$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2707dd2-bde3-3ef1-b848-193229d6439a.roa File: a2707dd2-bde3-3ef1-b848-193229d6439a.roa (raw, json) Hash identifier: +y+jnsoAYQ1oDIhpuluXd3cwP4IraEi6+x/d0S/nIaA= Subject key identifier: A6:5D:9B:48:FA:C7:9E:94:41:8D:F4:9C:31:7C:60:72:D6:54:62:7C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF69CC1CEE299D5318500 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2707dd2-bde3-3ef1-b848-193229d6439a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397232 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f6:9c:c1:ce:e2:99:d5:31:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5f0f77dd-b154-4cc1-97c8-2dc893c7edfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:72:76:f9:c5:f0:7c:bc:5c:ca:7b:08:1e: 84:5e:9c:ca:01:84:06:de:0b:3a:0b:82:fb:37:20: e6:70:f3:77:a2:b7:ae:ea:39:ea:61:4e:dc:5d:35: cb:55:35:88:70:35:0c:5a:ee:18:f5:6c:9b:e6:4f: 83:92:15:69:8e:2f:9e:b7:7c:f7:77:76:5a:d1:19: 87:b6:d4:ba:31:8b:97:33:ce:75:9b:f3:28:36:06: 7c:5a:c5:c8:ba:a8:77:b9:ab:92:6e:3d:c3:d2:42: b4:95:2a:8c:06:fd:e2:7c:62:cc:64:1a:0f:a7:0f: 55:85:f0:f0:29:26:c8:8f:c8:1f:a1:ef:16:24:9e: a9:e2:27:a4:8a:10:5c:1e:a9:db:bc:20:79:61:a7: 39:77:6a:a4:c7:5f:6e:09:12:46:3a:f1:f4:17:30: ce:13:99:cb:1f:76:07:36:db:b2:2a:44:be:1f:31: 5b:fe:4f:46:d8:ff:9a:fd:b9:77:8c:03:a9:bd:80: 43:5a:88:35:71:fc:e9:fb:96:b7:9d:aa:73:df:8c: 7b:cc:c8:dc:a9:6a:75:05:73:31:cc:55:a7:6f:79: 99:4b:14:70:ee:41:ac:5e:75:6a:5d:c1:37:ed:ad: e2:ce:00:fa:ba:24:c9:88:1c:9f:89:b5:96:0c:ff: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5D:9B:48:FA:C7:9E:94:41:8D:F4:9C:31:7C:60:72:D6:54:62:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a2707dd2-bde3-3ef1-b848-193229d6439a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c1:a9:54:91:dd:bf:45:13:9b:71:52:c9:bc:e5:f1:c2:ee: 9b:b7:94:c6:b5:c9:6a:48:8f:84:42:83:94:0f:03:63:ec:be: 7e:dc:1d:d8:2a:8a:06:a5:a8:4c:a9:38:9e:e6:29:0f:00:36: 54:a4:74:73:31:cf:e8:9c:13:cd:e4:dc:c4:1c:0c:04:dc:2c: 2a:51:5c:1d:00:ec:17:bf:9f:c8:54:45:fb:ca:0f:7f:f4:6d: 94:ed:f5:2a:0b:18:ab:ed:c9:52:e2:44:74:d0:93:c8:85:53: cc:5e:3c:c1:22:01:6b:64:a0:0b:b6:2a:9e:98:68:44:a1:b5: bb:64:8b:e7:cd:f9:54:f8:de:76:cb:74:b1:ec:5a:7d:dd:f0: 32:6b:5c:b7:48:dc:5e:68:a4:3e:b0:44:76:1a:c5:65:6a:72: d8:cd:10:ef:15:58:34:7a:7b:6f:14:20:86:8a:59:a0:c5:9c: 8a:63:66:2c:8e:0d:4f:64:dd:37:21:92:36:32:52:f5:44:4b: 5d:29:0a:4d:b3:8d:f9:5f:ae:05:84:cc:fe:01:35:a9:88:40: 0b:64:38:95:49:d3:e9:97:d0:d7:82:f7:14:04:0c:41:aa:83: 38:ae:41:ad:12:76:5a:e9:a8:a1:2c:ed:7f:ae:35:06:fd:e7: 21:a6:7c:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/acwc7imdUxhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NWYwZjc3ZGQtYjE1NC00Y2MxLTk3YzgtMmRjODkzYzdlZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQZydvnF8Hy8XMp7CB6EXpzKAYQG3gs6C4L7 NyDmcPN3oreu6jnqYU7cXTXLVTWIcDUMWu4Y9Wyb5k+DkhVpji+et3z3d3Za0RmH ttS6MYuXM851m/MoNgZ8WsXIuqh3uauSbj3D0kK0lSqMBv3ifGLMZBoPpw9VhfDw KSbIj8gfoe8WJJ6p4iekihBcHqnbvCB5Yac5d2qkx19uCRJGOvH0FzDOE5nLH3YH NtuyKkS+HzFb/k9G2P+a/bl3jAOpvYBDWog1cfzp+5a3napz34x7zMjcqWp1BXMx zFWnb3mZSxRw7kGsXnVqXcE37a3izgD6uiTJiByfibWWDP8IOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZdm0j6x56UQY30nDF8YHLWVGJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTI3MDdkZDItYmRlMy0z ZWYxLWI4NDgtMTkzMjI5ZDY0MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDBqVSR3b9FE5txUsm85fHC7pu3lMa1yWpIj4RCg5QPA2Psvn7cHdgq igalqEypOJ7mKQ8ANlSkdHMxz+icE83k3MQcDATcLCpRXB0A7Be/n8hURfvKD3/0 bZTt9SoLGKvtyVLiRHTQk8iFU8xePMEiAWtkoAu2Kp6YaEShtbtki+fN+VT43nbL dLHsWn3d8DJrXLdI3F5opD6wRHYaxWVqctjNEO8VWDR6e28UIIaKWaDFnIpjZiyO DU9k3TchkjYyUvVES10pCk2zjflfrgWEzP4BNamIQAtkOJVJ0+mX0NeC9xQEDEGq gziuQa0SdlrpqKEs7X+uNQb95yGmfHI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:44 2025 by rpki-client