$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa File: 3ae60e70-e5fe-3802-ae55-f68e23a195db.roa (raw, json) Hash identifier: B18SJDrchKm+wKPhB6RNJv2ZsODtn/egmNxcyOtewNs= Subject key identifier: 70:E4:3C:24:62:31:1F:CB:F3:69:59:26:95:1E:05:54:68:B4:E5:6F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C045E420B8E830885E000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397232 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:04:5e:42:0b:8e:83:08:85:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=dd3543ec-4eef-4ce0-b20f-87562f521682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:fc:71:90:ed:b1:e9:0a:6f:14:03:50:1f: 1a:a8:c8:21:ba:57:3f:8a:05:0a:7e:dc:05:26:a5: 8f:04:99:5a:87:28:02:e2:80:68:d2:38:f7:9d:a9: 16:97:81:15:3f:6b:9b:b0:ca:b9:1b:38:c2:7d:d4: e4:2f:4b:30:ec:f6:6e:06:6a:63:5e:e5:f1:82:0f: bc:de:93:73:be:7e:21:c0:cc:37:77:8a:8a:fd:a7: eb:07:f5:6f:b3:48:ee:6a:41:14:8d:1e:78:0d:ea: 49:02:47:4f:5f:cd:62:d3:1c:4e:02:97:e6:a4:97: 72:71:df:39:e9:e7:73:fa:a1:27:4f:d8:18:0c:dd: f1:2b:b7:26:95:c7:84:1d:05:96:8e:89:76:db:d5: ca:a0:25:17:b8:3f:b2:e7:03:1d:4c:ea:6e:66:f2: 51:48:74:c7:ac:5b:05:7c:ab:f2:1e:b6:a5:de:8f: 4e:df:8c:5b:b4:56:00:c5:c3:65:7f:54:0d:9d:2e: 63:7a:38:ed:fa:98:1b:af:ad:db:ce:1f:53:26:58: 47:c7:c4:f3:ea:f1:ed:b4:9c:54:59:25:64:96:3a: 0c:07:ad:c9:f7:43:96:ab:a2:9b:55:e0:f5:f7:a2: ba:fa:3c:d5:19:74:a9:dd:4f:6a:70:06:b8:d5:0a: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:3C:24:62:31:1F:CB:F3:69:59:26:95:1E:05:54:68:B4:E5:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ae60e70-e5fe-3802-ae55-f68e23a195db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1d:a9:5a:bb:0b:1a:e2:e5:bb:22:d1:6c:72:ae:11:3d:c6: f3:e2:3d:b9:72:1d:1a:0f:c7:82:1f:54:46:d7:5a:50:d0:41: e1:72:7e:20:3f:ae:2c:9c:e9:9e:a7:a9:11:44:23:d2:93:49: f6:c3:e6:3f:49:7b:3a:f6:5d:0e:90:fd:e3:4e:13:6c:c5:ea: 7f:d2:bb:14:9d:7f:e6:56:e2:2a:e2:80:b7:9f:dc:56:96:94: 89:89:94:42:56:d5:37:52:3a:60:07:36:fd:27:e5:27:1d:55: e6:81:51:32:96:30:d6:53:6b:c5:99:29:c6:8d:d9:c8:07:b3: f0:09:7d:d4:d7:3f:ac:fe:ec:8b:21:f9:d3:c7:6a:bb:a9:3d: 3a:00:56:dc:04:f3:29:58:d2:39:ff:60:d2:74:8d:41:4e:56: c5:7b:9c:2d:c8:ec:66:49:52:09:1b:ed:bb:42:e6:23:3a:ca: 54:e9:e6:d7:1d:90:93:9f:2c:22:87:6d:a3:5b:64:68:3e:c6: 08:18:ca:5a:07:85:4e:85:da:d2:8e:1a:56:a7:2a:1c:f0:b3: da:82:e5:2b:ef:48:b9:32:1d:d3:cb:e1:54:95:f5:66:32:be: 04:f2:23:e1:4b:76:f1:89:e5:8e:a3:d0:79:de:bf:c2:f4:1f: 58:b6:09:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAReQguOgwiF4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZGQzNTQzZWMtNGVlZi00Y2UwLWIyMGYtODc1NjJmNTIxNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobz8cZDtsekKbxQDUB8aqMghulc/igUKftwF JqWPBJlahygC4oBo0jj3nakWl4EVP2ubsMq5GzjCfdTkL0sw7PZuBmpjXuXxgg+8 3pNzvn4hwMw3d4qK/afrB/Vvs0juakEUjR54DepJAkdPX81i0xxOApfmpJdycd85 6edz+qEnT9gYDN3xK7cmlceEHQWWjol229XKoCUXuD+y5wMdTOpuZvJRSHTHrFsF fKvyHral3o9O34xbtFYAxcNlf1QNnS5jejjt+pgbr63bzh9TJlhHx8Tz6vHttJxU WSVkljoMB63J90OWq6KbVeD196K6+jzVGXSp3U9qcAa41Qrs3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDkPCRiMR/L82lZJpUeBVRotOVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2FlNjBlNzAtZTVmZS0z ODAyLWFlNTUtZjY4ZTIzYTE5NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAdqVq7Cxri5bsi0WxyrhE9xvPiPblyHRoPx4IfVEbXWlDQQeFyfiA/ riyc6Z6nqRFEI9KTSfbD5j9Jezr2XQ6Q/eNOE2zF6n/SuxSdf+ZW4irigLef3FaW lImJlEJW1TdSOmAHNv0n5ScdVeaBUTKWMNZTa8WZKcaN2cgHs/AJfdTXP6z+7Ish +dPHarupPToAVtwE8ylY0jn/YNJ0jUFOVsV7nC3I7GZJUgkb7btC5iM6ylTp5tcd kJOfLCKHbaNbZGg+xggYyloHhU6F2tKOGlanKhzws9qC5SvvSLkyHdPL4VSV9WYy vgTyI+FLdvGJ5Y6j0Hnev8L0H1i2CcA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:18 2025 by rpki-client