$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6765459a-90fd-31b9-81af-b896fefee4e2.roa File: 6765459a-90fd-31b9-81af-b896fefee4e2.roa (raw, json) Hash identifier: 7VSrNaMtmtrvyZsgr+dq653O9thGA0WL8ECzisl7oa0= Subject key identifier: D2:67:D0:E9:60:A0:D6:54:9B:EE:FC:3E:63:C8:49:FA:D6:74:5E:86 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF64236D3FC0A92BAD680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6765459a-90fd-31b9-81af-b896fefee4e2.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397227 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f6:42:36:d3:fc:0a:92:ba:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=51cdddd0-cec0-4fca-8c50-e0eaa6228e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:aa:c1:9d:04:01:af:af:95:b9:70:bf:7c: a5:d2:f3:f0:e6:10:1c:2d:a9:3a:70:b4:d5:17:d7: 99:e1:9e:59:1a:14:a2:9f:f5:50:f4:22:94:ef:97: c8:a5:2b:df:48:1b:48:15:c1:c1:dd:f1:1e:0d:92: a6:5b:59:f4:f1:73:1d:56:d7:1c:d7:21:ea:90:50: fb:ed:1b:f6:9b:12:e9:79:56:38:0b:05:05:80:52: b7:86:6e:05:0b:d1:1b:56:4a:58:6b:1b:0f:33:08: 1a:df:0b:d2:1c:cd:b9:3a:88:51:87:97:94:be:5f: f3:12:cc:05:76:e2:00:9f:7a:2d:65:57:32:8b:b3: e1:7c:08:40:40:ab:84:21:be:35:b2:01:e2:14:71: 94:21:35:1a:ed:5b:cb:b6:b2:24:69:5d:e9:1c:b9: d6:15:3a:0d:66:8b:f7:23:26:ad:10:98:c3:a3:87: 9a:3c:8a:a1:be:a2:69:36:af:e5:a7:ec:db:df:95: 49:f0:2f:77:20:6d:d7:b3:6e:9c:c3:11:82:df:1c: 08:b7:d0:d2:f1:d9:2f:dd:bd:c2:31:44:7f:e0:09: 09:0f:16:8e:2b:77:9a:8a:58:08:d5:a1:57:5d:fc: 7d:03:95:05:09:be:3a:9b:75:23:89:24:28:59:4a: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:67:D0:E9:60:A0:D6:54:9B:EE:FC:3E:63:C8:49:FA:D6:74:5E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6765459a-90fd-31b9-81af-b896fefee4e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0f:b0:3e:40:c7:e3:40:d3:65:7a:e3:ef:6d:e4:26:f7:c1: b7:c9:2c:0d:44:ec:69:7a:03:f2:79:db:f0:4e:03:1f:5b:e4: 11:76:7d:4b:e5:36:dc:fc:95:a5:65:91:8f:ee:a5:b4:13:74: cb:0c:f7:24:b6:f7:2e:06:fd:64:a8:99:49:89:50:de:82:0b: 7e:ad:88:89:de:13:9d:e4:a0:31:be:f3:3e:29:db:ef:82:c4: c6:de:37:31:ca:c1:8f:b4:d0:cc:f0:a4:0a:14:37:29:ff:2e: 1a:03:b2:fc:dd:26:0e:7e:a1:66:9d:b0:ba:0f:8e:99:92:b9: ca:0a:50:6f:ab:2f:5f:9f:55:b4:6e:24:bd:59:eb:ed:10:12: 2e:4e:2c:f9:bd:74:04:a7:b1:07:85:11:84:66:bb:4a:58:9b: af:17:b4:82:91:ae:67:94:a3:1e:83:5a:0c:71:4b:69:6c:ee: da:32:c5:68:a2:fa:76:90:dd:fc:f3:6c:f1:ac:df:92:82:cc: 30:76:0e:51:56:0d:4d:51:ea:c6:63:3e:2c:83:99:61:c6:5d: 48:67:3d:c1:f3:7a:66:91:ed:f8:91:c3:c9:44:6a:c0:ec:64: ea:40:35:be:02:26:45:d9:0c:8c:e9:52:31:81:af:cc:85:dd: d4:b5:3e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/ZCNtP8CpK61oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NTFjZGRkZDAtY2VjMC00ZmNhLThjNTAtZTBlYWE2MjI4ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa2qwZ0EAa+vlblwv3yl0vPw5hAcLak6cLTV F9eZ4Z5ZGhSin/VQ9CKU75fIpSvfSBtIFcHB3fEeDZKmW1n08XMdVtcc1yHqkFD7 7Rv2mxLpeVY4CwUFgFK3hm4FC9EbVkpYaxsPMwga3wvSHM25OohRh5eUvl/zEswF duIAn3otZVcyi7PhfAhAQKuEIb41sgHiFHGUITUa7VvLtrIkaV3pHLnWFToNZov3 IyatEJjDo4eaPIqhvqJpNq/lp+zb35VJ8C93IG3Xs26cwxGC3xwIt9DS8dkv3b3C MUR/4AkJDxaOK3eailgI1aFXXfx9A5UFCb46m3UjiSQoWUre4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJn0OlgoNZUm+78PmPISfrWdF6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjc2NTQ1OWEtOTBmZC0z MWI5LTgxYWYtYjg5NmZlZmVlNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIPsD5Ax+NA02V64+9t5Cb3wbfJLA1E7Gl6A/J52/BOAx9b5BF2fUvl Ntz8laVlkY/upbQTdMsM9yS29y4G/WSomUmJUN6CC36tiIneE53koDG+8z4p2++C xMbeNzHKwY+00MzwpAoUNyn/LhoDsvzdJg5+oWadsLoPjpmSucoKUG+rL1+fVbRu JL1Z6+0QEi5OLPm9dASnsQeFEYRmu0pYm68XtIKRrmeUox6DWgxxS2ls7toyxWii +naQ3fzzbPGs35KCzDB2DlFWDU1R6sZjPiyDmWHGXUhnPcHzemaR7fiRw8lEasDs ZOpANb4CJkXZDIzpUjGBr8yF3dS1Pjg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:24 2025 by rpki-client