$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a81c12-08b6-359b-bc84-38049230f42d.roa File: d2a81c12-08b6-359b-bc84-38049230f42d.roa (raw, json) Hash identifier: xCOwlJcC1XTcbnLSi75F6kA3GPyyXnmq2aSVudAPUrM= Subject key identifier: 2B:10:89:CB:DD:76:5D:6D:48:1D:21:17:A0:02:60:AE:52:29:E1:E1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BF75F56C5070758725ED7 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a81c12-08b6-359b-bc84-38049230f42d.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397243 IP address blocks: 156.154.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:f7:5f:56:c5:07:07:58:72:5e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=447edede-1db3-4759-94cf-3714adef7a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:22:bf:e7:6b:5a:ba:c0:23:6e:f2:a9:42: f3:b8:d0:1f:41:5b:0f:30:e0:11:77:8c:63:bc:25: 0a:c4:ff:42:e3:40:e2:9a:c3:85:77:4f:8d:66:a3: a4:dd:38:e1:0e:01:47:dd:7e:95:22:46:ff:2b:0c: f7:17:ab:ef:c4:4b:e7:cc:b1:8c:f4:b9:30:72:e0: 7c:36:17:b6:3a:84:19:40:35:17:e9:0c:ca:b8:44: 09:01:87:74:73:11:28:37:b0:f0:bc:e3:41:a8:b1: a1:b5:97:3a:d9:3b:fa:67:72:3a:3f:83:2d:00:4d: 38:23:1c:83:8f:93:32:65:2d:e8:09:43:4f:a9:5f: 9a:83:60:f5:cc:5a:ce:41:1a:8a:f2:20:e3:53:8d: af:71:1a:26:c7:b8:bc:eb:4b:b2:b2:08:73:83:90: 09:b8:64:6e:5e:3e:56:7d:a3:5a:80:06:c5:36:fd: 2d:94:b4:25:71:b1:f8:bf:0f:81:bb:59:d7:29:ab: 79:b8:6a:2b:1e:df:21:27:25:c7:5c:10:c0:02:03: f8:62:4a:bf:fd:f3:48:6d:47:39:24:32:29:ce:fc: 21:c8:06:ba:06:4e:34:da:91:b5:73:b4:45:99:61: db:05:08:19:e4:e0:47:3d:a3:eb:c4:87:02:94:d1: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:89:CB:DD:76:5D:6D:48:1D:21:17:A0:02:60:AE:52:29:E1:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d2a81c12-08b6-359b-bc84-38049230f42d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:0d:42:e3:91:64:be:68:1b:5e:55:23:ab:c7:b3:78:4c:5c: 73:da:1e:e2:d8:1a:6b:e3:2e:62:77:17:41:48:09:66:12:e0: 3e:0a:fb:25:a9:59:82:95:12:c8:9e:4a:3c:c1:f7:14:74:9d: 19:35:77:a6:0b:db:56:42:62:a1:e5:31:ce:d3:28:f2:76:7f: ab:19:72:18:10:6e:f2:e5:01:8a:c8:98:c4:da:3b:3e:4c:78: 56:1c:b3:6b:00:60:9b:f3:09:f2:b5:48:8c:17:ae:9c:2d:d7: 43:60:d0:b5:8b:7f:47:a7:ff:b9:3b:c5:a0:e3:8c:52:f9:07: f6:9f:f4:ad:1c:85:0c:f4:dd:49:c7:84:b2:93:18:a0:89:05: 23:f1:08:cd:83:bd:16:b2:e5:30:49:78:3f:5a:dc:ab:04:42: ab:fc:28:ca:53:41:f7:47:c3:6f:c0:57:b7:0e:eb:30:ff:aa: e2:e7:8e:b5:a6:f6:48:60:e4:90:71:2a:2f:bb:d7:0a:fb:36: 10:05:14:96:30:c0:8e:b3:cc:51:5f:fe:ef:24:a3:96:61:bb: b2:eb:cc:9b:52:23:6f:e5:c3:a8:f8:7e:b5:74:ae:4c:36:7c: 57:60:93:69:14:97:15:b8:c0:34:d7:b2:f0:bc:e7:d7:4e:74: 89:5e:6c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO/dfVsUHB1hyXtcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDQ3ZWRlZGUtMWRiMy00NzU5LTk0Y2YtMzcxNGFkZWY3YThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit8iv+drWrrAI27yqULzuNAfQVsPMOARd4xj vCUKxP9C40DimsOFd0+NZqOk3TjhDgFH3X6VIkb/Kwz3F6vvxEvnzLGM9LkwcuB8 Nhe2OoQZQDUX6QzKuEQJAYd0cxEoN7DwvONBqLGhtZc62Tv6Z3I6P4MtAE04IxyD j5MyZS3oCUNPqV+ag2D1zFrOQRqK8iDjU42vcRomx7i860uysghzg5AJuGRuXj5W faNagAbFNv0tlLQlcbH4vw+Bu1nXKat5uGorHt8hJyXHXBDAAgP4Ykq//fNIbUc5 JDIpzvwhyAa6Bk402pG1c7RFmWHbBQgZ5OBHPaPrxIcClNGY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsQicvddl1tSB0hF6ACYK5SKeHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDJhODFjMTItMDhiNi0z NTliLWJjODQtMzgwNDkyMzBmNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgNQuORZL5oG15VI6vHs3hMXHPaHuLYGmvjLmJ3F0FICWYS4D4K+yWp WYKVEsieSjzB9xR0nRk1d6YL21ZCYqHlMc7TKPJ2f6sZchgQbvLlAYrImMTaOz5M eFYcs2sAYJvzCfK1SIwXrpwt10Ng0LWLf0en/7k7xaDjjFL5B/af9K0chQz03UnH hLKTGKCJBSPxCM2DvRay5TBJeD9a3KsEQqv8KMpTQfdHw2/AV7cO6zD/quLnjrWm 9khg5JBxKi+71wr7NhAFFJYwwI6zzFFf/u8ko5Zhu7LrzJtSI2/lw6j4frV0rkw2 fFdgk2kUlxW4wDTXsvC859dOdIlebEA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:35:47 2025 by rpki-client