$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fef9add-1dab-3e1f-a710-2361cdc7a027.roa File: 3fef9add-1dab-3e1f-a710-2361cdc7a027.roa (raw, json) Hash identifier: iCnhmIw+BbiyFy0nx/ibi4d2PIveCr3ZjZcvAXTD1X4= Subject key identifier: B1:A8:65:BA:71:FB:EB:23:E8:5D:2A:21:82:F2:CC:34:AA:36:47:A5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF7F24A1BEA337FB53B80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fef9add-1dab-3e1f-a710-2361cdc7a027.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397218 IP address blocks: 156.154.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f7:f2:4a:1b:ea:33:7f:b5:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=fee42399-eed9-43e1-b048-e77d46c80c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:4b:5e:de:67:c7:b0:8a:23:15:fd:79:24: 3e:46:e4:cd:4f:3a:ea:5f:e9:7b:23:57:aa:ea:5b: f2:68:3c:68:54:a0:a3:54:5e:e6:f8:ce:50:a5:05: 72:cf:9c:e9:45:07:87:a4:e4:13:26:d0:7c:5e:71: b3:d4:0d:f4:9b:ac:15:95:17:6e:a3:59:17:be:56: 16:fd:22:37:eb:f6:44:a2:d8:90:46:4b:7d:00:1d: ef:78:e2:86:de:bd:d3:9e:c0:eb:31:0e:70:20:c2: 6c:ec:07:2f:e2:77:19:42:d5:46:68:8c:48:34:58: eb:28:42:a6:53:74:d0:8f:3e:d1:63:28:c9:ec:db: cd:2b:ab:f0:9b:bc:53:55:cd:57:32:e6:5c:0c:21: dc:43:35:2e:0e:56:eb:3f:7c:4f:d5:13:9a:76:58: 5e:05:c6:b2:56:9a:18:75:43:ef:83:e3:52:47:81: 68:47:70:9b:4d:c1:19:e2:0b:a9:5b:16:d6:02:c2: 8f:77:8e:89:96:89:02:d1:49:34:3a:c9:b2:cb:e5: fd:51:a0:09:fa:9e:c4:ec:4e:f8:82:ad:f6:62:27: 7e:d7:c8:6d:80:cc:2b:3c:3c:74:03:aa:8b:9f:90: f5:11:d6:e3:7e:06:ee:64:06:c4:c9:fe:ad:82:87: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:65:BA:71:FB:EB:23:E8:5D:2A:21:82:F2:CC:34:AA:36:47:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3fef9add-1dab-3e1f-a710-2361cdc7a027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a5:88:00:fe:3e:8e:47:77:86:19:c1:a8:75:24:0a:f9:f0: 61:0e:e3:c6:84:a5:0e:3b:5a:83:58:c2:b1:2e:3d:15:7e:03: bd:02:f9:67:d8:83:f8:11:41:2b:8f:de:b4:31:84:f5:03:81: 2c:83:ea:ac:d4:86:82:8a:0f:04:51:a4:96:2d:cf:66:59:f0: 1b:cd:f7:42:58:4b:df:1f:ba:c9:4e:3f:bb:ec:ce:8f:88:9d: 04:05:37:5a:94:aa:4b:c4:d9:59:9f:56:b4:8b:5c:8b:e5:b5: b7:5a:3d:b4:7b:de:d3:01:dd:cc:b7:f7:5a:af:7e:b9:20:2f: c3:cd:16:9f:73:5b:fa:9e:96:3e:27:6b:81:72:7b:0f:dd:3f: 1f:9e:84:60:cd:8f:86:79:e0:25:27:fa:5b:10:1b:5b:23:41: c7:9e:c3:fb:e5:1b:10:fb:0d:b3:4e:81:1a:ce:b3:d0:d7:c1: 1e:21:de:f6:70:19:10:73:14:bc:87:39:b1:c8:98:c6:8d:ca: 6c:e6:db:b3:50:6d:b1:ed:82:c4:b9:09:75:e0:5f:53:a4:d2: 57:f3:76:9a:36:8e:ee:ef:64:ad:3b:f5:47:7c:ff:e9:5e:e3: b0:0a:fb:e3:07:9e:42:7b:30:10:41:11:29:1e:71:c1:be:7f: 29:58:7f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/fyShvqM3+1O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmVlNDIzOTktZWVkOS00M2UxLWIwNDgtZTc3ZDQ2YzgwYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotZLXt5nx7CKIxX9eSQ+RuTNTzrqX+l7I1eq 6lvyaDxoVKCjVF7m+M5QpQVyz5zpRQeHpOQTJtB8XnGz1A30m6wVlRduo1kXvlYW /SI36/ZEotiQRkt9AB3veOKG3r3TnsDrMQ5wIMJs7Acv4ncZQtVGaIxINFjrKEKm U3TQjz7RYyjJ7NvNK6vwm7xTVc1XMuZcDCHcQzUuDlbrP3xP1ROadlheBcayVpoY dUPvg+NSR4FoR3CbTcEZ4gupWxbWAsKPd46JlokC0Uk0Osmyy+X9UaAJ+p7E7E74 gq32Yid+18htgMwrPDx0A6qLn5D1EdbjfgbuZAbEyf6tgoeFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGoZbpx++sj6F0qIYLyzDSqNkelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2ZlZjlhZGQtMWRhYi0z ZTFmLWE3MTAtMjM2MWNkYzdhMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6liAD+Po5Hd4YZwah1JAr58GEO48aEpQ47WoNYwrEuPRV+A70C+WfY g/gRQSuP3rQxhPUDgSyD6qzUhoKKDwRRpJYtz2ZZ8BvN90JYS98fuslOP7vszo+I nQQFN1qUqkvE2VmfVrSLXIvltbdaPbR73tMB3cy391qvfrkgL8PNFp9zW/qelj4n a4Fyew/dPx+ehGDNj4Z54CUn+lsQG1sjQceew/vlGxD7DbNOgRrOs9DXwR4h3vZw GRBzFLyHObHImMaNymzm27NQbbHtgsS5CXXgX1Ok0lfzdpo2ju7vZK079Ud8/+le 47AK++MHnkJ7MBBBESkeccG+fylYf2g= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:09 2025 by rpki-client