$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa File: cec05261-0f78-3265-830a-98a87b1c4a62.roa (raw, json) Hash identifier: 3gLs4CXawlkAETBgXFls6GmQKcBv3i73Yi784aWAawg= Subject key identifier: 70:92:D6:39:2A:52:D2:36:90:0E:66:A5:D9:2E:CB:94:F8:32:9F:E4 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A4C3B16617AABC091E3B8BC00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 27602 IP address blocks: 204.48.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:16:61:7a:ab:c0:91:e3:b8:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=7f9b1563-bc4d-4d1e-a311-1fcbeb4dd89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:f8:22:70:19:b9:cc:fc:eb:02:16:cf:06: 92:9b:85:c6:99:a2:d3:30:e9:b8:3a:0a:fe:ca:9f: 70:83:74:37:62:45:5e:2f:7b:a6:4b:4f:e2:7f:b5: a1:be:34:1f:8e:74:2c:cf:d6:f9:73:b2:3d:3a:6f: 50:b9:9f:c7:80:30:60:52:39:15:35:78:63:b8:bb: 85:e5:55:63:b2:0f:d2:19:e7:22:97:f2:5a:5f:89: 83:90:34:ec:e3:9c:de:38:dc:78:34:75:5d:d5:6b: d1:31:c3:15:89:81:e0:85:dd:fd:8c:a2:e9:48:22: d7:b6:5f:80:48:52:49:d7:44:77:99:10:7e:78:53: 82:f2:25:34:2e:dd:09:e0:01:8c:41:bd:a8:ee:0a: f7:72:6c:18:56:e9:42:c6:2f:20:65:e8:e0:80:3a: a3:7c:a5:b5:03:fd:b4:75:4c:e6:aa:c3:e9:58:e8: 3e:d2:d3:1d:5b:08:e9:56:8b:4c:52:69:44:6e:15: bd:3c:36:1d:9e:e4:7a:f3:e8:1c:1e:b1:f6:92:f3: f1:2a:4e:5b:b7:0a:7c:79:2f:e7:ba:fd:a8:55:31: ca:87:9d:92:94:4d:dc:b9:4b:ad:2b:ef:93:51:a4: 7c:52:8e:42:36:42:3e:0d:bc:84:12:17:01:67:59: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:D6:39:2A:52:D2:36:90:0E:66:A5:D9:2E:CB:94:F8:32:9F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 204.48.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c2:eb:35:37:c1:77:f8:c2:d8:a8:f6:e9:22:02:f1:c4:f2: dd:67:4c:a5:8b:84:a1:21:ea:20:8f:66:cd:a6:47:56:e7:29: be:45:16:ba:d1:eb:86:ed:ef:ad:3f:35:2c:63:99:bc:a4:e4: a8:6c:0b:30:8e:22:4d:b1:bb:d3:19:e3:d3:cc:34:b1:9a:21: ef:87:94:57:ff:24:88:79:1c:dd:25:a3:bd:0e:85:ff:bf:09: 9b:07:d8:05:00:60:00:e8:c2:31:ca:38:84:69:20:84:3d:f6: 96:f9:8f:f5:39:c8:fd:f8:a7:9e:ba:64:e6:94:ba:32:52:42: ae:26:4d:7d:c0:cc:22:7c:92:5b:55:98:75:ee:e2:0a:4e:29: 6b:79:ee:98:f2:1c:56:33:2e:c0:4f:b1:5a:b0:a5:cb:3c:9e: 18:ad:1c:c3:7a:c0:b9:5a:1b:8c:46:2f:7a:c2:26:c1:79:37: ea:74:7b:7e:54:4e:80:69:46:c5:3a:e2:09:c1:f6:4f:b5:5f: fc:ce:6f:c4:04:4f:a8:eb:ac:89:23:c3:06:98:b2:28:d4:82: 75:63:e6:2a:96:ac:90:c1:be:21:51:f5:1c:4f:6e:36:23:8c: b3:62:b1:7b:bc:6f:fb:4e:6a:2c:b3:9a:46:b5:46:e4:b0:61: 5d:44:d1:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxZheqvAkeO4vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk N2Y5YjE1NjMtYmM0ZC00ZDFlLWEzMTEtMWZjYmViNGRkODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojf4InAZucz86wIWzwaSm4XGmaLTMOm4Ogr+ yp9wg3Q3YkVeL3umS0/if7WhvjQfjnQsz9b5c7I9Om9QuZ/HgDBgUjkVNXhjuLuF 5VVjsg/SGecil/JaX4mDkDTs45zeONx4NHVd1WvRMcMViYHghd39jKLpSCLXtl+A SFJJ10R3mRB+eFOC8iU0Lt0J4AGMQb2o7gr3cmwYVulCxi8gZejggDqjfKW1A/20 dUzmqsPpWOg+0tMdWwjpVotMUmlEbhW9PDYdnuR68+gcHrH2kvPxKk5btwp8eS/n uv2oVTHKh52SlE3cuUutK++TUaR8Uo5CNkI+DbyEEhcBZ1kdfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCS1jkqUtI2kA5mpdkuy5T4Mp/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VjMDUyNjEtMGY3OC0z MjY1LTgzMGEtOThhODdiMWM0YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDAjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbC6zU3wXf4wtio9ukiAvHE8t1nTKWLhKEh6iCPZs2mR1bnKb5FFrrR 64bt760/NSxjmbyk5KhsCzCOIk2xu9MZ49PMNLGaIe+HlFf/JIh5HN0lo70Ohf+/ CZsH2AUAYADowjHKOIRpIIQ99pb5j/U5yP34p566ZOaUujJSQq4mTX3AzCJ8kltV mHXu4gpOKWt57pjyHFYzLsBPsVqwpcs8nhitHMN6wLlaG4xGL3rCJsF5N+p0e35U ToBpRsU64gnB9k+1X/zOb8QET6jrrIkjwwaYsijUgnVj5iqWrJDBviFR9RxPbjYj jLNisXu8b/tOaiyzmka1RuSwYV1E0dQ= -----END CERTIFICATE-----Generated at Tue Jul 1 03:59:13 2025 by rpki-client