$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/891c77a2-ebff-3189-8b9a-5e5effe9b536.roa File: 891c77a2-ebff-3189-8b9a-5e5effe9b536.roa (raw, json) Hash identifier: rhuvl9SQfnW7T9H3CS4kl8mnjXiOhoIsi1YrgBui7qY= Subject key identifier: C6:D7:CE:2E:52:D8:BE:4A:D8:7A:6B:C3:5D:E1:D1:3E:59:D9:A5:FD Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BED646AD7642DC3A2BC38 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/891c77a2-ebff-3189-8b9a-5e5effe9b536.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397233 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ed:64:6a:d7:64:2d:c3:a2:bc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=cea1041e-ad3e-4c0e-b60f-83120f4c3fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:97:86:51:af:9a:d9:b7:af:5c:c7:69:09: 16:68:26:be:76:54:95:0a:c1:01:48:26:54:ea:1d: e5:86:3a:28:75:c7:32:86:48:0d:6c:22:ac:15:13: f9:17:7c:e3:92:91:83:f1:92:fd:c6:25:89:23:08: c2:d7:e0:71:11:7c:2c:52:3b:ad:29:17:34:83:1c: 17:21:28:4b:c5:90:4a:0c:6f:d9:64:65:a3:99:78: 0e:90:d6:ae:0a:95:38:b4:30:07:20:f5:eb:c0:07: b0:ea:b5:f3:2f:ab:79:d4:9f:cb:9f:58:66:8b:df: 67:ea:d4:64:46:3e:33:a8:bc:ca:e1:f8:1b:9a:a2: 30:6e:8e:33:b7:12:cf:1c:7c:c7:19:7f:7a:c5:cb: 54:6e:fe:bf:ce:ee:fe:0a:6c:4f:e9:05:c4:b4:a5: 14:40:37:f1:2c:d8:0b:7b:13:35:ac:aa:bd:67:98: 06:0a:9f:04:24:d4:17:a5:bf:5c:5f:97:93:04:fa: e9:26:89:24:5c:90:17:68:40:0b:f3:c6:57:1d:b2: b0:15:20:25:a1:0f:6d:41:bc:dc:5e:46:64:7a:d5: 62:9c:94:8d:cd:fa:00:02:c0:f0:60:c0:c2:3f:4e: 92:6a:fa:02:92:9a:eb:27:73:e7:34:52:48:27:4c: 1e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:CE:2E:52:D8:BE:4A:D8:7A:6B:C3:5D:E1:D1:3E:59:D9:A5:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/891c77a2-ebff-3189-8b9a-5e5effe9b536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f7:4c:0d:6d:c9:15:71:13:0e:a3:0d:c4:a9:e6:4e:a8:e4: e2:11:df:6f:ae:3e:78:8b:69:a4:b1:9d:f2:bc:4c:0e:18:48: 1e:80:11:40:10:74:56:61:9a:18:14:93:18:5c:b6:93:18:c0: 45:4e:95:ce:a1:ba:dd:28:d7:41:93:e0:bf:8d:32:de:1f:24: 54:d0:9d:0f:7d:6c:4a:45:ec:f6:11:10:c2:90:d5:cc:c5:89: 56:dd:53:e7:58:3e:af:66:9a:9b:38:b4:09:92:fd:29:5b:7f: 0d:6d:fd:19:e1:e6:ab:f0:e5:ef:23:03:72:1d:09:11:8f:7e: 8e:ad:4e:7a:f6:56:66:98:5a:38:85:1d:b6:d8:0d:d5:81:e8: 56:ff:95:5f:ba:c7:2b:50:83:11:7d:57:6e:db:0d:09:72:48: 8a:25:d3:4d:ab:c1:b7:a6:f0:7a:c2:bd:f6:d8:67:ce:46:5c: b2:7c:fa:6a:13:2c:d7:01:aa:40:d9:b4:7e:da:d4:d3:70:a7: 1f:3e:11:e7:bf:c8:90:28:11:94:67:6b:92:25:7f:94:10:15: bc:03:84:67:87:2f:22:24:84:95:38:1d:45:24:f6:d6:a4:f5: 9a:3c:10:0b:a6:71:f8:76:c4:9f:e5:c6:20:ac:3f:1a:13:00: 0c:55:ae:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+1katdkLcOivDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2VhMTA0MWUtYWQzZS00YzBlLWI2MGYtODMxMjBmNGMzZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCCXhlGvmtm3r1zHaQkWaCa+dlSVCsEBSCZU 6h3lhjoodccyhkgNbCKsFRP5F3zjkpGD8ZL9xiWJIwjC1+BxEXwsUjutKRc0gxwX IShLxZBKDG/ZZGWjmXgOkNauCpU4tDAHIPXrwAew6rXzL6t51J/Ln1hmi99n6tRk Rj4zqLzK4fgbmqIwbo4ztxLPHHzHGX96xctUbv6/zu7+CmxP6QXEtKUUQDfxLNgL exM1rKq9Z5gGCp8EJNQXpb9cX5eTBPrpJokkXJAXaEAL88ZXHbKwFSAloQ9tQbzc XkZketVinJSNzfoAAsDwYMDCP06SavoCkprrJ3PnNFJIJ0weBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbXzi5S2L5K2Hprw13h0T5Z2aX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODkxYzc3YTItZWJmZi0z MTg5LThiOWEtNWU1ZWZmZTliNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn3TA1tyRVxEw6jDcSp5k6o5OIR32+uPniLaaSxnfK8TA4YSB6AEUAQ dFZhmhgUkxhctpMYwEVOlc6hut0o10GT4L+NMt4fJFTQnQ99bEpF7PYREMKQ1czF iVbdU+dYPq9mmps4tAmS/Slbfw1t/Rnh5qvw5e8jA3IdCRGPfo6tTnr2VmaYWjiF HbbYDdWB6Fb/lV+6xytQgxF9V27bDQlySIol002rwbem8HrCvfbYZ85GXLJ8+moT LNcBqkDZtH7a1NNwpx8+Eee/yJAoEZRna5Ilf5QQFbwDhGeHLyIkhJU4HUUk9tak 9Zo8EAumcfh2xJ/lxiCsPxoTAAxVrrk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:42 2025 by rpki-client