$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa File: 146f50cf-fa1c-302e-8097-8ff5fda89373.roa (raw, json) Hash identifier: xXXAeISaakH7sIh2TpRi1Shn8vUCGoIOj1JzrRcvMg8= Subject key identifier: 30:69:1E:13:D0:6A:21:3F:6F:BD:80:DC:3D:7F:92:76:06:9A:56:3B Certificate issuer: /CN=dc49520f-d0a0-4d00-a42f-35a1023569ac Certificate serial: 010D0C9F4328584AF5212896837B0F8994974A00 Authority key identifier: 63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16922 IP address blocks: 192.35.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:28:96:83:7b:0f:89:94:97:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc49520f-d0a0-4d00-a42f-35a1023569ac Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1c92e674-755a-4116-a80b-46f2ead5d54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:11:1b:3a:89:62:9d:62:0f:f1:db:dd:cb:79: 11:c2:50:eb:95:94:49:6c:31:e1:3d:6e:0b:75:44: 57:1d:bc:9b:bb:53:11:7c:10:67:80:c0:5a:93:3c: f7:bd:1c:78:77:34:00:3d:1f:70:d9:31:8f:aa:b8: 89:75:15:99:c8:f6:8a:1f:c1:32:5d:0f:cb:82:b3: 0b:15:f3:ac:13:00:b4:5b:61:2f:4a:ec:2a:03:91: 1c:3c:20:70:77:2f:fd:81:7a:61:d9:a5:f7:70:c3: 0e:c6:81:da:e9:32:6f:73:5a:62:c6:60:4b:08:2e: 7a:bc:20:27:eb:33:08:1d:81:46:f8:3b:87:f1:8d: ab:e4:f5:65:ea:95:4e:d5:66:09:f7:78:a5:a2:af: df:2a:61:23:48:46:bf:61:be:54:49:03:67:ce:f1: 7c:0a:b1:25:7b:3b:6f:69:d3:b1:dd:a7:8a:18:af: d0:dd:93:ef:3f:cd:8f:f1:ef:23:9a:be:b6:e2:b5: 71:88:2e:5a:32:d8:5f:0f:e7:aa:c0:87:20:76:c6: eb:2a:8a:39:4a:a4:95:6e:a9:93:17:d4:4b:36:40: 8e:3c:d2:04:a9:ad:af:5f:eb:a1:a7:94:7a:e1:ef: 1c:82:24:53:56:a5:ab:68:f8:9a:9f:29:2b:c9:18: 7f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:69:1E:13:D0:6A:21:3F:6F:BD:80:DC:3D:7F:92:76:06:9A:56:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl X509v3 Authority Key Identifier: keyid:63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer sbgp-ipAddrBlock: critical IPv4: 192.35.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6c:6f:bf:2a:62:0a:84:7d:72:d8:4c:45:9d:ae:b1:a0:e1: 69:8a:f6:12:48:92:78:18:c3:e6:50:1f:22:e4:3b:6f:2e:c2: 8d:25:09:0f:9c:96:4e:80:45:1d:17:76:d7:3c:fe:b9:16:2e: 28:db:14:43:1a:58:5e:27:17:50:fd:d2:26:44:dc:92:0b:25: de:2d:bb:77:02:26:a8:84:76:b4:d9:18:77:ba:e3:04:39:2b: a5:d0:2e:00:4d:60:57:da:b0:aa:b8:83:0d:cd:19:3f:70:3f: 57:1b:e3:33:6c:70:17:0a:e9:5f:06:ec:5c:b3:0c:39:98:e8: 49:4c:11:77:8f:18:4a:5f:fb:39:64:d0:1a:e4:6c:3b:35:f6: 4e:3b:cb:a8:e9:c9:a6:4b:93:0c:be:db:a6:8d:ed:1b:2d:04: 64:fa:e2:a8:0b:dc:d6:dd:dc:e8:11:e6:3b:17:ca:75:47:ea: 61:67:09:0f:48:44:68:29:2c:c5:e1:62:da:9d:d7:8b:eb:72: 7d:5b:b3:d1:d5:3e:a0:73:76:43:5c:de:3e:58:e4:95:06:59: 67:bd:d1:03:8c:d4:20:16:2e:41:54:03:08:8e:6a:59:d6:0c: 8c:29:eb:b3:ab:a0:f3:2b:b2:34:cb:10:e2:9c:db:02:90:a1: 2b:09:99:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISiWg3sPiZSXSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0OTUyMGYtZDBhMC00ZDAwLWE0MmYtMzVhMTAyMzU2 OWFjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWM5MmU2NzQtNzU1YS00MTE2LWE4MGItNDZmMmVhZDVkNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiREbOolinWIP8dvdy3kRwlDrlZRJbDHhPW4L dURXHbybu1MRfBBngMBakzz3vRx4dzQAPR9w2TGPqriJdRWZyPaKH8EyXQ/LgrML FfOsEwC0W2EvSuwqA5EcPCBwdy/9gXph2aX3cMMOxoHa6TJvc1pixmBLCC56vCAn 6zMIHYFG+DuH8Y2r5PVl6pVO1WYJ93iloq/fKmEjSEa/Yb5USQNnzvF8CrEleztv adOx3aeKGK/Q3ZPvP82P8e8jmr624rVxiC5aMthfD+eqwIcgdsbrKoo5SqSVbqmT F9RLNkCOPNIEqa2vX+uhp5R64e8cgiRTVqWraPianykryRh/wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBpHhPQaiE/b72A3D1/knYGmlY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYzQ5 NTIwZi1kMGEwLTRkMDAtYTQyZi0zNWExMDIzNTY5YWMvMTQ2ZjUwY2YtZmExYy0z MDJlLTgwOTctOGZmNWZkYTg5MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGM0OTUyMGYtZDBhMC00ZDAwLWE0 MmYtMzVhMTAyMzU2OWFjL2RjNDk1MjBmLWQwYTAtNGQwMC1hNDJmLTM1YTEwMjM1 NjlhYy5jcmwwHwYDVR0jBBgwFoAUY6687Y8P1dBnxJKxNG4pl7eCo1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYzQ5NTIwZi1kMGEwLTRkMDAtYTQyZi0zNWEx MDIzNTY5YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1sb78qYgqEfXLYTEWdrrGg4WmK9hJIkngYw+ZQHyLkO28uwo0lCQ+c lk6ARR0Xdtc8/rkWLijbFEMaWF4nF1D90iZE3JILJd4tu3cCJqiEdrTZGHe64wQ5 K6XQLgBNYFfasKq4gw3NGT9wP1cb4zNscBcK6V8G7FyzDDmY6ElMEXePGEpf+zlk 0BrkbDs19k47y6jpyaZLkwy+26aN7RstBGT64qgL3Nbd3OgR5jsXynVH6mFnCQ9I RGgpLMXhYtqd14vrcn1bs9HVPqBzdkNc3j5Y5JUGWWe90QOM1CAWLkFUAwiOalnW DIwp67OroPMrsjTLEOKc2wKQoSsJmXU= -----END CERTIFICATE-----Generated at Sun Aug 24 10:52:38 2025 by rpki-client