32:4F:86:59:25:08:79:CE:A9:E5:F6:63:4B:CC:1E:0B:BC:2B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/21ed2456-099d-3b2c-87d2-3850f42cb6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:28:79:6e:8d:ad:b5:25:7b:6e:65:04:b4:a3:a0:55:11:b4: 98:2d:b0:2e:10:d2:ce:69:34:51:83:99:3d:16:0e:26:9f:ac: e3:55:b5:e1:cb:5e:15:00:72:c8:a5:27:da:61:6e:5e:ea:e5: 9b:be:2b:9c:ee:b1:e3:ee:dc:12:78:a5:e4:54:b6:bb:61:0a: 3d:54:f6:e1:5f:a6:b9:7f:f2:82:01:9d:19:f3:b6:3d:88:90: 64:f0:d2:42:02:bc:f8:37:1e:39:b8:4b:99:7e:f8:c4:14:64: ff:84:ff:7e:f7:83:e6:7c:46:e0:2f:c5:3c:ef:46:e1:4e:0e: 37:1e:c5:e2:24:34:e7:4e:51:51:37:03:df:53:00:3a:cd:88: 8d:8c:f0:f2:7a:75:a4:fa:3a:2b:3d:1e:6a:d4:eb:fe:54:4d: 30:c5:04:2e:4b:75:ef:9f:de:21:4f:0a:33:b6:8e:88:40:39: 3c:cc:2a:54:2e:60:30:53:2a:d4:20:26:cc:22:05:c0:1d:70: 8e:21:f9:24:22:bb:a7:ca:68:92:e2:80:5d:1e:1a:e0:b4:28: 39:fd:4d:82:2a:fd:d9:1c:d5:73:fc:ec:cd:4d:e4:5c:77:60: 10:1d:6a:de:71:33:64:e8:b1:80:55:f6:27:3c:7f:6c:62:dd: bb:57:f3:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+jbPFr3r8RvkKYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDA5MjNhNjUtNzUwZC00ZjU4LWExYzAtMWI2NWU3ZWJjYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggQ1+W+7IxMWeHY2RBf8ep6AyHBIdY1Whkuy OaSxBFaSizUQFWqhuzgt5aqRR3SWlLeBLKAOCouFl9mcDnatVRo+YRSiZg762Xa+ 3wV0bPCIctp+YCUoi16LZ+dJYJK1XpaJ+tWam3cBTMAW6XyWzybyu8IxR+zRwY99 bCxOSKfXEf/RVuAnY4gRrc/YCpqqzdZ0xaeVtxN1ksFVHqIz3QR5ZOI7L5oTQChx 5+JS3YoaqpxllxruSQ2h04JOGAJE9NNrv5MNUCYFoJFp2FzPNkevFezZEFuF9Eq8 iRPNvtLBpCli6U9PyDeTtzSApIFWUcN6XgMwmPKXFyYgvzO7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsyT4ZZJQh5zqnl9mNLzB4LvCuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjFlZDI0NTYtMDk5ZC0z YjJjLTg3ZDItMzg1MGY0MmNiNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8oeW6NrbUle25lBLSjoFURtJgtsC4Q0s5pNFGDmT0WDiafrONVteHL XhUAcsilJ9phbl7q5Zu+K5zusePu3BJ4peRUtrthCj1U9uFfprl/8oIBnRnztj2I kGTw0kICvPg3Hjm4S5l++MQUZP+E/373g+Z8RuAvxTzvRuFODjcexeIkNOdOUVE3 A99TADrNiI2M8PJ6daT6Ois9HmrU6/5UTTDFBC5Lde+f3iFPCjO2johAOTzMKlQu YDBTKtQgJswiBcAdcI4h+SQiu6fKaJLigF0eGuC0KDn9TYIq/dkc1XP87M1N5Fx3 YBAdat5xM2TosYBV9ic8f2xi3btX8zY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:36:06 2025 by rpki-client