$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42afa147-ce36-39c3-a608-3c3bfa69e578.roa File: 42afa147-ce36-39c3-a608-3c3bfa69e578.roa (raw, json) Hash identifier: W5E2TDj04Fi4vVwIoKGLYNlcV3bfra1427PPRloDZDk= Subject key identifier: 9B:D5:34:D3:57:43:FF:2B:47:95:E3:42:C0:D7:9B:59:27:4E:36:68 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF61F01D4B27E80451200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42afa147-ce36-39c3-a608-3c3bfa69e578.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397225 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f6:1f:01:d4:b2:7e:80:45:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=4dcba5c8-f9c3-428b-a4f9-75aa4ee8c378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:7c:05:fe:ad:ee:35:48:db:d4:94:67:e6: a9:09:e0:d8:e0:49:cf:a6:79:73:fb:6e:07:d6:de: 89:6e:0c:7c:18:af:a3:3f:26:08:32:11:8e:b1:55: 63:28:2e:ef:d9:25:94:aa:16:52:3e:53:57:d1:24: e2:36:a6:c1:95:da:50:44:a6:5c:05:1d:b1:a6:0a: e7:1f:62:8a:8c:01:29:14:56:4b:fa:61:c7:ae:96: 62:bc:e5:c1:da:c8:f1:89:99:1c:16:c7:d8:e2:aa: 08:ad:01:17:a2:32:0c:ef:a2:50:fd:2c:79:ec:18: 06:7a:63:a1:9b:38:74:a1:bb:13:5d:f6:60:b3:0c: 03:f6:f1:3f:0c:37:bc:ab:52:2e:8a:e4:56:d7:0a: e7:dc:d6:c7:6c:5f:99:b2:38:77:8b:06:5d:be:91: c2:0c:41:1e:49:80:85:78:5e:21:74:fd:56:93:af: a9:e1:e8:59:1f:81:62:dc:e0:48:cb:e1:f7:41:df: d6:9d:7d:d7:87:c8:6e:82:14:7f:82:6a:19:f4:66: 18:31:78:da:f3:39:51:0a:90:25:ab:ae:83:c7:99: 08:97:30:62:b6:e6:b9:4b:ab:30:8c:43:c0:3a:5b: fe:33:b6:8c:27:8d:d2:49:f7:f2:eb:da:81:12:e6: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D5:34:D3:57:43:FF:2B:47:95:E3:42:C0:D7:9B:59:27:4E:36:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/42afa147-ce36-39c3-a608-3c3bfa69e578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0d:97:53:59:35:af:0c:3e:92:a6:55:47:a0:73:65:e0:b0: 8a:d4:63:85:cc:c7:0e:0a:4e:d2:44:3e:a5:5a:78:15:9a:2a: 92:7f:b1:16:e1:9d:21:de:be:0e:cf:84:54:7f:4b:dc:f7:1c: 55:f2:11:05:61:42:8b:91:51:57:79:fc:48:df:2d:bf:8f:48: e6:bd:35:2a:34:c2:d7:86:ae:9c:a5:6d:3c:e9:41:cc:56:7a: 95:cb:15:04:6b:ba:69:80:fd:c4:a5:57:9c:b4:65:a0:a0:88: 44:58:15:d9:fd:f4:6c:a8:4d:0e:d7:f5:a2:f4:f6:e5:db:0b: 54:77:da:71:29:49:af:3a:b7:eb:75:46:07:14:b6:85:f1:23: f1:eb:7d:3b:a3:21:3d:95:9f:4c:3c:4f:51:ee:f0:1c:98:a0: 58:14:7a:a3:93:17:b2:45:dd:b7:c9:44:74:80:19:cd:97:2f: 2d:89:24:bd:a1:b6:a4:83:76:81:05:5b:5c:9c:fb:7a:de:9e: d3:83:2e:89:ef:5a:67:95:b3:22:79:a0:d8:96:44:dc:e6:27: 71:37:94:88:ab:c8:8c:b9:09:6a:b6:4b:f0:29:c0:eb:74:08: a2:db:b3:08:71:3b:2d:27:3a:8d:31:64:72:e0:ef:7b:92:36: 1d:a7:7a:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/YfAdSyfoBFEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NGRjYmE1YzgtZjljMy00MjhiLWE0ZjktNzVhYTRlZThjMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbx8Bf6t7jVI29SUZ+apCeDY4EnPpnlz+24H 1t6Jbgx8GK+jPyYIMhGOsVVjKC7v2SWUqhZSPlNX0STiNqbBldpQRKZcBR2xpgrn H2KKjAEpFFZL+mHHrpZivOXB2sjxiZkcFsfY4qoIrQEXojIM76JQ/Sx57BgGemOh mzh0obsTXfZgswwD9vE/DDe8q1IuiuRW1wrn3NbHbF+Zsjh3iwZdvpHCDEEeSYCF eF4hdP1Wk6+p4ehZH4Fi3OBIy+H3Qd/WnX3Xh8hughR/gmoZ9GYYMXja8zlRCpAl q66Dx5kIlzBitua5S6swjEPAOlv+M7aMJ43SSffy69qBEubrMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvVNNNXQ/8rR5XjQsDXm1knTjZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDJhZmExNDctY2UzNi0z OWMzLWE2MDgtM2MzYmZhNjllNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADANl1NZNa8MPpKmVUegc2XgsIrUY4XMxw4KTtJEPqVaeBWaKpJ/sRbh nSHevg7PhFR/S9z3HFXyEQVhQouRUVd5/EjfLb+PSOa9NSo0wteGrpylbTzpQcxW epXLFQRrummA/cSlV5y0ZaCgiERYFdn99GyoTQ7X9aL09uXbC1R32nEpSa86t+t1 RgcUtoXxI/HrfTujIT2Vn0w8T1Hu8ByYoFgUeqOTF7JF3bfJRHSAGc2XLy2JJL2h tqSDdoEFW1yc+3rentODLonvWmeVsyJ5oNiWRNzmJ3E3lIiryIy5CWq2S/ApwOt0 CKLbswhxOy0nOo0xZHLg73uSNh2nenU= -----END CERTIFICATE-----Generated at Sat Aug 23 13:13:44 2025 by rpki-client