$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ac3b8d4-e413-365d-896b-c29224a28cc6.roa File: 9ac3b8d4-e413-365d-896b-c29224a28cc6.roa (raw, json) Hash identifier: bngIL7G5blUPFqQixIyvXBhaV8Qtd7ZdUzOEoo9sMgc= Subject key identifier: 6D:B8:8E:4C:31:7F:0A:B4:4D:A3:83:53:F7:20:A8:10:C5:AE:9C:F1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF1B7F9F2FB96CB1F8580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ac3b8d4-e413-365d-896b-c29224a28cc6.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397229 IP address blocks: 156.154.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f1:b7:f9:f2:fb:96:cb:1f:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=1c2fcfad-8561-4031-b9b4-bf555b36e792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9e:32:ba:56:cf:57:d8:c1:64:f6:1c:ad:8e: e1:b4:fe:c4:8f:42:b5:db:b3:01:3a:9c:90:be:d9: ff:bf:41:80:7c:b2:61:6e:8e:6f:89:e3:3a:e1:99: 97:e7:64:ef:07:09:35:9e:ba:e4:56:d7:42:80:2a: 4d:40:dd:cb:33:c4:dd:11:4f:ec:86:ae:ca:5a:cb: d3:92:94:d3:22:9f:02:10:85:84:5e:e9:4f:fd:52: e9:bc:4f:7c:22:21:3c:c1:fd:e6:55:b1:65:c1:56: 07:d6:8d:52:2b:8a:49:c5:4e:29:93:14:a0:e6:8d: 8b:1a:e8:06:bf:6a:2b:56:6c:b2:61:97:7c:53:ad: 37:29:17:47:cf:87:d6:55:05:7b:39:66:1d:6d:fe: a3:5c:6a:fe:9a:f4:4f:d9:8b:ec:5a:89:52:08:14: 31:a1:ff:24:c6:d3:49:5b:76:ff:51:cf:fa:80:06: b0:b6:e3:5e:98:7a:12:55:4d:5f:b1:59:73:7c:80: 4f:7f:af:87:43:be:5e:3d:d0:ce:03:11:30:03:6c: ec:8d:00:dc:c7:a7:70:11:67:f1:ce:f2:f3:90:07: b7:ad:44:c6:37:f2:e3:a5:c0:8e:61:90:4f:4f:83: a5:3a:b0:79:5b:2c:8f:4f:9e:78:ec:d3:39:78:fe: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B8:8E:4C:31:7F:0A:B4:4D:A3:83:53:F7:20:A8:10:C5:AE:9C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ac3b8d4-e413-365d-896b-c29224a28cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ca:ab:d4:6a:fb:8e:11:3c:79:bf:71:e6:5b:ab:85:92:f6: af:05:2c:94:d9:61:9e:4a:85:ef:7d:01:bb:49:2e:b3:eb:c2: b0:b3:60:fa:07:70:7c:18:9f:14:c4:db:64:a1:f0:2b:7e:c8: bc:37:6e:39:08:ac:95:fd:2f:e8:4d:64:7e:c8:4b:67:cb:d2: 4d:be:74:00:3b:4a:e5:52:43:28:4f:ef:7b:a3:7f:4e:91:b3: f7:8e:b9:02:50:34:9f:57:f6:1e:89:bb:39:6f:9c:70:b6:17: 57:3e:93:12:56:7d:88:fc:57:f4:a7:69:83:17:16:1b:a6:2a: 48:e1:a5:8d:ec:28:b5:a8:25:10:c7:e0:83:1c:23:78:0f:c5: f6:c8:be:3f:bc:ac:37:22:5f:19:ed:29:cf:ac:2f:50:83:43: ac:bc:fd:d6:fa:d6:15:d8:6e:62:23:e9:be:d6:a9:01:f8:93: 7a:82:b7:a1:34:1d:50:1a:f0:65:ed:be:87:55:43:46:f6:3e: 44:9c:25:02:f1:04:08:3d:e3:9e:d1:31:64:76:b9:45:10:94: 64:f6:32:d6:21:6b:ff:10:2d:1d:ad:51:f6:1e:33:b3:cb:6b: e4:85:8d:e8:f3:6c:12:b5:d9:0a:2d:49:02:f0:cc:2b:58:4a: 44:f3:6d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/G3+fL7lssfhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MWMyZmNmYWQtODU2MS00MDMxLWI5YjQtYmY1NTViMzZlNzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p4yulbPV9jBZPYcrY7htP7Ej0K127MBOpyQ vtn/v0GAfLJhbo5vieM64ZmX52TvBwk1nrrkVtdCgCpNQN3LM8TdEU/shq7KWsvT kpTTIp8CEIWEXulP/VLpvE98IiE8wf3mVbFlwVYH1o1SK4pJxU4pkxSg5o2LGugG v2orVmyyYZd8U603KRdHz4fWVQV7OWYdbf6jXGr+mvRP2YvsWolSCBQxof8kxtNJ W3b/Uc/6gAawtuNemHoSVU1fsVlzfIBPf6+HQ75ePdDOAxEwA2zsjQDcx6dwEWfx zvLzkAe3rUTGN/LjpcCOYZBPT4OlOrB5WyyPT5547NM5eP5IbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG24jkwxfwq0TaODU/cgqBDFrpzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWFjM2I4ZDQtZTQxMy0z NjVkLTg5NmItYzI5MjI0YTI4Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHKq9Rq+44RPHm/ceZbq4WS9q8FLJTZYZ5Khe99AbtJLrPrwrCzYPoH cHwYnxTE22Sh8Ct+yLw3bjkIrJX9L+hNZH7IS2fL0k2+dAA7SuVSQyhP73ujf06R s/eOuQJQNJ9X9h6JuzlvnHC2F1c+kxJWfYj8V/SnaYMXFhumKkjhpY3sKLWoJRDH 4IMcI3gPxfbIvj+8rDciXxntKc+sL1CDQ6y8/db61hXYbmIj6b7WqQH4k3qCt6E0 HVAa8GXtvodVQ0b2PkScJQLxBAg9457RMWR2uUUQlGT2MtYha/8QLR2tUfYeM7PL a+SFjejzbBK12QotSQLwzCtYSkTzbVQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:42 2025 by rpki-client