$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fb09750-945e-32bf-af7e-1f28f074ae1c.roa File: 6fb09750-945e-32bf-af7e-1f28f074ae1c.roa (raw, json) Hash identifier: TOImKMqJFxjSdOQyLOQCPx8AQ+Av/47NNxJAUC3AyEk= Subject key identifier: C5:2C:A4:A2:76:76:A1:3F:65:C7:A4:35:7F:4B:C6:DC:C9:1B:AC:A2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BFEC9C86E320470D4CB30 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fb09750-945e-32bf-af7e-1f28f074ae1c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397218 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:fe:c9:c8:6e:32:04:70:d4:cb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=c12c9aae-36ab-46fa-9475-47b0fb1a5215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:65:f6:d4:4c:9f:cc:97:b4:20:2c:4f:35: 38:0c:bb:80:92:3d:5d:61:14:10:d0:26:75:80:a6: 2a:fa:f4:74:90:7a:b0:2a:b7:80:b6:89:fe:e4:9b: d2:b7:1f:95:7f:86:e8:30:23:05:0d:4a:ea:fd:f5: c0:8f:82:4b:71:15:ef:ed:26:f9:7f:cb:a8:58:9b: 0b:f2:11:63:b5:a1:72:1d:e8:3a:3c:ef:ab:05:29: 22:b1:f8:2b:bc:88:d7:59:e8:65:b4:82:28:b3:91: ee:79:c0:00:05:d9:78:6c:50:00:bb:7e:cd:df:0a: 53:03:9e:c1:bb:67:eb:d8:9d:49:2f:65:ed:32:09: 52:90:ec:74:03:33:82:35:84:a7:8a:30:d8:9f:dd: 95:9e:d4:07:15:e9:32:fe:8f:14:37:60:9d:b4:e9: 7f:f7:4f:8c:76:98:de:7b:f1:29:82:83:1b:1d:dd: 49:aa:f0:df:d5:e3:09:29:d7:be:5d:5a:aa:bb:6a: cd:ba:75:3e:5c:e6:89:49:85:1c:89:3d:1e:c9:be: fe:1e:b1:42:d9:57:34:59:bb:e5:8b:64:11:fb:9f: 81:00:96:35:da:54:fc:3f:63:20:d0:89:6e:9d:cb: 58:0b:9d:39:b8:2b:e4:a3:a8:c4:ac:b6:d6:59:da: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2C:A4:A2:76:76:A1:3F:65:C7:A4:35:7F:4B:C6:DC:C9:1B:AC:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fb09750-945e-32bf-af7e-1f28f074ae1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:94:55:a1:5c:32:a2:a4:fb:97:27:73:5e:e8:97:ab:e1:66: 73:d1:a2:24:fd:c8:7a:6b:65:dc:5b:f8:4e:78:0a:ac:89:1b: df:0b:0a:b8:bf:e3:44:36:67:4e:c9:2c:cd:a4:1c:38:87:c6: aa:1a:17:1a:3f:f5:8b:c9:a6:b9:fa:37:bb:65:07:9d:28:a2: b6:84:e2:f1:20:d7:ce:77:bf:25:34:53:0d:90:10:8b:b0:0b: 2f:0e:fc:02:03:2d:97:c7:d9:6d:c3:2c:e2:0e:95:0e:8d:89: d7:fc:56:da:7d:74:34:43:5e:89:3c:b9:fd:fa:e4:e5:87:75: 8b:23:8b:a2:01:ce:e5:e0:19:2b:30:c4:f8:1b:56:be:59:24: 43:a2:55:9b:c4:ea:da:68:0c:c4:e8:dd:65:05:6f:39:b8:bb: e1:84:cf:07:28:b5:1c:04:bf:44:ee:e3:6b:c9:09:2b:b0:f9: c6:4d:63:a0:2c:b4:b1:2f:60:b4:b9:74:a4:3f:89:4b:80:c6: 08:07:4d:7e:24:90:d4:27:e8:1b:06:59:63:9e:6c:45:9a:e3: 15:52:84:5d:77:ac:94:90:49:3b:ff:5a:80:e8:d3:e7:1f:ff: 6c:ce:26:9b:66:5f:0e:96:4b:95:33:ea:19:fc:10:14:71:f6: 69:8d:6d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/7JyG4yBHDUyzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YzEyYzlhYWUtMzZhYi00NmZhLTk0NzUtNDdiMGZiMWE1MjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVJl9tRMn8yXtCAsTzU4DLuAkj1dYRQQ0CZ1 gKYq+vR0kHqwKreAton+5JvStx+Vf4boMCMFDUrq/fXAj4JLcRXv7Sb5f8uoWJsL 8hFjtaFyHeg6PO+rBSkisfgrvIjXWehltIIos5HuecAABdl4bFAAu37N3wpTA57B u2fr2J1JL2XtMglSkOx0AzOCNYSnijDYn92VntQHFeky/o8UN2CdtOl/90+Mdpje e/EpgoMbHd1JqvDf1eMJKde+XVqqu2rNunU+XOaJSYUciT0eyb7+HrFC2Vc0Wbvl i2QR+5+BAJY12lT8P2Mg0IlunctYC505uCvko6jErLbWWdo/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUspKJ2dqE/ZcekNX9LxtzJG6yiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNmZiMDk3NTAtOTQ1ZS0z MmJmLWFmN2UtMWYyOGYwNzRhZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGUVaFcMqKk+5cnc17ol6vhZnPRoiT9yHprZdxb+E54CqyJG98LCri/ 40Q2Z07JLM2kHDiHxqoaFxo/9YvJprn6N7tlB50ooraE4vEg1853vyU0Uw2QEIuw Cy8O/AIDLZfH2W3DLOIOlQ6Nidf8Vtp9dDRDXok8uf365OWHdYsji6IBzuXgGSsw xPgbVr5ZJEOiVZvE6tpoDMTo3WUFbzm4u+GEzwcotRwEv0Tu42vJCSuw+cZNY6As tLEvYLS5dKQ/iUuAxggHTX4kkNQn6BsGWWOebEWa4xVShF13rJSQSTv/WoDo0+cf /2zOJptmXw6WS5Uz6hn8EBRx9mmNbZk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:35 2025 by rpki-client