$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2add3223-7366-386c-a819-2201079b3633.roa File: 2add3223-7366-386c-a819-2201079b3633.roa (raw, json) Hash identifier: i83T6vZSuVdgfLRGnzbtRJKIz+P/UcsBZgOYqoUikYw= Subject key identifier: F6:77:8F:08:FF:5A:59:C3:32:DF:7A:34:F6:5C:2F:B4:CE:32:19:3B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF59DF70C9020DCAC5940 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2add3223-7366-386c-a819-2201079b3633.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397218 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f5:9d:f7:0c:90:20:dc:ac:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=af5d5143-6d1d-4098-a42c-202429ad4f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:ac:31:14:9c:a2:22:d3:96:a8:d7:02:8b: 8e:79:6e:41:3b:aa:60:e7:be:0b:f3:f8:a6:aa:a8: 4a:c3:18:f5:f9:89:76:af:e0:23:ed:fc:92:b7:63: a3:68:a2:bc:73:98:af:10:e3:95:49:5d:ee:64:14: e4:23:7f:08:7d:fb:2c:3b:51:21:13:ad:61:4f:fe: 1c:1d:96:61:c6:85:1a:61:70:3c:1c:7a:61:ce:fd: d9:26:84:42:d1:0f:79:44:c0:4d:91:74:97:46:86: a3:78:e7:8c:cc:35:72:17:0c:72:2e:94:52:ad:46: 9f:ca:b5:20:0d:fb:ca:9e:73:53:8c:48:e2:b0:8f: 34:0e:b3:03:7c:22:c4:24:ab:21:7f:8b:30:18:35: 47:c5:ed:09:ad:f8:f3:29:a9:e5:d0:3c:43:17:4f: 8f:c8:03:0a:b6:8e:a8:03:f0:9a:bb:0c:a5:20:83: 38:0d:a7:e0:4a:e3:76:d0:5f:08:16:91:47:20:24: be:a4:d7:b5:a9:78:01:db:fb:b7:2c:92:04:b6:b2: d5:77:7e:b9:44:c4:a8:1d:01:5c:96:8a:4b:90:e3: b2:2d:1f:39:6f:63:06:db:35:f3:b8:f1:5f:38:57: 95:5e:40:57:28:27:5f:b4:e7:9b:d6:50:4c:63:d2: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:77:8F:08:FF:5A:59:C3:32:DF:7A:34:F6:5C:2F:B4:CE:32:19:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2add3223-7366-386c-a819-2201079b3633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c2:09:0d:c6:f2:b8:3f:de:e3:3f:e2:a1:11:e4:e3:ae:83: ba:54:0b:91:f5:de:60:08:22:ec:59:0d:74:90:25:e9:25:bb: e4:d9:6c:4c:ce:a1:ed:2a:d6:e4:1a:61:bf:d9:29:37:b9:2a: 17:65:d1:04:6e:dd:7b:cb:c0:a5:e5:8a:22:a1:68:8c:21:ff: 7d:47:ca:2e:d1:bc:b2:5a:66:05:91:b4:fe:3d:00:98:f2:0a: 51:61:48:86:d5:ba:5a:7b:75:62:ec:dc:84:69:dc:7e:34:86: 18:8d:73:25:b1:11:4e:c5:b2:e2:24:ff:25:95:94:21:26:29: 4d:6b:8c:fe:d7:71:fa:30:ae:5a:a9:e8:9c:62:22:66:aa:94: 7d:ad:c1:42:33:c7:c5:b1:b9:46:b8:ad:3e:eb:2d:99:84:be: ad:ce:42:04:03:6e:8f:cb:93:1f:15:09:4c:b3:15:8e:9a:d9: 66:72:cc:cb:e8:12:22:d5:76:91:38:e6:19:63:92:c6:1f:bf: 76:ee:d1:d7:cc:93:57:bf:07:c6:77:c8:83:1f:d1:dc:12:90: f8:80:3b:99:dd:d2:cf:e5:0c:3b:bc:4b:d1:9f:66:47:d8:60: 0e:dc:52:6e:94:ab:46:7d:b7:18:da:0f:54:e3:a3:0a:08:9d: 59:45:4b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/Wd9wyQINysWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YWY1ZDUxNDMtNmQxZC00MDk4LWE0MmMtMjAyNDI5YWQ0ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgWsMRScoiLTlqjXAouOeW5BO6pg574L8/im qqhKwxj1+Yl2r+Aj7fySt2OjaKK8c5ivEOOVSV3uZBTkI38IffssO1EhE61hT/4c HZZhxoUaYXA8HHphzv3ZJoRC0Q95RMBNkXSXRoajeOeMzDVyFwxyLpRSrUafyrUg DfvKnnNTjEjisI80DrMDfCLEJKshf4swGDVHxe0JrfjzKanl0DxDF0+PyAMKto6o A/CauwylIIM4DafgSuN20F8IFpFHICS+pNe1qXgB2/u3LJIEtrLVd365RMSoHQFc lopLkOOyLR85b2MG2zXzuPFfOFeVXkBXKCdftOeb1lBMY9K5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZ3jwj/WlnDMt96NPZcL7TOMhk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmFkZDMyMjMtNzM2Ni0z ODZjLWE4MTktMjIwMTA3OWIzNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETCCQ3G8rg/3uM/4qER5OOug7pUC5H13mAIIuxZDXSQJeklu+TZbEzO oe0q1uQaYb/ZKTe5Khdl0QRu3XvLwKXliiKhaIwh/31Hyi7RvLJaZgWRtP49AJjy ClFhSIbVulp7dWLs3IRp3H40hhiNcyWxEU7FsuIk/yWVlCEmKU1rjP7Xcfowrlqp 6JxiImaqlH2twUIzx8WxuUa4rT7rLZmEvq3OQgQDbo/Lkx8VCUyzFY6a2WZyzMvo EiLVdpE45hljksYfv3bu0dfMk1e/B8Z3yIMf0dwSkPiAO5nd0s/lDDu8S9GfZkfY YA7cUm6Uq0Z9txjaD1TjowoInVlFS0U= -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:06 2025 by rpki-client