$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8af17a5-010f-3c59-9ffd-3c9715449d16.roa File: f8af17a5-010f-3c59-9ffd-3c9715449d16.roa (raw, json) Hash identifier: KKFFi2rPq8X9yLnBy0Qt1NMnnqvobEEeX1UH9YrZ5pA= Subject key identifier: EB:98:2E:EA:32:44:96:B5:5D:B7:C7:AB:D4:2C:EC:5F:18:4E:FD:84 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BED5203A595411A2AA200 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8af17a5-010f-3c59-9ffd-3c9715449d16.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397232 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ed:52:03:a5:95:41:1a:2a:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=25b21af5-8121-4ad7-9d97-3f72a095ec25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:3c:c0:1c:8f:6b:55:8a:6a:d1:98:e4:d6: 27:72:a7:5f:15:7b:2e:34:34:e9:09:6a:2a:5e:47: bc:5c:c2:6f:fd:9c:09:87:61:3a:f7:70:61:2f:d1: 8e:d7:da:05:ab:2b:62:c1:da:32:81:7d:ba:bb:1b: 06:b5:dc:96:6c:7b:a4:72:fa:34:54:fc:dc:9d:ed: dd:0f:c0:9a:46:a4:90:4a:97:fe:db:96:75:60:22: 95:21:86:d6:df:5b:26:0e:3f:7c:ea:7c:a4:52:85: e9:06:06:30:5d:6f:16:04:34:05:a8:23:d1:a8:79: 10:3d:6e:3b:93:2c:6c:c6:63:02:85:5d:ed:26:77: 76:68:a0:2c:0a:ad:de:20:19:ee:d4:57:09:d4:65: ac:6c:53:38:60:f1:cf:01:65:f1:85:a7:e4:aa:ac: 3e:12:41:5b:14:87:3b:88:1c:d6:6f:db:0e:7c:7e: 45:07:ea:e5:cc:1e:8f:0f:ab:a6:9e:a2:05:5f:0d: 97:15:3e:7d:86:89:30:9e:ea:3f:d2:b0:5e:2d:09: 22:b4:2c:fb:58:71:04:34:41:e4:cd:fc:30:53:4c: 38:2d:dd:e1:07:f8:df:ea:e5:93:39:f1:99:1d:e8: e7:2e:75:fd:b5:d8:df:49:57:56:02:17:53:bd:36: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:98:2E:EA:32:44:96:B5:5D:B7:C7:AB:D4:2C:EC:5F:18:4E:FD:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f8af17a5-010f-3c59-9ffd-3c9715449d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:7b:b5:87:e8:af:91:d6:06:c7:38:34:5f:57:34:1e:8e:0b: 43:f0:de:85:ef:16:04:ec:13:3d:1a:d5:06:88:af:8a:32:90: 68:d5:4b:97:d7:24:07:dd:07:de:94:58:0e:17:c9:d0:63:da: fc:5e:d2:bc:66:ca:3a:24:c4:a5:8c:ac:32:81:9f:0f:26:92: 32:dc:a6:0f:47:6c:b5:3d:5a:4c:ae:84:e3:59:91:12:15:02: 1e:cf:fa:b7:84:e3:f9:76:e8:63:b6:04:52:22:bc:76:f8:5f: f9:72:d7:63:d3:83:0f:fc:da:52:1e:43:fe:5a:01:b9:6e:51: e5:d3:4b:d2:82:1b:56:cf:9f:2b:8d:58:9c:38:fc:44:41:4d: 9d:18:86:7c:37:67:df:5b:24:fe:aa:5f:c7:30:54:04:df:9d: 25:ee:ea:0e:e5:83:66:52:d2:4f:2c:63:87:dc:ff:26:f1:0a: be:48:0e:a0:a7:0e:a1:78:d2:48:80:35:49:10:c9:32:3c:d4: 96:5c:2e:3a:03:8b:52:b8:87:65:69:25:c3:7a:f0:bb:1b:1a: 25:6f:82:9a:38:c2:af:26:cd:49:49:92:e3:26:84:d5:3b:11: 91:d4:c1:00:eb:e0:9e:a3:4b:fa:27:ef:e1:d4:ca:d0:ed:77: 26:c9:01:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+1SA6WVQRoqogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjViMjFhZjUtODEyMS00YWQ3LTlkOTctM2Y3MmEwOTVlYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Qo8wByPa1WKatGY5NYncqdfFXsuNDTpCWoq Xke8XMJv/ZwJh2E693BhL9GO19oFqytiwdoygX26uxsGtdyWbHukcvo0VPzcne3d D8CaRqSQSpf+25Z1YCKVIYbW31smDj986nykUoXpBgYwXW8WBDQFqCPRqHkQPW47 kyxsxmMChV3tJnd2aKAsCq3eIBnu1FcJ1GWsbFM4YPHPAWXxhafkqqw+EkFbFIc7 iBzWb9sOfH5FB+rlzB6PD6umnqIFXw2XFT59hokwnuo/0rBeLQkitCz7WHEENEHk zfwwU0w4Ld3hB/jf6uWTOfGZHejnLnX9tdjfSVdWAhdTvTZytQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuYLuoyRJa1XbfHq9Qs7F8YTv2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjhhZjE3YTUtMDEwZi0z YzU5LTlmZmQtM2M5NzE1NDQ5ZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR7tYfor5HWBsc4NF9XNB6OC0Pw3oXvFgTsEz0a1QaIr4oykGjVS5fX JAfdB96UWA4XydBj2vxe0rxmyjokxKWMrDKBnw8mkjLcpg9HbLU9WkyuhONZkRIV Ah7P+reE4/l26GO2BFIivHb4X/ly12PTgw/82lIeQ/5aAbluUeXTS9KCG1bPnyuN WJw4/ERBTZ0Yhnw3Z99bJP6qX8cwVATfnSXu6g7lg2ZS0k8sY4fc/ybxCr5IDqCn DqF40kiANUkQyTI81JZcLjoDi1K4h2VpJcN68LsbGiVvgpo4wq8mzUlJkuMmhNU7 EZHUwQDr4J6jS/on7+HUytDtdybJASY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:28 2025 by rpki-client