$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4aff538-699a-3458-add0-4598565490bf.roa File: a4aff538-699a-3458-add0-4598565490bf.roa (raw, json) Hash identifier: ehaei04oTP7tiZKN8Edh2ZnhrDqnI9wGzAMQ/VUbA5A= Subject key identifier: 2A:37:4C:D1:E6:A2:3E:91:BF:F9:05:BF:E1:29:45:E7:26:85:42:DC Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A4F05DDCE1A32078734644380 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4aff538-699a-3458-add0-4598565490bf.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 397225 IP address blocks: 156.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:dd:ce:1a:32:07:87:34:64:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=7e0a6bab-8b07-4652-af83-2baaedab8188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2f:1a:40:ef:52:e1:5f:87:ed:94:9a:78:57: 39:2c:be:2e:f9:98:c2:b6:ff:50:f7:d7:a5:45:43: a3:39:3e:9a:80:b6:eb:1a:91:b8:e2:85:ba:33:ae: 81:c2:ad:2a:32:73:dc:ef:84:1c:bc:04:6a:09:be: e3:ae:6b:42:99:1c:5f:10:83:4b:e1:d5:18:33:e1: 21:ea:37:4f:53:d7:54:eb:9c:b6:ae:22:50:85:55: fd:04:11:fc:44:36:aa:9a:27:9e:aa:c5:61:63:3b: 99:34:96:6f:21:2c:be:ee:92:27:af:39:81:40:8f: d4:d3:2b:90:3e:2d:84:a6:1d:27:9d:48:8f:b1:13: 4a:be:02:c5:19:d4:c3:5c:43:75:43:c2:44:0c:34: f0:51:d5:b8:89:ab:3c:66:5e:c7:28:52:3c:db:30: 5b:ae:be:22:ca:0f:90:a1:39:12:34:ce:e6:76:98: 0e:09:ba:f0:39:fa:8d:e9:e8:c0:b7:b3:51:0e:82: 89:f4:8a:78:45:c6:53:a4:9e:5e:00:96:4c:b7:75: 5c:c8:96:c9:3b:ca:5c:19:c5:8a:6f:d1:b0:1b:2b: e2:d8:ae:90:59:a1:48:34:8c:5d:da:7c:c0:6e:3d: af:47:69:9e:73:20:17:7c:23:8b:95:f8:7d:a2:34: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:37:4C:D1:E6:A2:3E:91:BF:F9:05:BF:E1:29:45:E7:26:85:42:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a4aff538-699a-3458-add0-4598565490bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:56:9e:b4:ab:2e:44:54:76:7b:bb:94:f2:6c:63:15:90:61: 99:b6:07:e2:16:36:be:09:99:da:74:92:2a:45:22:05:5a:a9: 16:dd:19:87:20:97:2f:8b:e1:9f:26:2d:8c:38:f1:db:22:0b: fa:fe:fd:5d:eb:63:37:5d:b6:7a:83:aa:59:25:e7:1c:74:55: 3f:8a:63:88:5a:15:60:35:be:a0:e1:2d:12:71:43:b9:47:a4: 2f:13:a5:76:92:58:d9:c8:39:a4:e4:29:2f:7f:4d:86:9e:05: a4:e6:0b:d6:ff:72:8a:3b:d5:47:aa:21:3b:1b:29:2b:ab:af: f5:af:7f:bd:78:18:21:40:b7:b6:2e:aa:36:8e:c7:2d:07:bf: c6:57:96:ac:a9:a2:17:40:38:f7:9e:87:c3:c2:9e:ab:c6:fb: dc:12:2e:62:f2:18:c1:72:d2:be:b7:af:0e:25:42:d7:b6:6e: 65:11:4b:46:81:61:02:e1:c1:35:3d:ad:d8:60:ad:bc:3f:aa: a0:db:08:b1:9a:21:6b:8d:39:22:ca:f5:41:54:24:dc:0d:ff: e1:bf:4e:83:34:34:18:e1:cb:74:a1:59:87:5a:02:7d:f9:39: cc:81:9f:c9:7e:a4:11:63:99:04:7f:b2:13:69:0d:93:8f:a0: 90:7c:da:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBd3OGjIHhzRkQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk N2UwYTZiYWItOGIwNy00NjUyLWFmODMtMmJhYWVkYWI4MTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+C8aQO9S4V+H7ZSaeFc5LL4u+ZjCtv9Q99el RUOjOT6agLbrGpG44oW6M66Bwq0qMnPc74QcvARqCb7jrmtCmRxfEINL4dUYM+Eh 6jdPU9dU65y2riJQhVX9BBH8RDaqmieeqsVhYzuZNJZvISy+7pInrzmBQI/U0yuQ Pi2Eph0nnUiPsRNKvgLFGdTDXEN1Q8JEDDTwUdW4ias8Zl7HKFI82zBbrr4iyg+Q oTkSNM7mdpgOCbrwOfqN6ejAt7NRDoKJ9Ip4RcZTpJ5eAJZMt3VcyJbJO8pcGcWK b9GwGyvi2K6QWaFINIxd2nzAbj2vR2mecyAXfCOLlfh9ojQRDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo3TNHmoj6Rv/kFv+EpRecmhULcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTRhZmY1MzgtNjk5YS0z NDU4LWFkZDAtNDU5ODU2NTQ5MGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxWnrSrLkRUdnu7lPJsYxWQYZm2B+IWNr4Jmdp0kipFIgVaqRbdGYcg ly+L4Z8mLYw48dsiC/r+/V3rYzddtnqDqlkl5xx0VT+KY4haFWA1vqDhLRJxQ7lH pC8TpXaSWNnIOaTkKS9/TYaeBaTmC9b/coo71UeqITsbKSurr/Wvf714GCFAt7Yu qjaOxy0Hv8ZXlqypohdAOPeeh8PCnqvG+9wSLmLyGMFy0r63rw4lQte2bmURS0aB YQLhwTU9rdhgrbw/qqDbCLGaIWuNOSLK9UFUJNwN/+G/ToM0NBjhy3ShWYdaAn35 OcyBn8l+pBFjmQR/shNpDZOPoJB82oI= -----END CERTIFICATE-----Generated at Mon Jun 30 19:34:00 2025 by rpki-client