$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dcea480c-c05e-36d3-a95d-4c32feb6fd18.roa File: dcea480c-c05e-36d3-a95d-4c32feb6fd18.roa (raw, json) Hash identifier: qt7XMuqsKNmwVaFMUNTatHX5oyOR3hSO711uFKN3cMI= Subject key identifier: F9:A7:0D:3E:B7:9B:D6:41:ED:76:29:5D:40:1F:F2:C8:54:55:62:BB Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BE9F5287CD288F23AC740 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dcea480c-c05e-36d3-a95d-4c32feb6fd18.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397213 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:e9:f5:28:7c:d2:88:f2:3a:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5c1acd1c-46be-44e0-8669-e111e2a9a9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:a6:c0:f9:50:eb:69:3b:bd:2a:3e:ab:f6: e7:f6:fc:e7:6b:0c:fe:d6:75:43:d8:3b:3f:39:ba: f5:ad:a2:5a:83:32:b1:14:a8:1d:54:0f:0c:cf:fe: 5d:b0:c1:58:e8:c0:33:dc:96:72:57:95:51:56:35: 8e:94:7c:7d:1d:ad:9e:13:aa:63:29:71:6a:07:58: f1:be:db:68:b8:27:e0:3b:a7:78:17:b6:b1:bf:24: af:28:c5:7e:45:02:27:ce:b0:9e:54:93:c6:e8:44: 1e:3d:dd:2b:3d:10:ef:b4:9e:ce:51:ec:0f:4b:8f: 1f:0e:e9:bd:4b:70:bd:57:bd:29:a4:09:e3:ca:86: 27:99:0e:80:65:42:d8:cd:b3:96:b9:44:20:b5:30: 0a:ed:1c:d0:45:ad:bd:fd:24:48:34:69:61:10:7e: 83:98:b8:61:99:d4:ab:6d:2e:12:31:5f:27:a7:40: bb:aa:bc:a6:6d:3e:bf:a5:ad:40:e3:ef:28:d6:de: 27:a4:75:04:45:d2:77:ab:19:bf:76:03:09:04:5f: 83:2f:07:b8:45:ec:0a:06:65:ee:d7:8e:09:66:33: 4a:d8:4f:32:cf:2e:88:4f:52:a4:87:71:0a:e6:c0: 0c:2c:72:68:b9:a8:76:f2:0b:ab:29:f0:a0:f0:46: 29:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A7:0D:3E:B7:9B:D6:41:ED:76:29:5D:40:1F:F2:C8:54:55:62:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dcea480c-c05e-36d3-a95d-4c32feb6fd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f7:54:ff:23:2a:e9:21:aa:3b:5c:f2:4a:99:5d:3d:b3:44: c8:32:03:17:4c:37:64:b2:09:c8:7f:d6:3a:06:29:ce:52:7e: 6f:1f:55:73:0f:b3:11:72:4b:6f:17:ae:5b:62:eb:f9:25:40: a1:1f:ba:fa:e7:a0:74:d5:5c:53:f8:5e:a2:e0:93:66:c3:c4: bb:42:ff:06:3d:e2:e5:8d:21:a4:57:dc:26:09:5b:d7:6f:86: 53:58:bb:8d:75:19:ab:cb:96:29:6e:bf:bd:aa:e9:3e:55:7c: c3:41:b1:a5:97:8b:05:7c:17:f6:d3:ed:f0:f5:c6:42:e3:95: 95:08:63:71:f2:3b:11:29:5c:aa:7f:c9:b8:21:c1:fc:42:78: 2b:9a:e0:ca:96:6b:2b:9d:09:e8:55:55:db:d3:a2:93:5e:7a: 65:59:9c:e9:1b:09:d7:b5:69:35:fd:d9:e7:7e:c1:1e:90:b4: b7:5c:fb:66:d4:3d:a7:57:76:68:3e:32:2a:67:4f:e9:15:83: e5:cc:4d:d1:79:70:cb:db:65:d4:ba:bd:fb:e0:7e:81:f3:d5: 7e:08:b5:22:7c:0e:32:7f:63:62:70:a5:1e:2a:d7:25:a1:42: d2:44:c8:9c:cc:a6:ce:f3:53:e0:03:98:21:65:d4:6b:ba:20: 57:ba:d1:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+n1KHzSiPI6x0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NWMxYWNkMWMtNDZiZS00NGUwLTg2NjktZTExMWUyYTlhOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEamwPlQ62k7vSo+q/bn9vznawz+1nVD2Ds/ Obr1raJagzKxFKgdVA8Mz/5dsMFY6MAz3JZyV5VRVjWOlHx9Ha2eE6pjKXFqB1jx vttouCfgO6d4F7axvySvKMV+RQInzrCeVJPG6EQePd0rPRDvtJ7OUewPS48fDum9 S3C9V70ppAnjyoYnmQ6AZULYzbOWuUQgtTAK7RzQRa29/SRINGlhEH6DmLhhmdSr bS4SMV8np0C7qrymbT6/pa1A4+8o1t4npHUERdJ3qxm/dgMJBF+DLwe4RewKBmXu 144JZjNK2E8yzy6IT1Kkh3EK5sAMLHJouah28gurKfCg8EYpqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmnDT63m9ZB7XYpXUAf8shUVWK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGNlYTQ4MGMtYzA1ZS0z NmQzLWE5NWQtNGMzMmZlYjZmZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP3VP8jKukhqjtc8kqZXT2zRMgyAxdMN2SyCch/1joGKc5Sfm8fVXMP sxFyS28Xrlti6/klQKEfuvrnoHTVXFP4XqLgk2bDxLtC/wY94uWNIaRX3CYJW9dv hlNYu411GavLliluv72q6T5VfMNBsaWXiwV8F/bT7fD1xkLjlZUIY3HyOxEpXKp/ ybghwfxCeCua4MqWayudCehVVdvTopNeemVZnOkbCde1aTX92ed+wR6QtLdc+2bU PadXdmg+MipnT+kVg+XMTdF5cMvbZdS6vfvgfoHz1X4ItSJ8DjJ/Y2JwpR4q1yWh QtJEyJzMps7zU+ADmCFl1Gu6IFe60Xs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:35 2025 by rpki-client