$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b41f483d-dd97-38f4-88da-3301a8ee0520.roa File: b41f483d-dd97-38f4-88da-3301a8ee0520.roa (raw, json) Hash identifier: oIeDQPLnd3lEXrRopcbkQ7gmo3wigNJ/h7jDZpo+KpE= Subject key identifier: C8:EC:40:D3:CF:35:41:8C:53:D0:98:AA:1E:09:86:D5:63:28:F2:74 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A3B7B3171BD22D63137AD0600 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b41f483d-dd97-38f4-88da-3301a8ee0520.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 397243 IP address blocks: 156.154.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:31:71:bd:22:d6:31:37:ad:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=6a734ebf-3c93-4372-9420-c52acc40dbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:3f:ab:60:b1:46:28:ff:52:9a:60:75:0c: 08:d4:a2:ba:8a:2a:f7:95:d6:cc:af:0f:83:6c:67: b4:1d:3b:d5:8c:7b:97:e1:61:01:34:34:01:7d:4a: 7e:53:aa:3c:00:b8:45:bd:7f:04:cd:18:dd:84:a5: e4:35:79:c2:76:a0:d0:4c:44:06:3d:d1:de:52:2c: 1c:8e:20:f6:6a:f4:0d:81:c7:51:64:28:e2:83:fe: 88:dd:70:8f:d5:01:00:eb:d7:44:f8:51:05:e9:30: 98:63:13:69:e3:b2:cf:39:60:12:11:1f:f1:59:bf: 98:b8:98:c3:bd:63:8e:3c:40:1f:2a:cb:d0:e6:5b: b2:39:d3:9c:78:74:82:75:95:81:58:c0:52:31:24: 9a:13:53:30:c8:7e:dc:53:11:63:0a:90:3f:bd:57: 7c:97:20:fc:c5:4f:48:49:3c:62:54:5e:de:40:97: 12:8b:94:8c:be:d8:a5:ee:40:1f:a8:88:48:cf:5a: dc:4f:ad:4e:f7:2b:6a:7d:c3:e2:03:72:ee:54:2e: 27:b5:c5:f2:3f:bd:28:cb:b6:e5:75:d5:ab:26:28: 4e:67:8a:07:5c:d8:45:76:b9:89:14:7f:e7:46:91: 11:d0:2f:05:e4:97:50:be:03:da:29:4f:ec:89:5d: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EC:40:D3:CF:35:41:8C:53:D0:98:AA:1E:09:86:D5:63:28:F2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b41f483d-dd97-38f4-88da-3301a8ee0520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:30:14:e0:dc:2d:ab:d1:bc:9d:05:e5:98:61:38:13:12:56: d6:df:1e:99:78:64:88:ce:74:3f:e2:15:c2:0a:ba:f1:6e:98: c7:78:9c:0a:43:48:fe:f9:62:cf:35:06:e2:32:5a:f8:c6:b9: db:77:13:42:37:66:3a:84:27:db:c8:78:1c:a6:03:24:15:30: d0:d5:a2:76:e3:d7:eb:6d:ac:28:16:0a:ca:7f:98:5e:39:c3: 84:39:18:6f:c0:dd:d6:65:ea:86:c6:34:34:71:85:dd:4b:16: 62:e1:56:87:3c:d1:f8:e2:60:15:00:58:71:2e:1d:af:01:59: cd:3d:05:de:37:57:dd:be:a4:81:f2:c4:ba:6a:9e:8e:ea:97: e8:05:36:a2:93:bc:f5:09:c2:81:ed:5d:a9:ed:21:d7:25:28: 3d:38:ec:4e:9f:b6:78:00:dc:85:7b:f1:67:4d:63:c0:a7:fa: 0d:d7:e3:cc:e7:ce:a8:df:f6:9a:9a:a0:14:27:c2:f3:26:94: 2b:c0:74:62:f5:e2:4e:4d:d1:c3:61:8f:8b:4d:1f:da:02:df: de:61:53:8c:a1:30:db:4a:66:8f:ca:a7:01:1d:59:a0:5e:14: 4b:43:bb:81:2b:dd:f8:cf:21:61:78:d7:05:c5:9c:89:7c:fd: 8e:8a:03:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ezFxvSLWMTetBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NmE3MzRlYmYtM2M5My00MzcyLTk0MjAtYzUyYWNjNDBkYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngs/q2CxRij/UppgdQwI1KK6iir3ldbMrw+D bGe0HTvVjHuX4WEBNDQBfUp+U6o8ALhFvX8EzRjdhKXkNXnCdqDQTEQGPdHeUiwc jiD2avQNgcdRZCjig/6I3XCP1QEA69dE+FEF6TCYYxNp47LPOWASER/xWb+YuJjD vWOOPEAfKsvQ5luyOdOceHSCdZWBWMBSMSSaE1MwyH7cUxFjCpA/vVd8lyD8xU9I STxiVF7eQJcSi5SMvtil7kAfqIhIz1rcT61O9ytqfcPiA3LuVC4ntcXyP70oy7bl ddWrJihOZ4oHXNhFdrmJFH/nRpER0C8F5JdQvgPaKU/siV394QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjsQNPPNUGMU9CYqh4JhtVjKPJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjQxZjQ4M2QtZGQ5Ny0z OGY0LTg4ZGEtMzMwMWE4ZWUwNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkwFODcLavRvJ0F5ZhhOBMSVtbfHpl4ZIjOdD/iFcIKuvFumMd4nApD SP75Ys81BuIyWvjGudt3E0I3ZjqEJ9vIeBymAyQVMNDVonbj1+ttrCgWCsp/mF45 w4Q5GG/A3dZl6obGNDRxhd1LFmLhVoc80fjiYBUAWHEuHa8BWc09Bd43V92+pIHy xLpqno7ql+gFNqKTvPUJwoHtXantIdclKD047E6ftngA3IV78WdNY8Cn+g3X48zn zqjf9pqaoBQnwvMmlCvAdGL14k5N0cNhj4tNH9oC395hU4yhMNtKZo/KpwEdWaBe FEtDu4Er3fjPIWF41wXFnIl8/Y6KAzI= -----END CERTIFICATE-----Generated at Mon Jun 30 09:44:57 2025 by rpki-client