$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70204d3b-62eb-3b51-ac77-fb383b2172fa.roa File: 70204d3b-62eb-3b51-ac77-fb383b2172fa.roa (raw, json) Hash identifier: L/ZmFgGKklOJ/SFsiG9PpdFs274pRt92kH38jqRE7P0= Subject key identifier: 34:F6:95:56:B3:71:20:D9:6C:0A:8E:8D:18:4E:45:91:E0:C7:0C:BC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BEA8BE2A6024120424F00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70204d3b-62eb-3b51-ac77-fb383b2172fa.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397222 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ea:8b:e2:a6:02:41:20:42:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=db48430e-c841-4f7e-8aa5-ad19042a9541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:7c:99:df:40:1e:e6:b6:3d:72:de:ab:2a: aa:3c:35:69:9a:24:95:60:d0:f3:34:70:26:f2:4b: de:14:60:9f:ce:cc:4d:8a:ed:23:ec:10:d7:57:9a: 3e:15:7d:5f:d7:cd:78:0b:84:91:b1:30:b8:02:71: b8:97:07:7b:39:93:0c:b1:1c:ec:0c:c5:0e:a6:ae: 77:d6:74:d2:d9:8e:1f:86:bd:4a:5b:3f:6f:f3:1d: 38:cc:11:9a:d7:fc:8e:54:82:7b:0b:75:d6:b3:00: 31:4e:8c:65:6c:5e:6a:ea:21:95:a5:cf:eb:95:d1: 58:43:1c:6b:06:6e:95:87:78:71:e5:e7:60:b2:64: 69:4d:d9:6c:e7:42:48:6f:1f:dc:df:8e:38:5a:41: 69:3c:95:d7:3d:f3:32:0d:75:70:b8:19:72:45:29: 6a:fe:df:39:3f:c5:79:6e:ed:7c:c1:f6:90:9b:df: 02:7e:9a:65:5d:94:26:e8:9d:89:33:46:82:d1:f1: bb:63:75:37:d2:78:88:95:7d:31:7d:dc:08:50:ee: 39:e0:d0:16:24:da:a8:63:19:ca:5d:cd:d1:23:68: ce:67:2b:b8:56:7f:97:30:ee:87:d5:f7:54:cd:86: f4:24:b7:5d:39:40:f9:b7:ca:7d:3f:14:23:3d:d1: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F6:95:56:B3:71:20:D9:6C:0A:8E:8D:18:4E:45:91:E0:C7:0C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70204d3b-62eb-3b51-ac77-fb383b2172fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5d:a2:90:37:c1:f7:f2:65:7b:59:4a:5d:34:8c:db:c6:c8: 0f:61:63:36:4c:37:fc:8c:e5:8c:8a:4b:9c:2e:4f:5d:64:97: 98:0b:f5:ed:6d:c4:0e:7d:f9:7c:a5:2d:c1:8c:d7:01:c6:34: 1f:e7:ac:89:6d:33:c1:10:be:99:35:42:d7:0a:4b:d2:cb:35: 78:82:7d:ee:dd:f2:f6:e5:87:63:11:66:fc:bb:f3:70:4b:51: 15:b7:4e:95:a2:36:52:b9:ee:98:d2:60:6e:6d:f2:17:8f:2a: 0d:6a:89:7f:f9:8c:d1:18:52:0d:d0:08:27:0a:96:e0:1c:9a: e7:4d:10:6e:56:73:38:07:e1:df:26:dc:16:55:ba:9c:e3:38: 4e:02:88:6d:c7:22:55:db:09:0f:66:66:22:5a:f7:ed:ee:33: c5:48:4c:46:fc:60:83:8c:88:54:85:64:83:58:1e:6f:ed:5c: cd:d3:1e:c9:79:a2:5f:80:08:0c:0a:53:cd:9d:de:2e:09:33: 81:22:fd:9d:55:85:18:95:c4:67:79:fd:2b:d4:a2:74:52:38: 18:13:bb:5b:5d:35:27:c0:92:f0:b4:86:c5:66:b9:4a:b2:f9: 61:9b:d1:51:33:7e:8d:ce:98:36:0a:8e:b4:cf:d9:6e:77:f9: 84:a3:46:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+qL4qYCQSBCTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZGI0ODQzMGUtYzg0MS00ZjdlLThhYTUtYWQxOTA0MmE5NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGh8md9AHua2PXLeqyqqPDVpmiSVYNDzNHAm 8kveFGCfzsxNiu0j7BDXV5o+FX1f1814C4SRsTC4AnG4lwd7OZMMsRzsDMUOpq53 1nTS2Y4fhr1KWz9v8x04zBGa1/yOVIJ7C3XWswAxToxlbF5q6iGVpc/rldFYQxxr Bm6Vh3hx5edgsmRpTdls50JIbx/c3444WkFpPJXXPfMyDXVwuBlyRSlq/t85P8V5 bu18wfaQm98CfpplXZQm6J2JM0aC0fG7Y3U30niIlX0xfdwIUO454NAWJNqoYxnK Xc3RI2jOZyu4Vn+XMO6H1fdUzYb0JLddOUD5t8p9PxQjPdHU6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT2lVazcSDZbAqOjRhORZHgxwy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNzAyMDRkM2ItNjJlYi0z YjUxLWFjNzctZmIzODNiMjE3MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExdopA3wffyZXtZSl00jNvGyA9hYzZMN/yM5YyKS5wuT11kl5gL9e1t xA59+XylLcGM1wHGNB/nrIltM8EQvpk1QtcKS9LLNXiCfe7d8vblh2MRZvy783BL URW3TpWiNlK57pjSYG5t8hePKg1qiX/5jNEYUg3QCCcKluAcmudNEG5WczgH4d8m 3BZVupzjOE4CiG3HIlXbCQ9mZiJa9+3uM8VITEb8YIOMiFSFZINYHm/tXM3THsl5 ol+ACAwKU82d3i4JM4Ei/Z1VhRiVxGd5/SvUonRSOBgTu1tdNSfAkvC0hsVmuUqy +WGb0VEzfo3OmDYKjrTP2W53+YSjRhA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:32 2025 by rpki-client