$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/425b37dd-b303-3dd9-bc0b-0059d24b63d1.roa File: 425b37dd-b303-3dd9-bc0b-0059d24b63d1.roa (raw, json) Hash identifier: uDfRFt+p23CZNoUj4IA9VZBIq11qTEiuARhRo8rRJOA= Subject key identifier: C0:EA:D1:92:96:1A:BA:90:51:FF:58:19:6A:4B:7F:FF:D8:D3:A3:0E Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BFC57A8B964B0EAD906E0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/425b37dd-b303-3dd9-bc0b-0059d24b63d1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397215 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:fc:57:a8:b9:64:b0:ea:d9:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=7ddd992a-8057-448f-83e6-dba9c92e9612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:97:3c:d3:91:91:66:1f:e9:01:9a:90:33: 77:19:41:13:a5:f9:2d:21:5e:bd:97:a6:15:ce:69: f2:f9:4b:87:5d:05:bd:a2:e6:e6:d2:95:50:5b:1e: aa:9d:65:07:98:8c:00:ed:9e:53:fb:24:1f:9c:d4: fb:fe:da:a6:24:e2:72:78:d2:76:60:d3:e2:47:55: 5c:15:97:a5:75:ee:bd:8d:32:bf:68:f9:c3:d7:3d: 4b:63:c1:1e:7b:4f:5c:f4:39:91:a7:57:c4:d9:07: df:44:67:d2:f3:63:d3:4e:93:d6:c0:df:d9:4c:ef: 4a:62:a2:74:12:81:93:09:26:9c:10:90:e0:c8:b9: ed:34:36:82:4c:4f:bd:11:01:68:43:39:08:c0:3b: 88:a7:31:0e:29:23:08:04:f2:84:ae:ca:f3:21:6e: a7:7c:57:c8:da:32:c6:62:f1:66:dd:51:6c:d8:6e: 28:c4:6c:7e:97:ed:37:66:08:44:e0:b9:ab:14:4d: fa:e2:dc:95:15:6a:66:e3:d0:a6:16:71:76:d5:75: ae:bd:ea:a6:86:08:88:9a:e9:c3:0a:42:20:c4:6b: 06:be:37:d3:45:c2:f9:4f:bf:1a:8f:a6:fd:88:41: 84:07:4e:15:fb:33:39:35:68:e7:9e:8d:fd:13:68: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EA:D1:92:96:1A:BA:90:51:FF:58:19:6A:4B:7F:FF:D8:D3:A3:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/425b37dd-b303-3dd9-bc0b-0059d24b63d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a4:a2:c0:c2:f4:4b:c2:3c:31:85:9e:56:09:90:97:44:22: 9d:95:60:6f:2c:25:1b:b7:16:e2:a3:eb:13:d3:e8:93:e0:11: fa:77:f5:0b:cc:4c:a7:9c:00:5e:c8:63:26:e5:8b:69:19:aa: 8f:87:59:78:9b:2b:26:4b:ce:96:85:91:a2:77:53:83:c7:54: 0b:74:3f:3f:c1:4c:a2:79:97:b7:56:3d:9a:9b:e3:f1:15:32: d3:37:dc:ad:9f:06:fc:84:7d:aa:52:37:69:fc:e5:5e:95:f8: 7a:11:56:d1:82:92:3d:ce:4c:39:33:44:9b:6f:11:6a:fd:e9: 3e:fc:ee:be:39:21:75:d6:3f:bb:34:17:02:2f:8a:2d:73:69: 60:96:d8:ba:00:c5:f2:fa:a5:67:4d:ee:d0:5e:bf:20:f8:c8: 31:9f:6d:e1:c8:54:dd:14:66:1b:ce:a5:6a:db:9f:ed:71:24: d3:19:8f:93:e5:d2:8c:be:fd:96:10:02:ac:17:3d:70:07:95: 54:5d:16:ad:49:e5:d8:44:36:4e:14:a9:71:32:4d:84:41:d2: f8:23:ef:fc:f4:20:29:d0:35:f2:42:da:f6:c9:94:da:b8:47: af:55:72:e8:ab:f4:95:24:00:0e:5c:0e:96:65:c9:f0:f0:61: 62:28:66:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/xXqLlksOrZBuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk N2RkZDk5MmEtODA1Ny00NDhmLTgzZTYtZGJhOWM5MmU5NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6WXPNORkWYf6QGakDN3GUETpfktIV69l6YV zmny+UuHXQW9oubm0pVQWx6qnWUHmIwA7Z5T+yQfnNT7/tqmJOJyeNJ2YNPiR1Vc FZelde69jTK/aPnD1z1LY8Eee09c9DmRp1fE2QffRGfS82PTTpPWwN/ZTO9KYqJ0 EoGTCSacEJDgyLntNDaCTE+9EQFoQzkIwDuIpzEOKSMIBPKErsrzIW6nfFfI2jLG YvFm3VFs2G4oxGx+l+03ZghE4LmrFE364tyVFWpm49CmFnF21XWuveqmhgiImunD CkIgxGsGvjfTRcL5T78aj6b9iEGEB04V+zM5NWjnno39E2g4+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDq0ZKWGrqQUf9YGWpLf//Y06MOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDI1YjM3ZGQtYjMwMy0z ZGQ5LWJjMGItMDA1OWQyNGI2M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIakosDC9EvCPDGFnlYJkJdEIp2VYG8sJRu3FuKj6xPT6JPgEfp39QvM TKecAF7IYybli2kZqo+HWXibKyZLzpaFkaJ3U4PHVAt0Pz/BTKJ5l7dWPZqb4/EV MtM33K2fBvyEfapSN2n85V6V+HoRVtGCkj3OTDkzRJtvEWr96T787r45IXXWP7s0 FwIvii1zaWCW2LoAxfL6pWdN7tBevyD4yDGfbeHIVN0UZhvOpWrbn+1xJNMZj5Pl 0oy+/ZYQAqwXPXAHlVRdFq1J5dhENk4UqXEyTYRB0vgj7/z0ICnQNfJC2vbJlNq4 R69Vcuir9JUkAA5cDpZlyfDwYWIoZlc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:03:46 2025 by rpki-client