$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8e25a9b-9258-3186-91b6-b88483f658a1.roa File: a8e25a9b-9258-3186-91b6-b88483f658a1.roa (raw, json) Hash identifier: ML8zr4TK07n0vCTJeWiAGlWrbRJdcu76fDcuErtWTMc= Subject key identifier: 21:BD:4E:26:C5:AF:B9:CE:29:00:68:07:9C:E5:30:E2:EF:12:66:0C Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BE5752D8EB93570B469C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8e25a9b-9258-3186-91b6-b88483f658a1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 19905 IP address blocks: 156.154.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:e5:75:2d:8e:b9:35:70:b4:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=a3bf9b80-a811-4811-99f7-28c5bce26d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:ba:95:93:2c:93:10:d2:88:42:b5:04:bb: d1:85:01:cb:f3:a3:51:fc:4f:65:22:b5:94:97:c4: 7b:eb:28:29:ca:06:7f:7d:37:93:92:f3:1d:15:9a: 1a:9d:c5:a5:60:73:a6:56:d5:41:92:27:08:c0:2d: cf:a8:32:eb:99:f5:e3:c7:17:8d:35:69:11:ce:79: ed:b2:e9:4f:ee:31:0c:90:c0:3f:d1:0b:dd:6d:e5: 1a:7b:27:f2:d3:7f:59:72:10:a7:d6:2e:78:eb:25: e2:f0:83:f3:d7:92:bd:b3:f7:da:67:6a:b7:c2:19: c3:a1:19:65:8f:d5:b4:96:77:84:1e:06:f3:69:4d: 91:87:9b:6e:3f:aa:df:4e:2c:7f:8a:4e:2d:8e:a0: 98:74:06:3f:4f:5a:09:f0:7a:59:d2:a4:00:df:79: 00:ed:25:0f:ec:78:dd:74:9c:c7:c1:1c:54:3b:aa: 6c:5b:26:27:bf:de:e7:3e:6f:b3:ae:b0:fa:d3:c1: 96:4e:0d:9f:bb:c0:ec:f7:07:c7:63:0a:29:69:2a: b8:83:74:74:95:a8:5d:3b:7f:eb:7b:eb:8a:22:d2: ea:79:99:ae:16:d0:a6:8a:7f:27:9a:ae:2f:9b:72: 34:54:62:a3:2e:fa:8f:04:29:56:5b:91:55:6d:d0: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:4E:26:C5:AF:B9:CE:29:00:68:07:9C:E5:30:E2:EF:12:66:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a8e25a9b-9258-3186-91b6-b88483f658a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c5:89:39:0a:d8:15:33:72:f0:08:59:47:16:df:04:8a:ec: a5:87:96:38:69:0c:b2:e4:1a:48:6e:a4:75:d0:0e:86:3e:e5: 37:5b:a5:25:0e:08:a2:da:c4:ee:94:97:6f:c2:62:d0:11:33: 46:61:5e:3c:c6:c3:dd:9d:bf:c1:5d:34:82:77:01:e5:a8:22: c9:e0:f4:98:f0:f7:a2:69:87:b5:56:c0:f0:db:59:dc:47:96: a3:9e:4b:93:50:85:b0:00:c9:c6:52:cd:95:02:31:c1:83:f6: 1a:03:02:82:25:39:d3:cc:00:71:fe:48:a8:04:6f:40:63:af: 57:d6:6a:ee:a2:3f:a2:ba:2c:b5:62:52:39:b6:90:03:d8:c2: 9b:66:01:94:db:b1:b5:b0:ec:b3:ce:c0:a9:2b:56:7a:47:63: 5a:e1:52:6e:15:d6:00:b1:68:4d:58:73:22:3e:d5:ab:c4:3b: c8:7c:f7:0f:3f:11:38:9c:9e:da:92:a9:bd:0c:bb:04:8a:a3: 76:a8:82:46:6c:38:31:c2:71:30:84:c8:85:21:e8:37:e6:0d: 34:b9:fd:27:9a:a8:e8:cf:2a:0b:a5:44:24:1d:71:22:4d:64: 55:d0:f9:5e:73:3e:2d:92:40:b4:57:df:2f:f6:90:87:65:d7: ff:80:58:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+V1LY65NXC0acAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YTNiZjliODAtYTgxMS00ODExLTk5ZjctMjhjNWJjZTI2ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3W6lZMskxDSiEK1BLvRhQHL86NR/E9lIrWU l8R76ygpygZ/fTeTkvMdFZoancWlYHOmVtVBkicIwC3PqDLrmfXjxxeNNWkRznnt sulP7jEMkMA/0QvdbeUaeyfy039ZchCn1i546yXi8IPz15K9s/faZ2q3whnDoRll j9W0lneEHgbzaU2Rh5tuP6rfTix/ik4tjqCYdAY/T1oJ8HpZ0qQA33kA7SUP7Hjd dJzHwRxUO6psWyYnv97nPm+zrrD608GWTg2fu8Ds9wfHYwopaSq4g3R0lahdO3/r e+uKItLqeZmuFtCmin8nmq4vm3I0VGKjLvqPBClWW5FVbdDkkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG9TibFr7nOKQBoB5zlMOLvEmYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYThlMjVhOWItOTI1OC0z MTg2LTkxYjYtYjg4NDgzZjY1OGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvFiTkK2BUzcvAIWUcW3wSK7KWHljhpDLLkGkhupHXQDoY+5TdbpSUO CKLaxO6Ul2/CYtARM0ZhXjzGw92dv8FdNIJ3AeWoIsng9Jjw96Jph7VWwPDbWdxH lqOeS5NQhbAAycZSzZUCMcGD9hoDAoIlOdPMAHH+SKgEb0Bjr1fWau6iP6K6LLVi Ujm2kAPYwptmAZTbsbWw7LPOwKkrVnpHY1rhUm4V1gCxaE1YcyI+1avEO8h89w8/ ETicntqSqb0MuwSKo3aogkZsODHCcTCEyIUh6DfmDTS5/SeaqOjPKgulRCQdcSJN ZFXQ+V5zPi2SQLRX3y/2kIdl1/+AWFA= -----END CERTIFICATE-----Generated at Sat Aug 23 06:50:12 2025 by rpki-client