$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/9b49a697-7440-35bd-8b7f-87447ca39c8b.roa File: 9b49a697-7440-35bd-8b7f-87447ca39c8b.roa (raw, json) Hash identifier: CgCrBwWmj8cuD7XPxkglDpUnK7oVrQaRQHnGg2o53nM= Subject key identifier: AE:58:C6:AA:19:F3:6C:E5:C7:AA:5A:D3:CA:68:39:5D:25:6E:40:8F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A53359A8941D67E2FD8938100 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/9b49a697-7440-35bd-8b7f-87447ca39c8b.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 46450 IP address blocks: 64.52.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:9a:89:41:d6:7e:2f:d8:93:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=b61410a0-c203-40e9-97e5-d71db05b0402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:41:8e:60:2a:4f:5e:17:05:b2:29:63:70:04: af:04:b3:82:97:af:d8:9d:7a:12:51:96:01:0f:f3: 5a:f1:1e:f5:bb:26:1d:99:e5:b5:dc:25:2c:c2:80: 87:ee:9c:99:e6:fb:43:3e:85:d0:85:63:21:33:27: f5:f6:d3:ae:8c:26:dd:7a:03:6a:38:04:9f:c0:d7: 89:9e:16:45:aa:bd:18:d5:69:e3:12:e7:d1:fc:eb: 03:55:01:6c:89:70:dd:89:19:8d:c4:40:26:a4:eb: ad:96:35:82:b8:2e:88:0d:d1:77:a3:1e:3a:dd:5d: 81:c9:8c:2a:da:e9:33:d3:7f:9e:59:71:27:49:ee: a8:06:10:d0:ce:cf:73:69:67:40:94:8b:90:a9:59: d4:44:8c:95:76:11:1b:2f:77:30:54:aa:12:b9:10: d3:9a:67:e0:6c:8c:88:9f:47:7f:2e:24:eb:1d:2c: 2d:5d:e9:df:f9:ae:48:53:1d:f9:1c:a0:65:a6:cc: 47:bf:88:38:4a:5f:35:f7:f6:bd:86:60:6a:7f:09: 2d:6a:f1:9e:c0:1a:5d:9a:8a:85:c2:1d:8b:e7:83: c3:70:a4:f7:c3:86:23:9e:6b:e4:79:c3:7e:3b:66: ad:e4:97:3a:f1:4f:0c:b4:9e:54:08:16:fb:9d:f3: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:C6:AA:19:F3:6C:E5:C7:AA:5A:D3:CA:68:39:5D:25:6E:40:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/9b49a697-7440-35bd-8b7f-87447ca39c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 64.52.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8e:4d:f2:ee:aa:49:85:fd:5a:d6:7e:1c:a2:c2:fd:f6:1f: 20:ce:75:ff:8c:d7:04:a3:ef:e1:7b:7a:6b:31:ac:bf:da:f4: 31:8d:f8:b9:88:83:18:13:7d:13:0f:bc:7b:99:cd:38:f2:0b: bf:bc:ee:25:31:1e:0e:20:73:5e:50:50:0c:5b:37:22:e8:d8: b2:c4:85:36:c8:4a:11:79:bf:12:c0:59:4a:b2:aa:f8:e4:0d: 8f:92:a2:9e:6b:21:0b:00:4f:ee:80:f4:4f:3e:be:af:7d:3f: 6b:4d:fa:ef:af:f0:04:dc:c7:d8:33:30:d4:bf:71:53:d1:0e: 93:e4:f2:63:1b:48:6d:b6:32:51:29:16:a0:1f:bb:fb:b0:8f: ac:40:f8:81:2f:9c:2e:bc:a8:c7:5a:ef:0c:fa:57:7d:2f:cd: 8f:16:b2:d7:c6:33:75:e4:29:9e:98:ed:92:ea:77:ba:46:58: bc:a5:65:b2:10:2f:97:25:36:68:f5:0d:48:62:88:db:31:de: 81:84:b7:d2:44:cd:0c:0b:3e:66:c1:8a:71:fe:21:59:a8:ec: 91:fa:17:66:91:05:a1:5b:92:52:6c:19:6e:d2:44:31:d0:7b: c1:78:fd:79:37:b5:43:16:ce:b0:7d:6b:9d:73:f5:97:8d:d7: 5d:3b:71:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNZqJQdZ+L9iTgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk YjYxNDEwYTAtYzIwMy00MGU5LTk3ZTUtZDcxZGIwNWIwNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkGOYCpPXhcFsiljcASvBLOCl6/YnXoSUZYB D/Na8R71uyYdmeW13CUswoCH7pyZ5vtDPoXQhWMhMyf19tOujCbdegNqOASfwNeJ nhZFqr0Y1WnjEufR/OsDVQFsiXDdiRmNxEAmpOutljWCuC6IDdF3ox463V2ByYwq 2ukz03+eWXEnSe6oBhDQzs9zaWdAlIuQqVnURIyVdhEbL3cwVKoSuRDTmmfgbIyI n0d/LiTrHSwtXenf+a5IUx35HKBlpsxHv4g4Sl819/a9hmBqfwktavGewBpdmoqF wh2L54PDcKT3w4YjnmvkecN+O2at5Jc68U8MtJ5UCBb7nfMCswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5YxqoZ82zlx6pa08poOV0lbkCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOWI0OWE2OTctNzQ0MC0z NWJkLThiN2YtODc0NDdjYTM5YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQDQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiOTfLuqkmF/VrWfhyiwv32HyDOdf+M1wSj7+F7emsxrL/a9DGN+LmI gxgTfRMPvHuZzTjyC7+87iUxHg4gc15QUAxbNyLo2LLEhTbIShF5vxLAWUqyqvjk DY+Sop5rIQsAT+6A9E8+vq99P2tN+u+v8ATcx9gzMNS/cVPRDpPk8mMbSG22MlEp FqAfu/uwj6xA+IEvnC68qMda7wz6V30vzY8WstfGM3XkKZ6Y7ZLqd7pGWLylZbIQ L5clNmj1DUhiiNsx3oGEt9JEzQwLPmbBinH+IVmo7JH6F2aRBaFbklJsGW7SRDHQ e8F4/Xk3tUMWzrB9a51z9ZeN1107cRI= -----END CERTIFICATE-----Generated at Tue Jul 1 20:46:00 2025 by rpki-client