$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/956392c6-5e31-3c4c-beab-1c6d7f3199b3.roa File: 956392c6-5e31-3c4c-beab-1c6d7f3199b3.roa (raw, json) Hash identifier: h/cbnhkXW6hmZAu7oyzpM9y3MZYwgkWH5G/zkhFpl00= Subject key identifier: 09:0D:12:A0:F3:3F:A6:F0:E6:BE:79:96:60:03:5D:7A:46:4E:0E:16 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BFA50DF20B8AEF58C6EA0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/956392c6-5e31-3c4c-beab-1c6d7f3199b3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397219 IP address blocks: 156.154.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:fa:50:df:20:b8:ae:f5:8c:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=c59c85b7-05e0-42d2-baff-a0b7a05f4551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:ad:36:8f:f6:d3:b6:2f:aa:75:ad:7e:b9: b2:f0:1e:04:93:20:52:7d:8b:86:d9:40:44:38:44: 75:4d:97:14:d5:b8:fe:0f:27:c2:23:73:df:76:93: df:07:f3:a8:82:a1:19:b1:30:5f:01:fa:09:ec:d3: 33:9b:c7:cf:e2:25:9e:a5:d5:32:90:74:8c:cc:c8: 34:86:fb:8c:42:1c:7a:02:19:c1:13:60:f9:11:6d: de:d4:08:21:d5:7c:55:f5:f6:5c:da:e9:38:98:ac: c7:1c:76:55:6b:e9:98:5d:b8:b4:7b:d0:75:ab:61: 6c:b4:2e:49:af:bc:0b:63:49:e5:ba:39:ad:ce:6a: 00:e7:7c:c5:d6:f3:69:39:d2:7c:19:4f:73:80:33: 69:82:06:5a:83:34:f3:78:b9:73:3d:c9:33:d0:d2: 12:3e:9b:69:ec:ce:e7:12:4a:06:d0:e1:da:f6:98: 9c:6c:5c:d7:14:0a:48:ab:c9:14:bd:d3:9b:fb:fc: 68:8c:d1:a7:71:ba:5d:1b:52:7a:e1:c8:ab:4c:34: 10:1e:f9:38:be:6d:11:d5:7a:ea:59:7d:6d:55:ea: 8f:87:ce:86:15:bf:61:9c:6e:ba:4e:0d:26:01:6f: 43:78:dd:e0:ca:28:34:8a:a0:7f:ca:32:62:70:f4: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:12:A0:F3:3F:A6:F0:E6:BE:79:96:60:03:5D:7A:46:4E:0E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/956392c6-5e31-3c4c-beab-1c6d7f3199b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ed:7a:57:96:1a:ca:19:0e:7e:f1:2d:ce:ed:83:4d:cb:8d: 6f:63:2f:d5:f6:7a:ed:ea:52:59:a7:f9:33:8d:df:9f:c0:dc: f2:2e:06:7f:79:17:23:03:e4:8d:73:e4:05:d3:9f:31:11:64: 59:9f:9c:15:ff:2a:53:70:4a:df:6d:7a:2c:29:4c:ef:19:98: 8d:da:d3:55:b6:7a:eb:e1:f1:c9:cd:fd:d6:84:4a:eb:08:68: 99:9f:85:8a:c7:cd:91:aa:a5:28:78:0d:d8:df:d0:b6:f4:02: bd:63:db:5f:38:fd:e8:96:45:d6:4c:5d:60:0a:0a:9e:8d:04: a3:02:45:2d:a1:74:9d:6b:dc:2d:16:55:48:8e:63:3d:60:c7: ac:12:47:91:5e:fe:58:a3:cd:35:98:40:33:48:1c:59:07:c9: 47:7c:66:09:39:28:72:41:cb:29:38:6b:c7:ba:e2:76:b2:04: a2:75:fa:38:56:a4:df:d7:6b:17:e5:2a:02:7a:ee:c9:2a:de: c9:a4:3e:01:c8:80:ef:f0:ee:af:82:01:76:e3:ee:c7:33:8c: 30:13:a0:ef:93:ad:1e:21:9a:86:2f:2c:c1:80:99:16:57:66: b0:f2:10:88:32:8d:1c:69:61:8b:68:a0:3b:6f:dd:16:c4:c0: f8:b5:14:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/pQ3yC4rvWMbqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YzU5Yzg1YjctMDVlMC00MmQyLWJhZmYtYTBiN2EwNWY0NTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBitNo/207YvqnWtfrmy8B4EkyBSfYuG2UBE OER1TZcU1bj+DyfCI3PfdpPfB/OogqEZsTBfAfoJ7NMzm8fP4iWepdUykHSMzMg0 hvuMQhx6AhnBE2D5EW3e1Agh1XxV9fZc2uk4mKzHHHZVa+mYXbi0e9B1q2FstC5J r7wLY0nlujmtzmoA53zF1vNpOdJ8GU9zgDNpggZagzTzeLlzPckz0NISPptp7M7n EkoG0OHa9picbFzXFApIq8kUvdOb+/xojNGncbpdG1J64cirTDQQHvk4vm0R1Xrq WX1tVeqPh86GFb9hnG66Tg0mAW9DeN3gyig0iqB/yjJicPTp9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkNEqDzP6bw5r55lmADXXpGTg4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTU2MzkyYzYtNWUzMS0z YzRjLWJlYWItMWM2ZDdmMzE5OWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDteleWGsoZDn7xLc7tg03LjW9jL9X2eu3qUlmn+TON35/A3PIuBn95 FyMD5I1z5AXTnzERZFmfnBX/KlNwSt9teiwpTO8ZmI3a01W2euvh8cnN/daESusI aJmfhYrHzZGqpSh4Ddjf0Lb0Ar1j2184/eiWRdZMXWAKCp6NBKMCRS2hdJ1r3C0W VUiOYz1gx6wSR5Fe/lijzTWYQDNIHFkHyUd8Zgk5KHJByyk4a8e64nayBKJ1+jhW pN/XaxflKgJ67skq3smkPgHIgO/w7q+CAXbj7sczjDAToO+TrR4hmoYvLMGAmRZX ZrDyEIgyjRxpYYtooDtv3RbEwPi1FCc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:27 2025 by rpki-client