$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/477651e6-38c4-3aa4-963f-abfea2037443.roa File: 477651e6-38c4-3aa4-963f-abfea2037443.roa (raw, json) Hash identifier: EtPebmrk+MoiBqIcAd5aDZuF6zYOOKfupGcwtJFnzsE= Subject key identifier: 0A:82:2F:EB:E7:9B:1C:85:52:D3:67:95:BC:82:91:4B:D5:04:4B:1C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AECC4BAFCB1D1DA9A5CBAC100 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/477651e6-38c4-3aa4-963f-abfea2037443.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 399167 IP address blocks: 156.154.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:ba:fc:b1:d1:da:9a:5c:ba:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=58f563f0-8940-46e2-952d-d902def51950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:0f:ac:e2:61:8c:83:50:25:6f:6e:0c:44: 43:3a:90:05:ce:d8:a8:14:4f:11:6d:5f:c2:c2:c1: cc:77:92:63:85:73:56:e9:0c:d0:ac:8d:9c:85:a9: 76:d1:15:b4:8b:9e:d4:eb:eb:7a:10:9f:39:b7:9d: df:a3:d5:23:4a:e7:07:2f:e8:30:1e:4e:68:ca:49: 5e:75:dc:f7:8f:41:44:57:57:1e:82:31:49:c9:df: 27:25:62:c8:6f:76:c3:5c:91:83:08:89:6f:cc:0e: ae:d5:ee:ac:68:66:1a:19:6a:96:67:ad:04:a0:c1: a9:47:1f:58:51:6f:73:6e:bb:65:77:44:89:88:a7: 9e:bc:bf:67:ff:1e:de:0b:59:4c:bc:7c:aa:d9:7d: c2:a5:26:78:e7:37:29:65:b4:0e:7e:47:7e:64:6e: 91:f6:e4:f0:c1:61:d8:80:4d:33:3b:ca:96:a5:86: 10:0b:44:ec:55:21:e8:9b:78:98:1a:c4:2d:30:81: 42:c7:8f:29:1f:58:75:f2:14:a9:2d:67:d2:b5:b4: f3:f3:f8:95:2d:a5:13:57:a9:3f:ec:04:4a:a2:1c: b1:c1:cb:19:a7:d3:27:e3:f9:bf:96:ce:06:28:d2: 4e:4a:6d:4d:38:e5:bb:c6:63:5f:33:53:78:5a:57: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:82:2F:EB:E7:9B:1C:85:52:D3:67:95:BC:82:91:4B:D5:04:4B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/477651e6-38c4-3aa4-963f-abfea2037443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:21:bd:3d:4e:47:90:65:ea:6a:8f:2f:ec:e6:6b:ee:9e:88: 75:70:95:00:ca:51:68:60:1b:16:19:f6:fa:c1:fb:43:8a:80: e3:6d:a9:1e:e2:36:93:7c:d5:a8:a3:bc:4e:d5:fa:c9:5d:23: 3a:a2:f0:c4:4a:7d:0c:df:52:fe:9b:be:4b:a5:21:f5:cf:bc: 77:3c:43:a7:41:8f:21:4d:27:8d:4c:85:0c:38:3a:87:03:4f: 68:59:34:7a:58:69:13:3e:88:e5:25:94:3b:7d:b0:6e:07:84: 16:14:54:6e:49:ff:c7:69:a0:51:83:da:62:cd:f1:d9:59:12: eb:49:55:8c:8b:3f:9a:00:2d:ff:c1:53:f9:ed:f3:c7:49:23: 96:78:49:1d:f6:88:04:2b:1b:16:97:0e:2b:e4:e6:79:ca:b3: e6:30:cd:d9:70:a7:7e:d0:b8:40:5c:a5:8b:e7:89:03:20:5e: 94:dd:a4:cf:9a:cc:f5:e1:54:17:1e:8c:f5:07:df:31:ce:05: 92:40:64:36:da:d4:ab:72:70:6a:d6:3f:3e:ee:8c:16:fa:40: 7d:94:ea:bf:87:7e:ce:ee:51:e6:b1:a5:75:b6:cc:72:da:1f: 11:e3:7c:54:68:57:d6:a9:12:d6:d1:67:67:02:50:81:18:5d: 95:02:c3:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxLr8sdHamly6wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NThmNTYzZjAtODk0MC00NmUyLTk1MmQtZDkwMmRlZjUxOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI0PrOJhjINQJW9uDERDOpAFztioFE8RbV/C wsHMd5JjhXNW6QzQrI2chal20RW0i57U6+t6EJ85t53fo9UjSucHL+gwHk5oykle ddz3j0FEV1cegjFJyd8nJWLIb3bDXJGDCIlvzA6u1e6saGYaGWqWZ60EoMGpRx9Y UW9zbrtld0SJiKeevL9n/x7eC1lMvHyq2X3CpSZ45zcpZbQOfkd+ZG6R9uTwwWHY gE0zO8qWpYYQC0TsVSHom3iYGsQtMIFCx48pH1h18hSpLWfStbTz8/iVLaUTV6k/ 7ARKohyxwcsZp9Mn4/m/ls4GKNJOSm1NOOW7xmNfM1N4Wlc7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqCL+vnmxyFUtNnlbyCkUvVBEscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDc3NjUxZTYtMzhjNC0z YWE0LTk2M2YtYWJmZWEyMDM3NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnJqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEhvT1OR5Bl6mqPL+zma+6eiHVwlQDKUWhgGxYZ9vrB+0OKgONtqR7i NpN81aijvE7V+sldIzqi8MRKfQzfUv6bvkulIfXPvHc8Q6dBjyFNJ41MhQw4OocD T2hZNHpYaRM+iOUllDt9sG4HhBYUVG5J/8dpoFGD2mLN8dlZEutJVYyLP5oALf/B U/nt88dJI5Z4SR32iAQrGxaXDivk5nnKs+Ywzdlwp37QuEBcpYvniQMgXpTdpM+a zPXhVBcejPUH3zHOBZJAZDba1KtycGrWPz7ujBb6QH2U6r+Hfs7uUeaxpXW2zHLa HxHjfFRoV9apEtbRZ2cCUIEYXZUCw9o= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:46 2025 by rpki-client