$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4053a2ad-b648-3e8e-a65a-3efaf8888534.roa File: 4053a2ad-b648-3e8e-a65a-3efaf8888534.roa (raw, json) Hash identifier: t3LMrVnvE5VFguxGo2TxtlhOo1+hGaQOY4mWY3x5tl4= Subject key identifier: 90:97:EF:79:90:C5:7C:C7:56:98:FE:FF:52:EC:54:1A:74:D8:50:05 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BFA1A27BC8DDBBD8B4200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4053a2ad-b648-3e8e-a65a-3efaf8888534.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397216 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:fa:1a:27:bc:8d:db:bd:8b:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=3565418f-1d69-4a85-87ac-0d907e69558c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:d3:bc:50:77:c0:93:4f:7d:d4:50:36:a0: 53:58:3c:08:8c:2a:32:d4:08:5c:54:6c:e6:f6:ae: 38:e0:89:e4:ae:a6:a3:14:36:d5:6b:2f:39:d4:fd: 58:2d:3b:d8:9c:ad:20:7d:a8:3e:c3:79:61:5a:ba: 92:a1:65:a9:71:64:13:d6:38:42:9d:a8:bb:69:30: 63:e5:86:b9:17:7b:35:ee:e8:c2:34:e8:1c:a9:46: 4e:ef:f4:c9:93:2e:d8:98:70:6e:0f:b5:27:b0:30: e9:e3:90:1e:33:01:48:19:24:26:36:28:89:cd:ba: 9b:71:18:4b:10:b1:77:d2:11:3d:82:57:c2:df:6b: 73:71:56:2b:97:6a:82:cb:5b:ec:45:d1:72:3d:22: 46:43:f1:f5:b4:d7:6a:17:32:9a:f8:e7:b8:f1:68: 3c:a5:5e:83:cc:04:81:27:98:49:57:f1:28:a7:2d: 85:9f:77:5e:79:08:94:35:cd:64:6f:cd:f3:bf:0a: d1:d6:f8:76:a1:ea:7c:5b:a5:01:d8:f4:5a:f8:c0: ac:23:a8:25:7e:82:c9:69:3b:a3:b1:13:a8:4f:23: 34:a8:3c:1b:db:e5:47:6a:8f:52:11:40:16:7a:50: 7e:24:cc:40:5a:07:82:dd:c5:4d:02:65:c6:d8:6a: ba:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:97:EF:79:90:C5:7C:C7:56:98:FE:FF:52:EC:54:1A:74:D8:50:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4053a2ad-b648-3e8e-a65a-3efaf8888534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:40:04:f5:b4:d7:f3:ef:d0:8d:cd:f3:fe:4e:50:df:9d:45: 7b:f3:95:28:89:be:ef:3a:f4:c9:cb:51:fd:88:3f:c9:e8:c1: 9a:01:36:21:90:30:b8:68:62:58:1c:51:6a:d3:38:b2:17:04: 57:17:92:5d:8a:0f:4d:cb:98:fb:70:8e:ff:0b:b5:e3:32:76: fc:ca:9e:07:0a:c1:f2:3c:64:80:05:0c:f3:5e:cc:67:2e:08: 0d:05:36:e8:39:75:64:8f:5e:32:b6:c5:64:3d:e8:60:cb:91: 94:35:e7:2b:fa:4f:ba:54:89:2d:f5:be:cb:19:96:1c:38:02: 38:93:5b:0c:df:ed:47:12:b7:63:a0:90:48:94:64:53:82:42: c2:a1:07:9b:0e:69:14:fc:fe:bd:d0:1b:8d:20:05:31:8f:94: 58:87:54:9d:08:a8:1e:5a:16:9c:30:28:f9:99:16:be:f8:63: 5b:d7:58:46:53:c4:60:7a:48:6a:92:a5:6c:15:41:37:2c:d3: 54:50:41:d5:ab:ef:3f:46:4a:6f:71:44:95:8c:f2:56:d0:ba: b3:2c:28:22:5c:3c:09:5f:4a:1d:ce:15:03:81:71:7f:f8:32: 89:76:d5:d0:fb:11:71:04:02:3d:75:ad:06:35:4c:ee:53:93: a7:42:96:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/oaJ7yN272LQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MzU2NTQxOGYtMWQ2OS00YTg1LTg3YWMtMGQ5MDdlNjk1NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJfTvFB3wJNPfdRQNqBTWDwIjCoy1AhcVGzm 9q444InkrqajFDbVay851P1YLTvYnK0gfag+w3lhWrqSoWWpcWQT1jhCnai7aTBj 5Ya5F3s17ujCNOgcqUZO7/TJky7YmHBuD7UnsDDp45AeMwFIGSQmNiiJzbqbcRhL ELF30hE9glfC32tzcVYrl2qCy1vsRdFyPSJGQ/H1tNdqFzKa+Oe48Wg8pV6DzASB J5hJV/Eopy2Fn3deeQiUNc1kb83zvwrR1vh2oep8W6UB2PRa+MCsI6glfoLJaTuj sROoTyM0qDwb2+VHao9SEUAWelB+JMxAWgeC3cVNAmXG2Gq6rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCX73mQxXzHVpj+/1LsVBp02FAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDA1M2EyYWQtYjY0OC0z ZThlLWE2NWEtM2VmYWY4ODg4NTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1ABPW01/Pv0I3N8/5OUN+dRXvzlSiJvu869MnLUf2IP8nowZoBNiGQ MLhoYlgcUWrTOLIXBFcXkl2KD03LmPtwjv8LteMydvzKngcKwfI8ZIAFDPNezGcu CA0FNug5dWSPXjK2xWQ96GDLkZQ15yv6T7pUiS31vssZlhw4AjiTWwzf7UcSt2Og kEiUZFOCQsKhB5sOaRT8/r3QG40gBTGPlFiHVJ0IqB5aFpwwKPmZFr74Y1vXWEZT xGB6SGqSpWwVQTcs01RQQdWr7z9GSm9xRJWM8lbQurMsKCJcPAlfSh3OFQOBcX/4 Mol21dD7EXEEAj11rQY1TO5Tk6dClms= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:57 2025 by rpki-client