$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a61a605-ff79-3024-8d2d-f8ef92039b0b.roa File: 1a61a605-ff79-3024-8d2d-f8ef92039b0b.roa (raw, json) Hash identifier: CVKorUkUENnhqN3XPKq3obJC3YmkAcctbDkmh0SgxT8= Subject key identifier: BC:7F:CD:1A:27:8E:F5:6F:2C:B9:9E:F3:39:97:40:0F:1B:B4:94:F8 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A3E45A27678CBB5ED88C51F00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a61a605-ff79-3024-8d2d-f8ef92039b0b.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 396356 IP address blocks: 216.170.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a2:76:78:cb:b5:ed:88:c5:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=f6852ec1-e4b2-470d-94c6-3783f58d2144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:ab:60:67:0e:39:a7:b8:4d:c2:16:de:30: 0f:b1:16:9a:c8:6f:1f:75:39:1f:70:4f:34:46:1b: 9b:e2:40:62:77:58:52:44:e9:28:00:8d:02:91:4b: 5e:ff:e4:eb:77:39:f1:81:38:0e:2b:f4:bc:52:a8: 1b:3c:2c:81:e1:d7:e8:8c:52:d7:5e:b3:c6:ee:43: ec:30:aa:45:8f:dc:11:1e:98:2d:06:d9:0c:4c:a1: f3:7c:0d:3a:e0:98:8e:82:83:30:db:00:79:17:bd: 00:a4:fa:ee:6c:87:44:55:b3:ad:c4:63:70:7d:bc: de:fe:ae:e0:2b:2b:d5:0d:ee:b6:fb:19:b3:43:90: 09:99:24:fb:42:26:ba:34:96:6e:31:e9:a1:5f:58: 73:58:1e:40:32:b8:72:e9:70:bb:42:02:99:4f:07: 14:6b:a1:0b:d1:35:07:1b:1e:78:4f:43:11:7b:c3: cd:cd:c4:26:41:30:98:85:72:71:18:02:28:75:b6: 6c:d5:16:15:71:9f:bb:f4:47:6b:c4:e9:eb:4e:58: 75:7c:ad:b6:3f:90:8e:1a:5f:a0:27:d6:98:8d:de: 97:ee:cb:a3:08:7c:d6:e4:00:0b:b2:fe:19:6c:fb: ed:fa:01:a2:52:95:1e:4a:2e:d2:13:1d:9e:ee:86: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7F:CD:1A:27:8E:F5:6F:2C:B9:9E:F3:39:97:40:0F:1B:B4:94:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a61a605-ff79-3024-8d2d-f8ef92039b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f6:9e:e6:5d:55:da:37:8b:0e:39:f4:de:eb:34:98:84:79: 79:45:f6:db:eb:67:ac:e4:0a:d1:b7:a8:81:c5:fe:13:52:9d: 34:2d:f6:ca:f4:02:46:e9:0a:11:75:bc:57:a8:39:5c:59:53: 61:d5:10:65:16:5f:96:6e:b2:ea:49:a5:8c:80:db:f8:11:26: 1f:6d:cb:50:fc:2f:88:a7:d9:53:3d:aa:3b:44:b0:41:fd:0f: 90:99:59:20:0c:a0:6a:b2:34:00:ed:c1:a5:5e:6f:7a:da:df: ae:7a:88:3c:79:0f:09:b5:21:c1:00:18:18:df:0b:23:5b:67: 20:59:09:20:15:70:c8:42:f6:ca:79:29:a1:fd:78:79:08:ad: b7:b9:42:82:05:3e:2a:65:8d:b6:1c:cf:42:96:ee:4f:ef:7c: 8c:bd:50:f3:55:41:dc:64:5e:c0:a5:9b:f4:ef:8d:32:e1:db: e8:6d:5e:c8:5d:94:a9:a3:84:d2:12:a2:50:70:29:e2:67:94: 30:fe:56:9a:1e:40:7a:90:5e:68:ba:1e:fe:dd:ed:c3:9a:e2: 1f:52:6c:29:54:71:ce:55:6d:37:03:52:a6:08:35:19:32:89: ec:70:ac:56:92:6f:a9:16:65:60:f1:49:06:97:9b:95:7d:93: 70:13:6c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaJ2eMu17YjFHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk ZjY4NTJlYzEtZTRiMi00NzBkLTk0YzYtMzc4M2Y1OGQyMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8SrYGcOOae4TcIW3jAPsRaayG8fdTkfcE80 Rhub4kBid1hSROkoAI0CkUte/+TrdznxgTgOK/S8UqgbPCyB4dfojFLXXrPG7kPs MKpFj9wRHpgtBtkMTKHzfA064JiOgoMw2wB5F70ApPrubIdEVbOtxGNwfbze/q7g KyvVDe62+xmzQ5AJmST7Qia6NJZuMemhX1hzWB5AMrhy6XC7QgKZTwcUa6EL0TUH Gx54T0MRe8PNzcQmQTCYhXJxGAIodbZs1RYVcZ+79EdrxOnrTlh1fK22P5COGl+g J9aYjd6X7sujCHzW5AALsv4ZbPvt+gGiUpUeSi7SEx2e7obC1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx/zRonjvVvLLme8zmXQA8btJT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWE2MWE2MDUtZmY3OS0z MDI0LThkMmQtZjhlZjkyMDM5YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL2nuZdVdo3iw459N7rNJiEeXlF9tvrZ6zkCtG3qIHF/hNSnTQt9sr0 AkbpChF1vFeoOVxZU2HVEGUWX5ZusupJpYyA2/gRJh9ty1D8L4in2VM9qjtEsEH9 D5CZWSAMoGqyNADtwaVeb3ra3656iDx5Dwm1IcEAGBjfCyNbZyBZCSAVcMhC9sp5 KaH9eHkIrbe5QoIFPipljbYcz0KW7k/vfIy9UPNVQdxkXsClm/TvjTLh2+htXshd lKmjhNISolBwKeJnlDD+VpoeQHqQXmi6Hv7d7cOa4h9SbClUcc5VbTcDUqYINRky iexwrFaSb6kWZWDxSQaXm5V9k3ATbK4= -----END CERTIFICATE-----Generated at Sun Jun 29 14:18:08 2025 by rpki-client