$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa File: faf82ae2-53c9-3116-b2d2-66a29af2f159.roa (raw, json) Hash identifier: qPz1kcdY2rOGEYUxE7pTusKvNM2EOPJf2b8J9qOSaCw= Subject key identifier: 3E:37:81:9B:D9:F9:E0:45:97:90:BD:FE:71:8F:08:6D:8F:15:27:E1 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584AD23BEDBA15E6730D5EB8A540 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 397238 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ed:ba:15:e6:73:0d:5e:b8:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b8e9e2c1-5d1a-46ce-9d8c-642d6a115578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:bc:ba:04:00:94:0c:7a:2f:a9:3a:a0:5c: 7e:6e:b8:67:71:24:27:0c:4b:4e:22:68:00:c3:43: 3c:9c:3f:dd:b0:7c:07:94:e1:1f:34:b9:b1:c8:23: ed:6f:36:6d:cf:b1:46:2c:12:d9:44:2f:f5:7b:1a: ae:97:61:22:74:fa:81:d4:17:c6:42:d0:85:05:92: dd:06:5c:15:88:ba:7f:93:29:df:43:53:0f:e0:e7: c7:70:8e:db:e7:19:e6:24:36:26:24:66:27:e7:5d: 29:c1:0d:ac:cf:1b:95:2e:4f:41:c1:d2:dc:e1:73: 94:e0:54:e2:84:3a:d7:1b:90:31:21:32:6c:cb:1b: 57:58:95:79:e7:a1:14:04:39:e7:75:33:5c:53:f9: 75:df:9f:3d:31:37:8b:f9:da:5b:72:49:96:8d:b8: 49:ef:87:02:22:be:b4:e1:f2:83:5f:85:ae:1f:7e: 9c:c2:8f:66:0d:74:8e:34:b9:71:cd:5d:da:47:49: f7:4d:e0:7d:53:a2:d8:c6:44:b1:c3:61:fc:47:19: 7a:de:69:b8:61:88:42:8e:0c:cd:a3:1e:b2:6f:0e: 2f:47:b6:e5:9c:d4:ec:0b:17:8e:86:3c:bf:ff:28: 47:95:d1:f4:4e:6f:44:9e:ab:64:d2:bf:51:e6:ae: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:37:81:9B:D9:F9:E0:45:97:90:BD:FE:71:8F:08:6D:8F:15:27:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/faf82ae2-53c9-3116-b2d2-66a29af2f159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:19:c4:7f:b5:d6:c9:3c:92:4e:77:e9:0d:c8:d5:9b:47:c4: 55:a4:49:b7:fc:80:2c:91:b7:26:64:99:1d:a2:62:d2:ca:b4: 83:d8:53:e2:2a:c2:b9:fe:b8:ff:b6:2a:7b:d2:91:d9:0b:cd: 6c:a8:c0:4d:c7:63:41:a9:c3:8c:a9:d8:05:99:17:85:43:ba: 92:37:2f:16:ca:a9:22:e4:3d:3f:23:4b:9d:b9:18:ee:18:20: 5f:3e:84:68:99:3c:47:68:d8:69:b1:ba:46:b6:aa:96:17:93: be:2b:d4:b2:6c:ea:a4:65:d5:e2:f6:5f:32:13:4a:80:6d:47: 26:35:07:15:44:c2:d6:22:da:1d:12:22:b7:8b:45:d4:e4:e4: 3c:63:8b:0e:39:bb:58:bc:84:a6:ad:62:96:68:60:07:1f:48: 09:be:2b:88:22:b1:ed:d4:9e:18:07:3a:04:0a:39:b0:6f:d5: 80:39:87:60:70:48:5c:30:f7:34:27:46:9f:6e:4c:64:89:02: 71:15:20:7f:09:a3:18:f3:25:49:7a:d7:07:4a:57:19:9c:68: cb:13:19:bd:b9:ab:64:84:d0:70:9c:69:1f:7f:c6:5c:5b:7c: 99:4a:cf:eb:bf:dd:17:9a:6a:0e:52:b9:b5:c3:a5:62:eb:ad: dc:3c:a1:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+26FeZzDV64pUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjhlOWUyYzEtNWQxYS00NmNlLTlkOGMtNjQyZDZhMTE1NTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ+8ugQAlAx6L6k6oFx+brhncSQnDEtOImgA w0M8nD/dsHwHlOEfNLmxyCPtbzZtz7FGLBLZRC/1exqul2EidPqB1BfGQtCFBZLd BlwViLp/kynfQ1MP4OfHcI7b5xnmJDYmJGYn510pwQ2szxuVLk9BwdLc4XOU4FTi hDrXG5AxITJsyxtXWJV556EUBDnndTNcU/l13589MTeL+dpbckmWjbhJ74cCIr60 4fKDX4WuH36cwo9mDXSONLlxzV3aR0n3TeB9U6LYxkSxw2H8Rxl63mm4YYhCjgzN ox6ybw4vR7blnNTsCxeOhjy//yhHldH0Tm9Enqtk0r9R5q41/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD43gZvZ+eBFl5C9/nGPCG2PFSfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmFmODJhZTItNTNjOS0z MTE2LWIyZDItNjZhMjlhZjJmMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8ZxH+11sk8kk536Q3I1ZtHxFWkSbf8gCyRtyZkmR2iYtLKtIPYU+Iq wrn+uP+2KnvSkdkLzWyowE3HY0Gpw4yp2AWZF4VDupI3LxbKqSLkPT8jS525GO4Y IF8+hGiZPEdo2Gmxuka2qpYXk74r1LJs6qRl1eL2XzITSoBtRyY1BxVEwtYi2h0S IreLRdTk5Dxjiw45u1i8hKatYpZoYAcfSAm+K4gise3UnhgHOgQKObBv1YA5h2Bw SFww9zQnRp9uTGSJAnEVIH8JoxjzJUl61wdKVxmcaMsTGb25q2SE0HCcaR9/xlxb fJlKz+u/3Reaag5SubXDpWLrrdw8odI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:07:21 2025 by rpki-client