$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8b9c776-afed-30e8-9a91-6544cddff1b4.roa File: c8b9c776-afed-30e8-9a91-6544cddff1b4.roa (raw, json) Hash identifier: KTPaXKuRp39Nsl2sNtHH1lpcurMM8BLxf7xXq1wQKN4= Subject key identifier: FD:F3:E7:71:E5:90:F1:9A:94:0E:D9:A7:E8:7F:EF:07:A7:01:21:62 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A3B7B220378EA2C16C95CE800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8b9c776-afed-30e8-9a91-6544cddff1b4.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 12008 IP address blocks: 156.154.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:22:03:78:ea:2c:16:c9:5c:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=4818bb60-c1b8-4b03-bfa2-64a9978ed207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d1:17:9e:57:fa:18:de:84:96:8b:b1:16:da: 49:24:20:9a:c2:0e:92:1e:fd:6c:36:47:9d:f4:22: f4:9a:ef:84:2e:98:64:8d:6e:a2:c0:ad:9c:90:aa: 05:0c:0c:46:41:37:4d:a2:15:79:20:4b:a5:e9:c3: fc:db:7b:94:bb:92:13:73:cc:42:c3:ca:85:2e:07: 58:ed:71:13:8a:40:16:e4:8b:fd:d7:cb:98:7b:8d: 48:0a:77:6c:74:bf:f7:d7:79:fd:ef:af:91:e9:1c: 29:9b:82:2b:e8:5a:96:6e:27:cb:93:62:dd:d8:e8: 8d:83:1a:e9:65:af:9f:93:14:a4:6e:71:41:f4:45: 69:7e:18:7d:6c:5b:69:eb:81:f8:05:bc:25:3c:70: 8a:fc:ef:39:f6:e5:b0:de:69:11:bc:d6:5b:8e:93: 98:ee:f7:18:9c:f4:ef:2b:dc:92:59:30:53:01:36: ac:ac:cc:8a:8d:2b:f3:5e:ec:ce:9a:f6:94:80:f2: 83:99:4a:8a:9f:ee:37:b9:0b:f0:30:0a:73:78:58: 09:f6:68:ef:5a:8c:a3:5d:cd:0f:54:21:7e:f5:85: d4:c6:29:9e:f0:a6:0e:af:cf:69:36:0d:d0:a7:15: 64:ca:db:55:59:29:c2:6e:f1:6b:54:cd:0b:6f:18: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F3:E7:71:E5:90:F1:9A:94:0E:D9:A7:E8:7F:EF:07:A7:01:21:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c8b9c776-afed-30e8-9a91-6544cddff1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:79:93:5a:76:e8:30:4c:f0:4b:02:0c:b7:9a:70:f7:19:bb: 43:99:0e:f7:7f:d0:ac:c8:26:11:cb:49:af:8a:24:04:dd:a7: e2:45:54:e1:d8:eb:58:df:1e:da:60:40:17:c6:cf:95:ed:19: f2:6a:4e:1b:a5:11:f2:04:9c:fa:9a:fe:7e:1b:4b:65:b8:bb: e8:1b:b6:20:e9:6e:c7:24:16:3c:7b:f5:8a:fe:d2:d0:a3:39: 25:f4:44:4a:b0:04:cb:b8:dc:bd:cc:a7:58:82:bb:bb:b9:3b: ea:b2:ff:2c:1d:d4:85:ba:41:3e:92:23:6a:9d:f2:b1:3f:9f: 83:10:9d:6a:3f:23:a0:c1:6c:c0:d2:6a:60:dd:57:12:40:90: a9:21:89:b6:e7:4f:85:0b:09:65:31:96:b7:c4:f8:47:60:8a: f5:0e:40:4a:e9:38:ee:54:e0:51:a9:11:02:88:85:94:c1:e2: ef:c0:6d:a6:33:b9:88:c6:d5:79:a8:b5:99:14:e4:a2:af:30: 6e:10:ca:6e:23:9a:d7:f3:f3:ff:6d:b8:7b:72:77:91:b8:f7: fb:ea:f8:e8:b9:bd:64:ef:f4:e9:0b:cd:3b:0a:df:e9:99:3d: 45:41:cb:1a:de:0c:bd:e5:8c:e5:17:89:f1:b9:b0:00:74:4b: 86:2f:fb:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eyIDeOosFslc6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NDgxOGJiNjAtYzFiOC00YjAzLWJmYTItNjRhOTk3OGVkMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktEXnlf6GN6ElouxFtpJJCCawg6SHv1sNked 9CL0mu+ELphkjW6iwK2ckKoFDAxGQTdNohV5IEul6cP823uUu5ITc8xCw8qFLgdY 7XETikAW5Iv918uYe41ICndsdL/313n976+R6Rwpm4Ir6FqWbifLk2Ld2OiNgxrp Za+fkxSkbnFB9EVpfhh9bFtp64H4BbwlPHCK/O859uWw3mkRvNZbjpOY7vcYnPTv K9ySWTBTATasrMyKjSvzXuzOmvaUgPKDmUqKn+43uQvwMApzeFgJ9mjvWoyjXc0P VCF+9YXUxime8KYOr89pNg3QpxVkyttVWSnCbvFrVM0LbxjIcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3z53HlkPGalA7Zp+h/7wenASFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzhiOWM3NzYtYWZlZC0z MGU4LTlhOTEtNjU0NGNkZGZmMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF5k1p26DBM8EsCDLeacPcZu0OZDvd/0KzIJhHLSa+KJATdp+JFVOHY 61jfHtpgQBfGz5XtGfJqThulEfIEnPqa/n4bS2W4u+gbtiDpbsckFjx79Yr+0tCj OSX0REqwBMu43L3Mp1iCu7u5O+qy/ywd1IW6QT6SI2qd8rE/n4MQnWo/I6DBbMDS amDdVxJAkKkhibbnT4ULCWUxlrfE+EdgivUOQErpOO5U4FGpEQKIhZTB4u/AbaYz uYjG1XmotZkU5KKvMG4Qym4jmtfz8/9tuHtyd5G49/vq+Oi5vWTv9OkLzTsK3+mZ PUVByxreDL3ljOUXifG5sAB0S4Yv+8s= -----END CERTIFICATE-----Generated at Mon Jun 30 13:55:27 2025 by rpki-client