$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f71e4eb-c105-31f4-a85f-009170f01cb7.roa File: 5f71e4eb-c105-31f4-a85f-009170f01cb7.roa (raw, json) Hash identifier: 5q6RD2ghxDvidkiAt3dHUmplM0JeeRtYWY2IvHQhVSc= Subject key identifier: 01:96:73:6F:BD:BE:FB:69:27:3C:C5:EE:60:40:E2:0B:37:E4:9C:05 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BEB89063A499099B38B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f71e4eb-c105-31f4-a85f-009170f01cb7.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397237 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:eb:89:06:3a:49:90:99:b3:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f4a7f32e-f11a-4ce5-88c1-752026a481f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:28:30:53:d6:a4:de:27:ec:50:21:c2:6d: 01:a0:95:7a:d4:8c:ec:9f:f1:2b:b8:00:76:1e:3f: 93:ea:11:41:f5:8a:f2:e9:f3:4f:2d:7d:17:a7:d6: ca:c5:84:47:05:e4:0e:99:88:45:ee:85:da:96:e7: de:4f:63:02:cc:c5:b4:ad:64:18:8f:fa:3a:08:55: 36:4b:c4:27:5c:95:91:85:1b:37:45:34:76:70:2d: 93:cd:d5:80:2f:2b:4e:62:9f:5f:fe:cb:4d:72:4f: 8b:cd:69:00:df:db:88:d9:91:c9:b4:20:d7:68:a0: 7c:f4:e3:b7:74:8b:7f:67:e0:d6:bb:f9:b0:37:61: c3:02:9f:e6:22:07:e6:a9:5f:6d:16:d6:6e:0e:ef: e4:3c:b9:1d:49:25:47:de:15:20:01:c1:20:6f:f3: cf:69:cd:75:75:aa:e7:63:11:26:c0:4b:b0:1c:e0: de:11:c4:51:00:8d:5b:f9:f9:f6:ba:3a:03:de:a8: f9:3c:3d:e5:3f:73:56:22:71:66:05:4e:33:1c:f8: 8c:66:02:9d:72:11:6d:86:77:01:34:f3:1b:7c:b3: 1f:78:7a:4c:cc:c1:5b:5c:de:56:13:8b:a0:60:39: 0a:b2:34:c8:4c:5c:a3:25:38:fc:05:b3:27:84:88: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:96:73:6F:BD:BE:FB:69:27:3C:C5:EE:60:40:E2:0B:37:E4:9C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5f71e4eb-c105-31f4-a85f-009170f01cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6a:26:1f:25:ef:e3:25:63:74:3f:cb:6d:cc:da:9c:6c:fe: f8:27:5c:c4:a2:89:d0:2e:87:80:b8:ab:55:3a:86:be:88:75: 8b:4b:8d:45:98:a3:7a:f2:9a:28:d7:68:3b:90:90:07:25:2c: a1:05:45:17:77:c3:32:cf:32:19:ac:45:e3:d5:bc:0e:70:77: 40:0b:de:bb:07:b3:45:ab:c5:b6:e4:fa:51:4a:14:54:96:b4: 3c:aa:2d:de:bf:c2:20:41:87:5e:a3:27:3f:32:73:27:62:de: da:77:bc:55:0c:7d:c0:6a:7c:f9:45:ab:94:1e:c8:e6:86:97: 1f:08:1c:40:91:34:dc:a1:0c:22:c2:b3:c4:6d:db:26:c0:b3: 70:25:39:29:23:f1:06:65:78:a6:0a:d7:83:11:2b:60:9b:f7: 82:8a:81:3f:8f:7d:16:b8:94:21:e0:02:79:63:9f:43:a6:44: e5:d0:7e:c8:77:ba:43:5b:0a:da:a9:2c:29:7d:87:80:2c:4e: 99:d3:b2:c0:bc:7c:5c:f0:2d:f4:fa:b4:6d:11:7a:44:9f:67: ca:fb:fe:cb:cb:b9:bf:90:16:0b:f8:22:a7:00:eb:31:7c:a4: 6a:6b:d1:fa:da:43:da:fe:92:6b:55:24:e5:c1:18:be:8f:7e: b7:e3:a4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+uJBjpJkJmziwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZjRhN2YzMmUtZjExYS00Y2U1LTg4YzEtNzUyMDI2YTQ4MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwgoMFPWpN4n7FAhwm0BoJV61Izsn/EruAB2 Hj+T6hFB9Yry6fNPLX0Xp9bKxYRHBeQOmYhF7oXalufeT2MCzMW0rWQYj/o6CFU2 S8QnXJWRhRs3RTR2cC2TzdWALytOYp9f/stNck+LzWkA39uI2ZHJtCDXaKB89OO3 dIt/Z+DWu/mwN2HDAp/mIgfmqV9tFtZuDu/kPLkdSSVH3hUgAcEgb/PPac11darn YxEmwEuwHODeEcRRAI1b+fn2ujoD3qj5PD3lP3NWInFmBU4zHPiMZgKdchFthncB NPMbfLMfeHpMzMFbXN5WE4ugYDkKsjTITFyjJTj8BbMnhIhJVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGWc2+9vvtpJzzF7mBA4gs35JwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWY3MWU0ZWItYzEwNS0z MWY0LWE4NWYtMDA5MTcwZjAxY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtqJh8l7+MlY3Q/y23M2pxs/vgnXMSiidAuh4C4q1U6hr6IdYtLjUWY o3rymijXaDuQkAclLKEFRRd3wzLPMhmsRePVvA5wd0AL3rsHs0Wrxbbk+lFKFFSW tDyqLd6/wiBBh16jJz8ycydi3tp3vFUMfcBqfPlFq5QeyOaGlx8IHECRNNyhDCLC s8Rt2ybAs3AlOSkj8QZleKYK14MRK2Cb94KKgT+PfRa4lCHgAnljn0OmROXQfsh3 ukNbCtqpLCl9h4AsTpnTssC8fFzwLfT6tG0RekSfZ8r7/svLub+QFgv4IqcA6zF8 pGpr0fraQ9r+kmtVJOXBGL6PfrfjpD8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:52 2025 by rpki-client