$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4e85be-107f-3a2a-97d0-675264800e0e.roa File: ef4e85be-107f-3a2a-97d0-675264800e0e.roa (raw, json) Hash identifier: Rv/JGWztbHKjZX72tT3/1hp/iRvRq55Lea8uWwGFYps= Subject key identifier: B5:F0:25:B0:E5:5A:01:BE:97:4B:B3:AF:E5:4F:1E:1F:64:77:FC:1F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C04A5CA188BC5AC5DAB40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4e85be-107f-3a2a-97d0-675264800e0e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397236 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:04:a5:ca:18:8b:c5:ac:5d:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=7f5a45f7-40dd-4520-af2e-59b2de586331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:24:70:03:06:1d:1e:60:4e:a7:45:a1:41: fb:11:a4:18:27:35:cd:50:64:2f:b4:03:c4:8e:8d: f9:8c:de:b8:27:ef:ff:c2:4f:0a:45:a9:e3:60:3c: 26:b9:3e:3e:5d:87:1e:d3:59:f1:cb:e3:71:7e:ee: 67:79:24:c2:bd:9d:f9:5c:9c:aa:6c:ad:6e:51:7c: e5:aa:ee:c4:df:f9:af:34:cb:50:f9:c0:00:df:30: 87:bf:97:11:a4:15:ed:01:b7:44:1b:52:32:2d:ea: f1:24:1d:9d:da:b5:83:45:33:3e:af:f9:5e:c0:10: 07:64:e6:6e:e7:2f:98:83:1b:98:57:6a:ec:81:47: b7:9b:7d:6f:3f:f0:c9:38:9a:7e:26:ff:93:56:a3: a8:b2:8c:2e:51:a9:e8:c8:c2:e2:dd:ab:3f:a5:09: 34:6d:c1:f9:31:9e:20:e6:3e:f1:51:eb:9a:c1:21: 4c:53:31:f0:09:85:7d:f0:8b:3f:a5:3c:15:46:6e: dd:45:82:5e:11:21:4c:d1:a5:12:3e:f5:cd:a6:8a: c3:12:7f:b6:d3:f1:4d:c7:49:a7:06:c3:0a:17:54: cf:91:9f:b3:1b:53:e0:d7:75:77:6a:8a:34:fd:6e: 7a:87:b8:b7:ce:e0:89:df:40:94:64:5a:5e:d8:54: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F0:25:B0:E5:5A:01:BE:97:4B:B3:AF:E5:4F:1E:1F:64:77:FC:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef4e85be-107f-3a2a-97d0-675264800e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:80:e0:63:4f:75:8a:9d:3e:d3:ed:4c:db:2f:72:1a:0d:1f: a1:89:5e:d8:45:89:40:a5:fd:4a:2d:95:d6:a9:f6:85:59:83: cb:53:aa:80:47:bd:66:54:0c:10:c9:0d:81:73:1c:b5:4f:53: c4:8e:5d:07:e8:b3:cf:5e:bf:f0:e6:32:25:7d:65:e1:1c:fb: 49:51:7d:fe:b8:ab:50:6e:03:f7:da:82:33:bd:3a:e1:78:24: 0e:5b:3c:e3:27:1f:e8:87:c5:3d:16:63:54:f1:f5:54:d8:99: 4f:76:05:10:2d:eb:f5:b5:d3:80:2b:6d:97:3b:d4:c0:9a:ef: 6b:38:77:e1:4c:5c:1a:ab:93:bb:0f:3d:5a:e8:d7:36:a0:a2: 79:68:96:79:0c:20:ac:db:0b:19:25:16:9d:61:56:8d:34:54: 55:53:d9:96:ab:bf:7e:53:9e:56:e9:be:46:f5:13:44:ec:21: 0f:e6:32:65:78:17:e9:69:cc:a8:36:72:ba:29:4f:b5:52:c6: e8:e2:81:a2:0b:3b:74:64:20:c5:5c:8c:96:eb:bd:bd:5d:29: 88:b7:72:69:54:49:94:94:fb:3c:d4:ca:70:2e:fd:c8:45:0a: bc:3c:79:b5:07:ee:c6:7d:bf:d0:a2:85:e3:e0:cf:83:c4:cc: 04:ff:98:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPASlyhiLxaxdq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk N2Y1YTQ1ZjctNDBkZC00NTIwLWFmMmUtNTliMmRlNTg2MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum0kcAMGHR5gTqdFoUH7EaQYJzXNUGQvtAPE jo35jN64J+//wk8KRanjYDwmuT4+XYce01nxy+Nxfu5neSTCvZ35XJyqbK1uUXzl qu7E3/mvNMtQ+cAA3zCHv5cRpBXtAbdEG1IyLerxJB2d2rWDRTM+r/lewBAHZOZu 5y+YgxuYV2rsgUe3m31vP/DJOJp+Jv+TVqOosowuUanoyMLi3as/pQk0bcH5MZ4g 5j7xUeuawSFMUzHwCYV98Is/pTwVRm7dRYJeESFM0aUSPvXNporDEn+20/FNx0mn BsMKF1TPkZ+zG1Pg13V3aoo0/W56h7i3zuCJ30CUZFpe2FQOGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXwJbDlWgG+l0uzr+VPHh9kd/wfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWY0ZTg1YmUtMTA3Zi0z YTJhLTk3ZDAtNjc1MjY0ODAwZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuA4GNPdYqdPtPtTNsvchoNH6GJXthFiUCl/Uotldap9oVZg8tTqoBH vWZUDBDJDYFzHLVPU8SOXQfos89ev/DmMiV9ZeEc+0lRff64q1BuA/fagjO9OuF4 JA5bPOMnH+iHxT0WY1Tx9VTYmU92BRAt6/W104ArbZc71MCa72s4d+FMXBqrk7sP PVro1zagonlolnkMIKzbCxklFp1hVo00VFVT2Zarv35Tnlbpvkb1E0TsIQ/mMmV4 F+lpzKg2cropT7VSxujigaILO3RkIMVcjJbrvb1dKYi3cmlUSZSU+zzUynAu/chF Crw8ebUH7sZ9v9CihePgz4PEzAT/mEI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:48 2025 by rpki-client