$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aee38745-4e6f-333a-b650-a6b13ab60e5e.roa File: aee38745-4e6f-333a-b650-a6b13ab60e5e.roa (raw, json) Hash identifier: +CZsHCNQqjgNFfewnQZV9uNcX3pizma+AL0bGDrN3M8= Subject key identifier: 1D:28:3D:53:3F:DF:89:B7:83:F5:32:79:2A:84:3F:B6:B1:B4:C3:75 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BEABCACB21F5ABB5BF200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aee38745-4e6f-333a-b650-a6b13ab60e5e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397225 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ea:bc:ac:b2:1f:5a:bb:5b:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=172468ff-51f9-4c75-a18f-9f338ebc965a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e9:89:b2:08:48:34:f3:c7:92:75:52:26:e4: ba:e1:40:5a:d6:ca:5b:df:85:1f:cc:d6:05:75:66: 4e:81:d3:55:f3:1d:01:9c:15:62:dd:18:40:48:78: 05:49:e5:84:f0:cd:4c:94:ea:08:9c:df:01:33:d0: 5d:66:29:82:ed:b4:e4:38:00:70:73:33:d5:1f:0d: 6f:1a:5c:09:30:3f:de:18:5c:72:9f:06:ec:32:a4: 09:b1:15:7f:9c:63:27:d8:c1:bc:28:83:bc:3f:f6: 72:94:df:3c:76:d2:7c:be:cc:a8:06:3d:a2:93:fc: 0d:5c:c9:9e:45:13:f0:bd:1a:9a:41:e0:4d:e8:73: db:48:7b:1e:45:38:d3:a3:2f:e2:d4:54:1e:97:3f: e2:61:ef:2e:07:15:21:02:44:e3:fa:8b:a3:ba:d0: be:7c:11:52:6c:86:1c:69:dd:a5:3e:e4:77:41:bd: ae:ea:b3:5f:0e:f8:fb:12:e8:31:61:03:ec:70:28: 30:71:f1:fc:b5:25:f6:5b:9a:f0:78:31:f4:46:6b: cb:70:98:d6:35:2f:44:15:c7:08:56:2b:b5:ad:e2: cf:fe:df:9d:33:4a:90:3d:13:38:3c:26:da:4f:e6: 93:d5:c7:f8:fc:be:0e:ab:d3:17:f2:f1:3b:3a:d8: 24:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:28:3D:53:3F:DF:89:B7:83:F5:32:79:2A:84:3F:B6:B1:B4:C3:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aee38745-4e6f-333a-b650-a6b13ab60e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3e:bc:d8:0d:4c:02:1d:31:b3:b0:ca:16:0b:13:07:f9:53: 02:b4:a0:62:98:b7:89:1c:39:a0:18:53:c4:22:fb:9c:8f:c2: 04:bd:57:e5:a8:fb:dc:c3:75:2d:01:f4:8e:d5:1f:5d:dd:6a: 30:b5:37:8b:7e:a8:ab:0d:5e:c3:54:6f:cd:59:1c:c1:2b:d6: da:4b:d0:3c:8e:e8:10:da:a5:02:37:7e:cf:52:36:c1:52:1e: bf:72:b4:cf:da:89:65:c1:6e:af:fd:1e:66:f4:02:2a:b5:9e: 61:ef:77:93:0c:8c:fd:a4:bd:77:b6:49:53:d6:a3:20:0d:d5: 2d:15:fd:ee:04:a1:cc:42:ba:19:e3:06:85:a9:7e:6a:e4:18: 87:f9:77:4a:2b:b3:eb:1e:7a:73:5e:92:35:84:84:4a:ff:67: e3:94:66:9e:3e:c9:3f:33:f7:98:64:c8:d8:98:d9:6a:ac:5d: 4f:73:31:4e:86:88:5b:1d:53:6a:9c:71:45:bd:ec:11:7d:61: 37:af:76:62:07:32:51:fb:61:c4:c4:7a:d1:3e:52:27:f5:b6: 75:e8:43:12:94:ce:29:71:5d:41:96:7d:80:ef:ff:c6:5b:59: ad:ea:86:06:cb:fd:06:7a:53:63:02:40:fa:29:7f:f3:d8:09: e6:9c:3b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+q8rLIfWrtb8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTcyNDY4ZmYtNTFmOS00Yzc1LWExOGYtOWYzMzhlYmM5NjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOmJsghINPPHknVSJuS64UBa1spb34UfzNYF dWZOgdNV8x0BnBVi3RhASHgFSeWE8M1MlOoInN8BM9BdZimC7bTkOABwczPVHw1v GlwJMD/eGFxynwbsMqQJsRV/nGMn2MG8KIO8P/ZylN88dtJ8vsyoBj2ik/wNXMme RRPwvRqaQeBN6HPbSHseRTjToy/i1FQelz/iYe8uBxUhAkTj+oujutC+fBFSbIYc ad2lPuR3Qb2u6rNfDvj7EugxYQPscCgwcfH8tSX2W5rweDH0RmvLcJjWNS9EFccI Viu1reLP/t+dM0qQPRM4PCbaT+aT1cf4/L4Oq9MX8vE7OtgkWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0oPVM/34m3g/UyeSqEP7axtMN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWVlMzg3NDUtNGU2Zi0z MzNhLWI2NTAtYTZiMTNhYjYwZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM+vNgNTAIdMbOwyhYLEwf5UwK0oGKYt4kcOaAYU8Qi+5yPwgS9V+Wo +9zDdS0B9I7VH13dajC1N4t+qKsNXsNUb81ZHMEr1tpL0DyO6BDapQI3fs9SNsFS Hr9ytM/aiWXBbq/9Hmb0Aiq1nmHvd5MMjP2kvXe2SVPWoyAN1S0V/e4EocxCuhnj BoWpfmrkGIf5d0ors+seenNekjWEhEr/Z+OUZp4+yT8z95hkyNiY2WqsXU9zMU6G iFsdU2qccUW97BF9YTevdmIHMlH7YcTEetE+Uif1tnXoQxKUzilxXUGWfYDv/8Zb Wa3qhgbL/QZ6U2MCQPopf/PYCeacOwY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:55 2025 by rpki-client