$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa72a129-1a46-3aa3-9545-3ccdf3146ef1.roa File: fa72a129-1a46-3aa3-9545-3ccdf3146ef1.roa (raw, json) Hash identifier: kz29qiwQIj49JBud9z5rgBID4baWdh0tGlLhi9FnDMk= Subject key identifier: 3E:B3:1C:6B:C2:9A:D7:13:53:B8:7A:43:64:D7:A5:A5:E0:12:3A:5A Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23C02F8FC0CD9C2EE030A40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa72a129-1a46-3aa3-9545-3ccdf3146ef1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 19905 IP address blocks: 156.154.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:02:f8:fc:0c:d9:c2:ee:03:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=ef22fcb2-b68e-4434-9c29-a90971cf0f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bd:c3:f4:a9:5a:98:fc:61:a9:6b:a5:8a:e5: ba:9f:48:c1:27:62:ca:f9:7e:b0:03:d0:61:2c:4f: 2d:1e:e6:88:92:f1:58:17:87:c8:75:11:3f:f7:ad: 76:9d:3c:fe:38:40:3d:28:04:ed:44:f8:d0:86:b7: 64:ca:d8:cc:5b:ee:83:68:91:22:b5:3d:83:e9:16: 82:34:1a:51:94:f0:18:22:03:a4:0d:35:e6:46:9a: 46:82:aa:eb:f4:58:c2:37:61:11:d4:a1:05:a2:3c: d2:46:49:c2:db:ac:e1:b1:68:5f:ee:3c:ce:05:56: a6:c6:ca:bf:43:59:63:e5:ee:a8:2e:cf:81:98:1b: f6:8b:8b:e4:81:90:bb:06:69:c8:e2:64:91:f0:0e: 71:15:58:06:cc:00:d1:25:a5:b4:c9:99:51:85:6b: c6:47:61:31:0e:64:2f:cd:11:47:a4:e2:9c:87:b0: 6c:94:bb:22:4c:f2:ed:53:c8:12:39:bb:ed:be:32: d8:93:02:7e:5a:0d:55:c6:63:70:bd:c4:f5:4b:46: 73:89:ac:9f:31:0d:c8:37:4e:6e:1e:e9:6f:4b:32: 75:1d:51:7b:66:bf:1b:67:eb:b1:de:dc:f2:7f:f8: 1d:9f:78:56:72:1a:61:6d:46:d0:df:bb:17:70:ed: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B3:1C:6B:C2:9A:D7:13:53:B8:7A:43:64:D7:A5:A5:E0:12:3A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa72a129-1a46-3aa3-9545-3ccdf3146ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fd:33:2f:1c:02:ea:84:1b:03:de:aa:0c:47:4e:ee:08:c8: 34:0c:b7:59:20:df:83:49:4b:3b:5c:2a:e3:d6:2a:a5:57:2a: f7:b9:4d:c2:f1:00:eb:df:ed:4a:aa:3b:be:16:27:f1:d3:86: 1f:4a:6e:e3:bb:4f:2f:ed:41:30:76:8f:33:8b:2d:17:80:92: 7c:32:26:f0:d5:f5:52:ef:d6:56:c3:99:4b:cf:f2:10:b6:fe: 10:cf:fa:83:0c:01:3f:d7:d0:e7:1f:e3:84:d1:7a:8f:56:63: 69:e1:a2:6d:27:f8:ad:cd:21:d1:53:dd:2c:f7:68:41:d7:56: 10:19:8c:1f:49:22:09:ff:b1:5c:2a:36:78:e6:02:42:14:90: a6:88:8a:62:7e:bb:36:bc:fa:e8:13:c9:d4:de:aa:c3:ae:8a: 0d:2b:d2:2a:19:9a:cb:d5:71:3e:e2:ab:4d:e8:ba:75:bf:06: 6b:2e:7b:80:35:00:04:c5:f0:64:9b:aa:3e:89:84:64:a0:05: 6c:46:6a:1e:0d:9b:38:7b:90:23:fc:c5:91:fa:05:b3:60:b4: 02:ad:c6:2e:ea:07:91:90:a1:00:41:a3:4f:8e:c7:8d:ab:f7: 4e:8c:d0:e1:0f:e7:5c:45:2f:9d:61:fa:a9:72:bd:c0:40:52: 9c:eb:52:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAL4/AzZwu4DCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWYyMmZjYjItYjY4ZS00NDM0LTljMjktYTkwOTcxY2YwZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg73D9KlamPxhqWuliuW6n0jBJ2LK+X6wA9Bh LE8tHuaIkvFYF4fIdRE/9612nTz+OEA9KATtRPjQhrdkytjMW+6DaJEitT2D6RaC NBpRlPAYIgOkDTXmRppGgqrr9FjCN2ER1KEFojzSRknC26zhsWhf7jzOBVamxsq/ Q1lj5e6oLs+BmBv2i4vkgZC7BmnI4mSR8A5xFVgGzADRJaW0yZlRhWvGR2ExDmQv zRFHpOKch7BslLsiTPLtU8gSObvtvjLYkwJ+Wg1VxmNwvcT1S0ZziayfMQ3IN05u HulvSzJ1HVF7Zr8bZ+ux3tzyf/gdn3hWchphbUbQ37sXcO2paQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6zHGvCmtcTU7h6Q2TXpaXgEjpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmE3MmExMjktMWE0Ni0z YWEzLTk1NDUtM2NjZGYzMTQ2ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn9My8cAuqEGwPeqgxHTu4IyDQMt1kg34NJSztcKuPWKqVXKve5TcLx AOvf7UqqO74WJ/HThh9KbuO7Ty/tQTB2jzOLLReAknwyJvDV9VLv1lbDmUvP8hC2 /hDP+oMMAT/X0Ocf44TReo9WY2nhom0n+K3NIdFT3Sz3aEHXVhAZjB9JIgn/sVwq NnjmAkIUkKaIimJ+uza8+ugTydTeqsOuig0r0ioZmsvVcT7iq03ounW/Bmsue4A1 AATF8GSbqj6JhGSgBWxGah4Nmzh7kCP8xZH6BbNgtAKtxi7qB5GQoQBBo0+Ox42r 906M0OEP51xFL51h+qlyvcBAUpzrUgs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:38 2025 by rpki-client