$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5cb7f74-523b-3ec3-8ecc-d62544cfa675.roa File: d5cb7f74-523b-3ec3-8ecc-d62544cfa675.roa (raw, json) Hash identifier: U/yvnvk1KZFzLaz9/eAo//bOJekT9ZyFMh4IXs6fP4c= Subject key identifier: 3F:78:07:5B:37:77:78:1D:12:6E:C6:7D:AF:84:93:C2:9D:DF:B7:AA Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BEC4CBE333712F6880400 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5cb7f74-523b-3ec3-8ecc-d62544cfa675.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397217 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ec:4c:be:33:37:12:f6:88:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=4e323b4a-ca2d-4c04-8eb8-bc54ec9d3686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:fd:9a:0e:1e:cb:05:f6:e2:0a:bf:d2:32: de:70:21:d9:bd:b8:cf:3f:d5:45:be:0f:29:93:3c: bf:af:5a:e4:6d:79:aa:1e:52:7c:a6:9f:0e:78:31: 88:04:3e:99:8c:d3:92:68:25:dc:a7:24:cb:09:32: 34:c5:e5:ad:8c:be:3d:a1:66:ad:b2:fc:94:d4:4d: 9b:c5:59:11:e2:f0:4a:ba:17:f6:04:03:2c:5b:5f: d5:43:82:17:51:2b:7c:d4:e5:10:b9:1f:2d:1d:92: ea:e2:25:8a:ad:4c:ce:78:33:0b:91:4f:02:39:ba: 8e:ab:f8:9e:3e:44:67:d9:8a:dc:e4:fe:ea:2a:e4: 70:26:a1:f7:88:83:27:e5:f8:ed:3d:c9:a8:fd:e1: 8d:6f:ce:f1:27:21:06:1f:60:b0:1f:e0:9f:89:65: 89:08:20:a8:3c:11:c7:e4:21:14:25:bf:90:8a:d2: a8:f4:31:9c:17:f3:bd:15:00:39:bc:28:f6:ce:92: 5c:f2:49:97:7e:68:6f:16:be:24:72:aa:e8:43:be: 3b:e6:ed:3a:cd:07:95:19:ce:6f:b2:9c:24:5d:4a: 4f:0a:bc:14:f9:5c:64:71:de:9d:72:e0:93:cc:2d: 7e:49:9e:eb:8c:49:f7:47:ef:ff:a6:84:32:eb:33: 13:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:78:07:5B:37:77:78:1D:12:6E:C6:7D:AF:84:93:C2:9D:DF:B7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d5cb7f74-523b-3ec3-8ecc-d62544cfa675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bd:2d:ca:4e:cb:cf:73:c4:1e:af:d1:41:f5:01:3b:c9:65: 64:1c:3e:03:ea:08:fb:2a:4d:6b:d3:48:64:2f:35:c3:21:e1: 81:64:02:be:7a:0b:5e:88:a5:3d:a0:9a:4c:5c:60:1e:cd:24: 8a:f2:d6:87:fd:40:8c:d0:ae:47:6e:1e:d7:36:a3:56:fd:7b: ad:43:97:b2:7f:83:97:0d:f8:ca:67:07:49:67:aa:76:87:56: 01:5e:59:02:7e:5a:ef:1f:95:4f:f1:6a:91:03:ae:12:a5:8f: b1:02:82:13:1e:8e:92:af:ed:04:8b:a2:17:ba:1d:20:05:14: 73:ac:79:45:52:32:22:71:24:23:c5:fe:0a:c5:7d:84:27:00: 37:0a:9e:c6:42:35:f7:c1:2a:1d:65:0d:aa:7d:90:ac:b4:60: 6a:67:85:50:14:5f:31:1e:ae:d2:67:cd:5a:fa:98:5c:c5:09: 02:f9:53:14:ed:3c:c5:39:71:5e:8c:52:c2:76:75:9f:c5:ad: 8a:06:3c:c4:a6:12:66:62:c4:26:34:e0:e6:c5:45:67:eb:8a: 36:4d:f0:9c:ce:d4:d2:8b:7d:13:09:2d:01:d6:3e:ab:15:63: a5:e3:a5:61:f9:06:73:91:09:e1:71:c0:03:2b:8d:00:a5:c7: e4:42:91:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+xMvjM3EvaIBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NGUzMjNiNGEtY2EyZC00YzA0LThlYjgtYmM1NGVjOWQzNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZv9mg4eywX24gq/0jLecCHZvbjPP9VFvg8p kzy/r1rkbXmqHlJ8pp8OeDGIBD6ZjNOSaCXcpyTLCTI0xeWtjL49oWatsvyU1E2b xVkR4vBKuhf2BAMsW1/VQ4IXUSt81OUQuR8tHZLq4iWKrUzOeDMLkU8CObqOq/ie PkRn2Yrc5P7qKuRwJqH3iIMn5fjtPcmo/eGNb87xJyEGH2CwH+CfiWWJCCCoPBHH 5CEUJb+QitKo9DGcF/O9FQA5vCj2zpJc8kmXfmhvFr4kcqroQ7475u06zQeVGc5v spwkXUpPCrwU+Vxkcd6dcuCTzC1+SZ7rjEn3R+//poQy6zMTaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD94B1s3d3gdEm7Gfa+Ek8Kd37eqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDVjYjdmNzQtNTIzYi0z ZWMzLThlY2MtZDYyNTQ0Y2ZhNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq9LcpOy89zxB6v0UH1ATvJZWQcPgPqCPsqTWvTSGQvNcMh4YFkAr56 C16IpT2gmkxcYB7NJIry1of9QIzQrkduHtc2o1b9e61Dl7J/g5cN+MpnB0lnqnaH VgFeWQJ+Wu8flU/xapEDrhKlj7ECghMejpKv7QSLohe6HSAFFHOseUVSMiJxJCPF /grFfYQnADcKnsZCNffBKh1lDap9kKy0YGpnhVAUXzEertJnzVr6mFzFCQL5UxTt PMU5cV6MUsJ2dZ/FrYoGPMSmEmZixCY04ObFRWfrijZN8JzO1NKLfRMJLQHWPqsV Y6XjpWH5BnORCeFxwAMrjQClx+RCkbE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:45 2025 by rpki-client