$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f571c9bb-1edd-3eaf-a0a6-dd11212d8aa6.roa File: f571c9bb-1edd-3eaf-a0a6-dd11212d8aa6.roa (raw, json) Hash identifier: MdPqXZeEDNB0k4pLPKs6+hmRC2YzQiedqVdRqxbobt0= Subject key identifier: B4:11:46:EB:68:B7:15:26:1C:D8:CD:43:27:9B:6F:6B:84:96:03:F8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BEA29C07A2CBFC0707D00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f571c9bb-1edd-3eaf-a0a6-dd11212d8aa6.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397216 IP address blocks: 156.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ea:29:c0:7a:2c:bf:c0:70:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=bac3c0d8-2e16-4d01-b6ed-ab37d5a86670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:42:ea:a8:3e:f3:c5:1d:ef:2f:67:05:d5: 10:8a:2a:54:ab:82:30:8b:e7:e4:5c:aa:9a:cd:fb: 9a:31:2d:16:af:99:bd:c2:3e:fc:90:6d:ac:24:f5: b8:2d:46:9d:fe:01:df:3a:72:4b:4e:6f:53:26:8f: 6e:f2:08:6f:21:03:a1:21:91:7e:20:15:df:d5:bf: 4a:e8:a7:3a:43:60:cb:53:93:a9:4d:66:f4:fc:d0: 9a:fb:22:45:06:7a:4b:f0:20:79:bf:87:e1:2d:ca: 50:90:1e:27:c1:1f:55:8d:d4:28:bc:b5:64:a8:e5: ad:fe:11:de:49:07:02:00:68:c1:35:5d:17:87:b6: 10:f9:fb:46:bf:4d:93:f4:da:ae:80:f2:b5:2e:25: 2a:ba:37:e7:8f:70:ce:f5:b3:3f:14:16:70:c0:68: f5:0e:e7:99:e1:a1:b7:20:87:08:ff:58:df:00:fd: c3:5b:4e:5a:69:4d:65:87:e9:5b:70:6f:be:76:6b: 88:58:79:7b:fd:ca:eb:cf:b7:99:7b:82:5a:f7:ed: 57:c2:5c:52:3e:ca:24:93:84:e7:c6:02:3b:2b:5d: 23:7a:a6:06:86:af:a8:f1:fd:59:6a:04:ae:35:c6: ee:ba:d1:ad:d7:7e:b1:06:2e:75:7c:db:be:6d:a6: de:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:11:46:EB:68:B7:15:26:1C:D8:CD:43:27:9B:6F:6B:84:96:03:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f571c9bb-1edd-3eaf-a0a6-dd11212d8aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:35:6d:52:54:26:86:dc:25:3d:6e:de:a8:75:f9:f4:c3:9c: 9d:c4:c4:42:db:8f:53:0a:34:3d:2b:4f:b8:d2:88:41:78:9c: fd:e4:41:fd:12:89:22:7c:46:9c:8c:6c:05:8b:fe:02:c9:be: 01:02:7a:7b:77:de:2d:de:f9:bd:ff:e4:da:af:e7:5c:18:56: 32:d4:d5:3d:50:da:9f:69:76:44:14:3c:1a:a6:6c:d5:4e:56: 5e:4c:bb:24:28:74:36:fb:fb:10:94:ce:14:f1:02:e4:1b:ab: 65:83:c6:d4:0b:44:a3:39:bf:40:06:4b:01:b0:f3:c7:23:c2: a7:04:a6:1e:b7:18:4b:cc:3d:1f:98:f5:b8:c4:d5:31:d8:73: aa:9a:11:26:8a:76:ad:36:04:75:6e:8c:5e:19:d6:f7:fc:56: 31:13:85:ca:ed:cd:6a:bb:ab:f6:b2:94:96:28:f7:a6:46:f7: 49:6d:f5:8e:34:74:22:65:4e:b2:ce:c0:59:b7:0c:54:37:19: 9a:9f:d0:50:5b:39:3d:fa:3c:a2:33:93:fc:8b:e5:35:77:7c: 6e:54:0a:9d:25:95:68:2d:39:0b:db:dd:cf:54:ed:d5:5e:dd: 8e:8d:28:5f:54:d4:5d:4a:54:f5:0e:24:17:e5:42:f4:c1:22: ec:1e:dd:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+opwHosv8BwfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YmFjM2MwZDgtMmUxNi00ZDAxLWI2ZWQtYWIzN2Q1YTg2NjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm9C6qg+88Ud7y9nBdUQiipUq4Iwi+fkXKqa zfuaMS0Wr5m9wj78kG2sJPW4LUad/gHfOnJLTm9TJo9u8ghvIQOhIZF+IBXf1b9K 6Kc6Q2DLU5OpTWb0/NCa+yJFBnpL8CB5v4fhLcpQkB4nwR9VjdQovLVkqOWt/hHe SQcCAGjBNV0Xh7YQ+ftGv02T9NqugPK1LiUqujfnj3DO9bM/FBZwwGj1DueZ4aG3 IIcI/1jfAP3DW05aaU1lh+lbcG++dmuIWHl7/crrz7eZe4Ja9+1XwlxSPsokk4Tn xgI7K10jeqYGhq+o8f1ZagSuNcbuutGt136xBi51fNu+babeOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQRRutotxUmHNjNQyebb2uElgP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjU3MWM5YmItMWVkZC0z ZWFmLWEwYTYtZGQxMTIxMmQ4YWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg1bVJUJobcJT1u3qh1+fTDnJ3ExELbj1MKND0rT7jSiEF4nP3kQf0S iSJ8RpyMbAWL/gLJvgECent33i3e+b3/5Nqv51wYVjLU1T1Q2p9pdkQUPBqmbNVO Vl5MuyQodDb7+xCUzhTxAuQbq2WDxtQLRKM5v0AGSwGw88cjwqcEph63GEvMPR+Y 9bjE1THYc6qaESaKdq02BHVujF4Z1vf8VjEThcrtzWq7q/aylJYo96ZG90lt9Y40 dCJlTrLOwFm3DFQ3GZqf0FBbOT36PKIzk/yL5TV3fG5UCp0llWgtOQvb3c9U7dVe 3Y6NKF9U1F1KVPUOJBflQvTBIuwe3SE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:36 2025 by rpki-client