$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/defa4fbb-ce9e-3dde-8987-20cfcaf86f90.roa File: defa4fbb-ce9e-3dde-8987-20cfcaf86f90.roa (raw, json) Hash identifier: 6xeCyDPNCiW1e4jmiZa/qk24+MbTer+avALV8mFp/x0= Subject key identifier: CC:98:2C:33:D6:9B:9C:E2:03:5E:43:19:D4:90:30:77:B6:A1:1F:8B Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584A4F05D98BE7AC83C97D76E700 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/defa4fbb-ce9e-3dde-8987-20cfcaf86f90.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 397217 IP address blocks: 156.154.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:d9:8b:e7:ac:83:c9:7d:76:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=97c01a59-627a-40a9-bf29-c3dac853549f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:db:67:d5:fc:5b:76:96:74:13:3a:a5:5e:56: 26:c1:b2:50:fa:52:dc:2a:c1:c9:b2:1e:3d:cc:e9: 9f:d6:66:b2:cf:fe:1c:12:9a:e7:b1:d6:b1:f8:42: 03:95:20:bf:db:83:49:43:41:a2:c0:55:41:5f:f2: 39:b3:96:50:a7:46:ee:90:ca:b5:23:df:b0:92:43: d2:35:06:b3:ba:43:f5:e0:4f:48:df:b9:24:eb:b1: 89:bf:08:43:66:03:20:f7:5a:87:c1:ea:e4:ae:ae: 6f:c2:0c:2c:cb:be:c7:17:21:72:7d:5d:18:e1:a6: c0:57:43:2b:bf:b9:e0:7d:30:21:cd:75:bd:5b:5b: fc:4f:38:5e:55:40:4c:e6:97:4d:2c:c4:db:25:23: f9:aa:27:f3:f7:cb:3e:73:81:ed:e0:0f:16:c2:ee: 17:1b:7b:bd:c1:12:96:5b:60:2e:35:9a:72:82:b6: 41:62:23:5e:8b:f0:a1:65:4b:b6:ba:5b:c7:9a:13: 58:86:aa:44:8f:1d:9a:4b:c8:21:81:d3:1f:ba:d8: 40:77:25:ad:4b:af:4b:c1:a1:36:35:b6:5e:f3:19: 12:f1:a5:f0:31:07:0a:e0:1f:72:c4:01:ef:0f:fa: d9:a1:f6:33:b7:f7:1e:62:04:b3:e0:79:61:34:13: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:98:2C:33:D6:9B:9C:E2:03:5E:43:19:D4:90:30:77:B6:A1:1F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/defa4fbb-ce9e-3dde-8987-20cfcaf86f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e2:44:37:7a:d9:ff:4d:3d:d5:c6:76:cc:c1:e5:8f:20:8b: 0c:39:11:7e:b0:88:7d:87:32:fd:1b:87:45:a3:e9:95:f1:17: 36:a1:30:ff:3f:62:af:a3:78:80:88:3c:72:d9:26:92:1e:7d: d4:f3:7a:c6:37:58:e9:b9:c5:81:b4:bc:71:47:f8:4f:d8:0d: 9a:1f:d6:6d:a8:33:f4:14:b4:a4:58:7c:a0:5f:45:12:8d:87: 08:f7:75:77:ef:4d:a4:39:2b:ec:a8:26:0d:be:03:f3:ce:bc: 94:b1:6c:f2:66:f7:26:cd:d1:c0:f8:50:40:44:0c:6e:9b:4d: 7b:ab:1b:79:2d:94:ce:f6:fa:68:87:c8:5f:4b:d2:a4:61:80: d0:da:ad:c9:89:a7:02:fb:74:69:bc:63:06:d0:97:ab:dd:f9: 61:79:ca:f3:7b:58:f4:2d:b7:c8:a7:c2:da:bf:3d:82:4e:1b: 4e:87:fe:a8:82:e7:e7:41:8b:59:c5:86:1f:4f:39:6b:26:39: 5d:ec:97:f4:f3:9b:aa:b8:6e:14:4f:f1:a1:31:a4:3a:52:e9: 5b:b1:e2:fc:bc:58:75:b0:db:63:df:bb:47:2b:42:37:0e:1f: c1:51:90:a6:1c:ee:ac:8e:be:51:3f:d0:c6:7f:d5:35:75:5b: f0:2c:ab:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBdmL56yDyX125wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk OTdjMDFhNTktNjI3YS00MGE5LWJmMjktYzNkYWM4NTM1NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9tn1fxbdpZ0EzqlXlYmwbJQ+lLcKsHJsh49 zOmf1mayz/4cEprnsdax+EIDlSC/24NJQ0GiwFVBX/I5s5ZQp0bukMq1I9+wkkPS NQazukP14E9I37kk67GJvwhDZgMg91qHwerkrq5vwgwsy77HFyFyfV0Y4abAV0Mr v7ngfTAhzXW9W1v8TzheVUBM5pdNLMTbJSP5qifz98s+c4Ht4A8Wwu4XG3u9wRKW W2AuNZpygrZBYiNei/ChZUu2ulvHmhNYhqpEjx2aS8ghgdMfuthAdyWtS69LwaE2 NbZe8xkS8aXwMQcK4B9yxAHvD/rZofYzt/ceYgSz4HlhNBMpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyYLDPWm5ziA15DGdSQMHe2oR+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGVmYTRmYmItY2U5ZS0z ZGRlLTg5ODctMjBjZmNhZjg2ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3iRDd62f9NPdXGdszB5Y8giww5EX6wiH2HMv0bh0Wj6ZXxFzahMP8/ Yq+jeICIPHLZJpIefdTzesY3WOm5xYG0vHFH+E/YDZof1m2oM/QUtKRYfKBfRRKN hwj3dXfvTaQ5K+yoJg2+A/POvJSxbPJm9ybN0cD4UEBEDG6bTXurG3ktlM72+miH yF9L0qRhgNDarcmJpwL7dGm8YwbQl6vd+WF5yvN7WPQtt8inwtq/PYJOG06H/qiC 5+dBi1nFhh9POWsmOV3sl/Tzm6q4bhRP8aExpDpS6Vux4vy8WHWw22Pfu0crQjcO H8FRkKYc7qyOvlE/0MZ/1TV1W/Asq3E= -----END CERTIFICATE-----Generated at Mon Jun 30 17:35:02 2025 by rpki-client