$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2801595-1d9a-3e8e-bb5d-9c9709fff069.roa File: d2801595-1d9a-3e8e-bb5d-9c9709fff069.roa (raw, json) Hash identifier: MzWOIPKVzIeAPAOVNRrJjZnMHGES+SgKVDP0Z8YgihE= Subject key identifier: 6C:E2:5A:DE:BA:B7:AC:98:88:BF:67:D7:D5:32:9C:84:7F:AD:72:57 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BFEFFFFA24B7B1BA87D80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2801595-1d9a-3e8e-bb5d-9c9709fff069.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397221 IP address blocks: 156.154.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:fe:ff:ff:a2:4b:7b:1b:a8:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=668b0ea3-10c3-4def-9d6f-9b0f9de103a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:52:55:45:6d:06:f7:45:15:e0:f8:99:04: 9a:87:5e:ae:79:9d:92:87:7e:d4:cd:a3:39:36:f1: 3f:8d:e0:86:41:8f:79:6b:bf:0d:00:d7:b9:3d:bc: 2e:d2:a7:22:c1:5f:8c:5b:b5:db:70:77:fc:8b:bc: 5b:e8:21:8a:6f:3d:1d:10:c5:dd:d0:ac:9c:b5:85: 07:df:18:5f:f2:28:9d:b1:7f:c8:19:35:14:64:df: 53:ce:39:7f:35:6b:73:36:e1:43:25:f0:85:1e:1a: fd:00:d4:ef:48:60:57:98:4e:f9:68:38:13:57:46: 95:00:13:c6:d8:fb:a4:94:3c:2a:60:b1:a8:29:3c: 65:c2:f4:55:51:8f:21:fc:be:38:44:1f:d2:e4:7f: a8:c1:1a:c6:cd:84:00:b0:4e:97:c2:51:bd:de:c7: 67:5b:f0:7d:4a:28:67:a7:99:e7:ea:c6:07:fb:04: 27:ed:40:f1:7d:54:37:de:61:0b:ac:33:46:01:05: e2:30:9c:fb:e0:d3:4e:ce:3a:ae:c8:0a:5d:c4:a9: fc:6e:ab:41:b4:f6:48:46:b3:56:3e:6b:87:f9:54: 90:bd:3c:e0:3c:1f:44:cc:ca:12:7e:17:aa:2d:4d: da:bc:b9:08:a2:ef:da:27:b2:bf:30:1c:b8:5d:b6: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E2:5A:DE:BA:B7:AC:98:88:BF:67:D7:D5:32:9C:84:7F:AD:72:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2801595-1d9a-3e8e-bb5d-9c9709fff069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:dc:39:8f:52:f5:89:07:ec:6b:31:fd:75:dd:5f:18:74:9c: d8:41:5a:33:bc:66:5f:83:d4:7d:5b:74:6c:23:ae:7d:a8:5f: e5:79:04:6f:7d:62:9d:e0:b0:b9:35:ed:a0:3c:40:eb:4a:07: dc:86:e0:9e:62:fe:5e:68:a9:92:03:cc:72:a7:98:ce:fb:48: 76:5b:83:5a:00:ff:d8:0f:43:de:f8:60:2c:ea:ec:50:b9:e2: 23:46:37:d7:bc:ff:37:2d:85:7d:43:c4:0c:04:83:b1:14:10: 29:b6:0e:25:fa:6d:d7:25:ad:2e:95:46:e6:d0:6c:65:4d:7f: e2:2a:2d:bc:8c:16:59:bc:8f:b3:5b:15:2e:2f:fc:51:c1:ba: 93:91:cb:31:1b:ca:3b:48:ff:68:21:b9:ab:4e:50:eb:23:a4: 92:d3:a6:93:59:51:2f:38:f6:2a:9b:da:6b:7f:d2:49:19:cf: ae:7e:84:64:e6:de:82:b6:80:9b:23:10:b6:77:2d:59:4e:41: 1a:0f:e2:99:b5:11:f4:8e:52:80:c9:90:cd:d2:fc:d6:83:13: c8:c8:75:97:9a:69:7d:f9:d2:fa:45:42:77:ca:ac:d8:6b:10: 75:98:a7:20:45:1b:bc:48:4e:51:2a:98:40:75:2f:77:2c:51: 82:55:4a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/7//6JLexuofYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NjY4YjBlYTMtMTBjMy00ZGVmLTlkNmYtOWIwZjlkZTEwM2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yhSVUVtBvdFFeD4mQSah16ueZ2Sh37UzaM5 NvE/jeCGQY95a78NANe5Pbwu0qciwV+MW7XbcHf8i7xb6CGKbz0dEMXd0KyctYUH 3xhf8iidsX/IGTUUZN9Tzjl/NWtzNuFDJfCFHhr9ANTvSGBXmE75aDgTV0aVABPG 2PuklDwqYLGoKTxlwvRVUY8h/L44RB/S5H+owRrGzYQAsE6XwlG93sdnW/B9Sihn p5nn6sYH+wQn7UDxfVQ33mELrDNGAQXiMJz74NNOzjquyApdxKn8bqtBtPZIRrNW PmuH+VSQvTzgPB9EzMoSfheqLU3avLkIou/aJ7K/MBy4XbYaxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGziWt66t6yYiL9n19UynIR/rXJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDI4MDE1OTUtMWQ5YS0z ZThlLWJiNWQtOWM5NzA5ZmZmMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/cOY9S9YkH7Gsx/XXdXxh0nNhBWjO8Zl+D1H1bdGwjrn2oX+V5BG99 Yp3gsLk17aA8QOtKB9yG4J5i/l5oqZIDzHKnmM77SHZbg1oA/9gPQ974YCzq7FC5 4iNGN9e8/zcthX1DxAwEg7EUECm2DiX6bdclrS6VRubQbGVNf+IqLbyMFlm8j7Nb FS4v/FHBupORyzEbyjtI/2ghuatOUOsjpJLTppNZUS849iqb2mt/0kkZz65+hGTm 3oK2gJsjELZ3LVlOQRoP4pm1EfSOUoDJkM3S/NaDE8jIdZeaaX350vpFQnfKrNhr EHWYpyBFG7xITlEqmEB1L3csUYJVSuE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:03 2025 by rpki-client