$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9732fe5-4257-3ad2-8758-81a220295a3e.roa File: b9732fe5-4257-3ad2-8758-81a220295a3e.roa (raw, json) Hash identifier: +MiQtLXd5vrtTVB270UaT3rX5hdanceqN5W9bC1fPvw= Subject key identifier: 11:0B:64:5C:77:83:7B:29:E5:B0:FD:12:F1:B3:A4:7A:0F:EC:0F:6A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BFDFBD276E97B682A2680 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9732fe5-4257-3ad2-8758-81a220295a3e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397239 IP address blocks: 156.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:fd:fb:d2:76:e9:7b:68:2a:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5be5db65-a4fe-453c-a3a3-7235fe1d3ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:ea:40:7d:b7:39:32:06:d1:ee:11:d1:ba: a7:07:42:ba:c6:de:fb:99:a3:64:13:c2:ff:c8:5f: 5c:e3:0f:37:d9:01:a6:d6:6e:78:d0:26:94:fc:e8: 5b:38:89:d4:cc:6a:79:71:9f:e3:f5:b5:0e:cb:96: 5d:35:16:a1:59:18:20:d0:72:70:9d:c6:3f:00:b0: 00:a7:5a:2e:bf:e9:40:11:5b:54:00:67:3d:49:a1: e1:c8:e7:55:79:00:b3:90:67:c2:86:36:38:fc:b0: e6:1c:f6:41:c9:3a:f4:9b:e5:f4:73:98:7c:d7:ea: df:e4:72:ce:5c:62:6e:3d:e4:25:40:14:dd:75:25: 44:62:89:33:b5:33:39:a6:d5:98:f9:ec:42:e5:d5: 31:65:6d:eb:5a:0c:55:7d:c5:da:96:d9:58:00:fd: f4:4a:3a:4b:12:2f:5a:83:50:3b:aa:65:6e:be:1a: 23:b3:14:a4:10:42:5d:c5:7d:7e:6c:65:c9:54:31: 32:c3:cc:46:d5:dc:77:c2:ad:69:a3:12:50:3d:ba: 2c:e8:65:9a:39:46:fd:e6:e7:36:6b:d6:62:85:b1: 1e:62:0f:b8:d6:c3:5b:de:11:36:93:17:75:99:7e: 47:4a:45:ab:8a:e0:11:98:d6:01:2a:d9:39:c1:3e: dd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0B:64:5C:77:83:7B:29:E5:B0:FD:12:F1:B3:A4:7A:0F:EC:0F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b9732fe5-4257-3ad2-8758-81a220295a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:59:db:8f:69:b1:d7:57:1b:b1:8d:37:de:42:29:0d:84:c3: 7c:dd:8b:ac:a1:02:6e:04:8b:f9:4e:b5:9c:b3:2c:89:05:c1: 9f:a6:42:ae:43:75:dc:d8:fa:96:d9:fd:41:56:dd:a6:d9:a0: 18:51:a0:43:8d:25:84:99:01:dd:28:ae:ea:3a:d6:3a:4f:93: 7a:05:30:a5:92:80:c7:17:3b:e0:b7:e3:28:ef:3c:87:e2:c4: f6:cf:9e:8b:db:34:41:5f:5c:d9:c9:79:eb:f8:c1:cb:06:7f: 6b:c4:d2:c0:2b:48:3e:8d:ae:ba:1a:16:0b:09:12:53:35:a0: e8:9a:3d:99:46:37:75:a7:81:96:88:57:06:24:eb:0b:33:3a: e2:1a:12:bf:bb:6a:1b:50:01:d3:95:5b:48:31:4f:e7:79:c3: 30:65:d7:b3:86:c2:b3:3d:61:17:ee:9e:10:b1:3b:6e:e7:0d: 27:90:61:5f:a1:e0:a4:b6:65:bf:7b:6d:3d:65:ea:40:bd:3f: b4:0f:be:ed:99:e8:fa:db:48:7d:f4:89:1b:0f:e4:e5:59:d6: 53:e4:cd:3c:7f:20:52:bd:39:82:13:04:d0:9e:e9:91:e9:1e: 85:0e:dd:d9:35:f0:81:93:b8:ea:76:02:3e:69:72:ef:4a:ac: a8:a3:ea:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/370nbpe2gqJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NWJlNWRiNjUtYTRmZS00NTNjLWEzYTMtNzIzNWZlMWQzYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuanqQH23OTIG0e4R0bqnB0K6xt77maNkE8L/ yF9c4w832QGm1m540CaU/OhbOInUzGp5cZ/j9bUOy5ZdNRahWRgg0HJwncY/ALAA p1ouv+lAEVtUAGc9SaHhyOdVeQCzkGfChjY4/LDmHPZByTr0m+X0c5h81+rf5HLO XGJuPeQlQBTddSVEYokztTM5ptWY+exC5dUxZW3rWgxVfcXaltlYAP30SjpLEi9a g1A7qmVuvhojsxSkEEJdxX1+bGXJVDEyw8xG1dx3wq1poxJQPbos6GWaOUb95uc2 a9ZihbEeYg+41sNb3hE2kxd1mX5HSkWriuARmNYBKtk5wT7dwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBELZFx3g3sp5bD9EvGzpHoP7A9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjk3MzJmZTUtNDI1Ny0z YWQyLTg3NTgtODFhMjIwMjk1YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBZ249psddXG7GNN95CKQ2Ew3zdi6yhAm4Ei/lOtZyzLIkFwZ+mQq5D ddzY+pbZ/UFW3abZoBhRoEONJYSZAd0oruo61jpPk3oFMKWSgMcXO+C34yjvPIfi xPbPnovbNEFfXNnJeev4wcsGf2vE0sArSD6NrroaFgsJElM1oOiaPZlGN3WngZaI VwYk6wszOuIaEr+7ahtQAdOVW0gxT+d5wzBl17OGwrM9YRfunhCxO27nDSeQYV+h 4KS2Zb97bT1l6kC9P7QPvu2Z6PrbSH30iRsP5OVZ1lPkzTx/IFK9OYITBNCe6ZHp HoUO3dk18IGTuOp2Aj5pcu9KrKij6uA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:28 2025 by rpki-client