$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33e8671b-2a5f-3abf-b673-96673170abf9.roa File: 33e8671b-2a5f-3abf-b673-96673170abf9.roa (raw, json) Hash identifier: /5IIjhfBzsH+g5zhJBan8A3BxLgl46cRi5UvU/TgJos= Subject key identifier: 1C:90:BE:96:37:3C:67:D2:2F:34:7D:65:06:2B:3D:C0:28:35:FA:70 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AECC4BCA6318DA942D7377BE0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33e8671b-2a5f-3abf-b673-96673170abf9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 36236 IP address blocks: 156.154.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:bc:a6:31:8d:a9:42:d7:37:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3fbb170a-c603-4696-91fd-7ac06a3cfd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:ba:3e:1d:91:9b:7b:f7:e9:22:a9:f1:7e: 83:6e:89:ac:d5:f9:53:3f:a7:84:49:90:62:0a:1d: 60:e6:57:86:a1:1a:0a:09:13:32:bf:a2:04:e8:98: 5e:26:53:12:7a:87:66:69:0e:ab:2b:29:94:74:e8: 07:ab:af:e9:5d:73:20:a9:93:69:8c:93:b5:7c:8e: 59:2d:c2:5d:8f:95:aa:aa:77:b9:8a:23:30:d2:63: 80:15:20:f7:09:26:82:e8:12:01:0c:4c:12:cf:bd: b6:5f:e2:1a:74:63:60:ec:8b:34:bc:e3:67:34:c8: 6d:5c:53:5d:63:c7:5a:75:a1:bc:14:2d:d3:e3:78: d5:56:a7:e4:dc:7a:79:dd:4b:99:38:92:f1:33:f3: c8:14:72:95:0c:4c:d8:40:65:bc:86:eb:db:10:44: e7:cc:10:f1:de:4f:84:3f:72:a6:70:cf:db:15:4c: 00:cb:02:f1:7f:54:f7:a8:cb:44:06:1d:49:60:b5: 39:97:3c:b3:bd:c6:c1:a0:53:85:3b:f0:0e:0b:ef: 74:70:ff:1a:d4:c7:dd:f4:48:2f:62:cd:df:f9:2d: f9:dd:43:46:41:1e:b8:de:97:0f:c0:f9:7f:10:a3: 99:19:5e:f6:e2:67:ec:00:47:93:38:4f:5c:39:86: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:90:BE:96:37:3C:67:D2:2F:34:7D:65:06:2B:3D:C0:28:35:FA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/33e8671b-2a5f-3abf-b673-96673170abf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:20:34:3a:41:56:5c:ce:0a:32:3d:67:6e:b9:d6:dc:0b:15: 18:9f:67:ae:19:0d:79:80:31:94:a8:98:4c:a6:fa:a4:d7:90: b3:04:fe:a1:7d:4d:d0:21:c6:08:f2:1f:69:d8:96:ef:5d:7c: f8:ad:c4:ca:95:07:d6:be:68:a1:dc:49:c2:2b:ee:fb:7e:28: 1e:ab:e4:f1:57:31:7a:d6:94:11:d6:63:29:a2:57:70:8d:6d: 48:75:6f:9e:ea:e9:64:52:f1:c2:60:18:b7:52:a3:ef:f3:28: 28:35:98:25:bd:50:d4:7a:4d:b8:55:cd:6d:98:f8:dd:ec:46: 00:91:36:b4:6c:3b:c7:8c:43:c6:1e:78:b0:fb:83:c6:04:62: 96:7b:39:95:b7:b5:94:86:07:ed:fd:11:ed:be:89:ab:54:51: 50:37:be:5c:a5:73:a5:ba:54:34:22:82:cb:d3:b7:20:73:f9: 88:7b:5c:44:3b:16:cb:1b:f0:b6:df:6c:d7:f0:56:ab:4f:25: 19:a1:c8:fc:f2:39:78:4d:e5:20:1a:93:8b:7f:93:0a:38:9d: b4:ac:09:bd:19:89:90:59:5d:ef:18:9e:42:f8:f3:54:3a:12: 30:7a:5d:ca:4e:83:42:5c:86:04:4a:3b:9a:ab:56:9c:56:c2: 41:b6:37:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxLymMY2pQtc3e+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2ZiYjE3MGEtYzYwMy00Njk2LTkxZmQtN2FjMDZhM2NmZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz26Ph2Rm3v36SKp8X6Dboms1flTP6eESZBi Ch1g5leGoRoKCRMyv6IE6JheJlMSeodmaQ6rKymUdOgHq6/pXXMgqZNpjJO1fI5Z LcJdj5Wqqne5iiMw0mOAFSD3CSaC6BIBDEwSz722X+IadGNg7Is0vONnNMhtXFNd Y8dadaG8FC3T43jVVqfk3Hp53UuZOJLxM/PIFHKVDEzYQGW8huvbEETnzBDx3k+E P3KmcM/bFUwAywLxf1T3qMtEBh1JYLU5lzyzvcbBoFOFO/AOC+90cP8a1Mfd9Egv Ys3f+S353UNGQR643pcPwPl/EKOZGV724mfsAEeTOE9cOYbQ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByQvpY3PGfSLzR9ZQYrPcAoNfpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzNlODY3MWItMmE1Zi0z YWJmLWI2NzMtOTY2NzMxNzBhYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4gNDpBVlzOCjI9Z2651twLFRifZ64ZDXmAMZSomEym+qTXkLME/qF9 TdAhxgjyH2nYlu9dfPitxMqVB9a+aKHcScIr7vt+KB6r5PFXMXrWlBHWYymiV3CN bUh1b57q6WRS8cJgGLdSo+/zKCg1mCW9UNR6TbhVzW2Y+N3sRgCRNrRsO8eMQ8Ye eLD7g8YEYpZ7OZW3tZSGB+39Ee2+iatUUVA3vlylc6W6VDQigsvTtyBz+Yh7XEQ7 Fssb8LbfbNfwVqtPJRmhyPzyOXhN5SAak4t/kwo4nbSsCb0ZiZBZXe8YnkL481Q6 EjB6XcpOg0JchgRKO5qrVpxWwkG2N/8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:57 2025 by rpki-client