$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa File: c2286d69-6348-360c-8fa0-537662a778e3.roa (raw, json) Hash identifier: YgWudkOiH8ukl7a6O/jeg28Dt+D5oAdSneJczP/d6yo= Subject key identifier: A5:21:93:30:95:8A:15:94:39:D9:33:0B:0F:AD:14:29:A5:3A:D0:E4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A4F05DC0743F09176D0DCBA00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 397227 IP address blocks: 156.154.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:dc:07:43:f0:91:76:d0:dc:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=546cb7ab-9630-40e4-a841-3283a06a4fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b3:f3:a4:a6:ad:da:9f:a3:0d:80:13:05:c1: 8a:67:97:4a:20:77:04:7f:cf:34:37:fc:17:7b:84: 9e:c0:a8:8b:16:08:34:6f:3c:92:2b:0a:bb:23:33: 23:ee:37:a6:e4:c2:fb:9e:53:79:69:cb:c0:4a:cf: ab:63:b1:9d:65:89:45:d0:d3:da:b9:86:92:9e:ef: 10:bc:e8:44:c2:56:4d:3e:31:fe:51:e5:70:59:31: de:17:c1:ad:93:b1:73:c8:e4:92:56:07:d2:67:34: fc:a4:82:b7:d9:2f:37:16:63:8e:91:ad:e9:76:9f: 9c:63:00:ba:81:70:04:d2:c6:ec:96:9d:c2:f8:92: 91:aa:8a:23:47:8e:14:89:29:26:d8:a7:6e:c9:a7: cb:fc:c1:fb:29:13:7c:84:ba:39:85:d2:52:e7:2a: b8:66:f0:86:4a:42:f4:08:3a:73:7c:69:d3:4c:cb: 61:33:f1:eb:5c:6f:85:e1:80:3f:d8:b9:5c:17:97: 18:19:86:84:89:89:37:89:bb:03:d0:f4:46:70:86: 23:92:5e:a7:d9:0a:5f:8d:79:03:b8:6e:15:8a:fe: 80:21:5f:5b:90:77:d7:2a:b8:65:10:5c:00:61:c7: f0:79:f0:9a:d8:f6:59:23:85:27:d6:4d:38:da:2e: ee:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:21:93:30:95:8A:15:94:39:D9:33:0B:0F:AD:14:29:A5:3A:D0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c2286d69-6348-360c-8fa0-537662a778e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a7:56:4e:bd:9d:4d:15:8b:da:52:fe:cd:7f:d0:a3:2f:b0: f0:1d:8d:06:dd:9d:2b:40:e0:2f:10:ab:67:e6:e8:31:8c:6a: 5b:d5:52:52:a2:6d:5c:53:fd:08:b3:83:a1:5a:c2:aa:50:95: ec:9f:2a:f5:21:46:69:1d:36:fe:55:1d:89:cf:8f:f3:ee:84: 79:ef:87:1f:b9:b9:2d:84:0b:76:e3:a6:ae:78:3a:17:d4:b0: e9:4d:e2:ab:b6:22:c2:20:63:59:72:19:f1:a4:c7:9a:93:1d: 8b:7f:7f:15:87:b6:3c:4f:c6:6d:76:ab:f9:4f:df:13:c6:67: 83:b0:75:31:fd:a0:2b:f4:58:3e:85:5a:02:48:e9:53:47:bf: b2:51:6a:cc:4d:74:3a:24:a1:e3:77:ce:1d:54:9b:bb:d7:e8: 45:ae:39:e0:ec:84:df:f2:b3:89:e1:8f:06:29:17:c9:a6:14: 9a:96:5c:e1:36:0d:17:24:16:62:f0:74:4c:60:19:71:9a:4d: 92:a9:66:f2:23:ed:57:d4:4a:a4:6d:1c:80:d2:f6:5c:8f:4b: 80:29:d8:de:6c:fa:e8:f3:40:c9:c4:28:8a:0c:81:8b:c7:e7: bd:9d:bc:0f:61:c3:7c:dd:7c:f0:92:79:03:2b:23:34:a2:ca: f8:0c:6f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBdwHQ/CRdtDcugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk NTQ2Y2I3YWItOTYzMC00MGU0LWE4NDEtMzI4M2EwNmE0ZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrPzpKat2p+jDYATBcGKZ5dKIHcEf880N/wX e4SewKiLFgg0bzySKwq7IzMj7jem5ML7nlN5acvASs+rY7GdZYlF0NPauYaSnu8Q vOhEwlZNPjH+UeVwWTHeF8Gtk7FzyOSSVgfSZzT8pIK32S83FmOOka3pdp+cYwC6 gXAE0sbslp3C+JKRqoojR44UiSkm2KduyafL/MH7KRN8hLo5hdJS5yq4ZvCGSkL0 CDpzfGnTTMthM/HrXG+F4YA/2LlcF5cYGYaEiYk3ibsD0PRGcIYjkl6n2QpfjXkD uG4Viv6AIV9bkHfXKrhlEFwAYcfwefCa2PZZI4Un1k042i7ubwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUhkzCVihWUOdkzCw+tFCmlOtDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzIyODZkNjktNjM0OC0z NjBjLThmYTAtNTM3NjYyYTc3OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCnVk69nU0Vi9pS/s1/0KMvsPAdjQbdnStA4C8Qq2fm6DGMalvVUlKi bVxT/Qizg6FawqpQleyfKvUhRmkdNv5VHYnPj/PuhHnvhx+5uS2EC3bjpq54OhfU sOlN4qu2IsIgY1lyGfGkx5qTHYt/fxWHtjxPxm12q/lP3xPGZ4OwdTH9oCv0WD6F WgJI6VNHv7JRasxNdDokoeN3zh1Um7vX6EWuOeDshN/ys4nhjwYpF8mmFJqWXOE2 DRckFmLwdExgGXGaTZKpZvIj7VfUSqRtHIDS9lyPS4Ap2N5s+ujzQMnEKIoMgYvH 572dvA9hw3zdfPCSeQMrIzSiyvgMbw8= -----END CERTIFICATE-----Generated at Mon Jun 30 08:26:31 2025 by rpki-client