$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c35b570a-df58-3d8a-aebe-7f752ee4ae64.roa File: c35b570a-df58-3d8a-aebe-7f752ee4ae64.roa (raw, json) Hash identifier: T9RtWQG1gWbwmE7A5kf9EhnPMy5oC5aOL0PIgPfoYXo= Subject key identifier: 4A:31:0D:CE:31:5C:E3:9A:78:49:E3:05:A6:AB:BC:ED:88:F8:67:C1 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A506AF60E55A46E964877C9D0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c35b570a-df58-3d8a-aebe-7f752ee4ae64.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 30336 IP address blocks: 216.113.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f6:0e:55:a4:6e:96:48:77:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=15e1cfb7-fdcf-4fcd-9d04-d2133b35b316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:cd:13:bb:33:8e:1b:b8:24:50:93:0d:7a: ea:04:8f:46:b9:85:7b:f9:09:02:f8:28:62:3a:09: 7d:73:c2:1d:72:d2:66:bb:dc:d7:e5:5c:40:be:e9: 13:ca:5a:95:7e:e3:bd:a0:8b:1e:dd:1a:bd:bd:22: cb:c4:67:ec:ce:46:59:4e:92:bb:c2:3a:59:30:ae: 21:21:f3:c3:09:25:c8:60:9c:72:34:07:51:c3:6d: e7:72:4a:c4:2e:0e:0e:a0:7e:38:11:f5:df:a2:dd: d5:a0:16:9e:22:1a:24:50:55:2a:fe:b6:7f:e8:68: fb:b3:e2:59:6c:4b:ae:f5:cf:e9:3b:43:ba:5e:dc: 40:4f:e5:6f:8d:9e:42:04:0a:90:54:32:a4:54:e4: 39:46:c4:4a:28:1c:e2:47:a4:f3:18:8b:83:28:c7: 29:60:61:24:ec:14:3b:be:5f:01:fd:7f:1a:97:68: da:5a:c1:72:4b:ca:b9:d2:6f:a9:0c:95:0e:26:4a: 5a:80:7d:23:51:ff:6a:c4:56:be:fb:80:1b:a9:22: 78:eb:2b:f7:a9:90:3f:0d:9f:04:98:09:be:35:dc: e9:a2:6a:be:02:f5:90:23:0c:e2:34:02:0e:68:aa: fa:a9:8c:45:5a:70:40:3d:b9:44:26:91:a9:2b:c1: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:31:0D:CE:31:5C:E3:9A:78:49:E3:05:A6:AB:BC:ED:88:F8:67:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c35b570a-df58-3d8a-aebe-7f752ee4ae64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 216.113.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:77:03:05:0f:af:a0:5b:1b:e1:68:ef:f0:8b:5d:40:ab:04: a1:18:6a:9a:c5:c3:24:31:09:a4:8e:f9:91:26:ae:f2:bb:ff: c9:5f:1b:7c:2b:c6:18:b3:14:57:c7:a5:74:9b:a0:d9:be:9c: ec:11:1f:94:e8:7e:fe:16:f6:3e:52:98:4b:c0:bf:54:a5:7c: fc:a0:21:11:9a:bd:cf:55:22:fc:4e:82:ba:fc:2a:3d:92:16: 34:81:a1:b6:a2:af:2d:3b:03:82:c1:48:f4:0e:de:78:b4:3f: 0e:3d:38:87:31:38:2e:04:aa:81:40:6b:2b:30:f6:79:ec:f8: b1:96:6e:82:ee:b5:24:38:b4:ff:c3:27:b0:1c:f8:5b:3d:f8: ff:9a:09:9b:53:e4:ce:1a:3e:21:fe:c5:07:cd:6c:8f:09:53: de:4b:fe:1e:f7:de:e9:78:28:97:25:e4:ca:58:13:c3:75:05: 45:bb:a9:6b:41:9b:a3:26:e4:c0:99:45:bf:8a:07:c9:08:f5: c2:35:ee:b2:f5:44:7d:2d:ea:b9:f3:dc:e3:df:b4:8c:43:b0: ae:e5:8f:59:7f:8b:44:72:d6:6c:f2:ac:c6:91:ab:55:39:15: 40:5d:41:b5:67:bc:21:fc:71:93:b9:ce:48:ba:e4:f7:24:b3: 44:d1:df:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQavYOVaRulkh3ydAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk MTVlMWNmYjctZmRjZi00ZmNkLTlkMDQtZDIxMzNiMzViMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjHNE7szjhu4JFCTDXrqBI9GuYV7+QkC+Chi Ogl9c8IdctJmu9zX5VxAvukTylqVfuO9oIse3Rq9vSLLxGfszkZZTpK7wjpZMK4h IfPDCSXIYJxyNAdRw23nckrELg4OoH44EfXfot3VoBaeIhokUFUq/rZ/6Gj7s+JZ bEuu9c/pO0O6XtxAT+VvjZ5CBAqQVDKkVOQ5RsRKKBziR6TzGIuDKMcpYGEk7BQ7 vl8B/X8al2jaWsFyS8q50m+pDJUOJkpagH0jUf9qxFa++4AbqSJ46yv3qZA/DZ8E mAm+Ndzpomq+AvWQIwziNAIOaKr6qYxFWnBAPblEJpGpK8HawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoxDc4xXOOaeEnjBaarvO2I+GfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzM1YjU3MGEtZGY1OC0z ZDhhLWFlYmUtN2Y3NTJlZTRhZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2HFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB3AwUPr6BbG+Fo7/CLXUCrBKEYaprFwyQxCaSO+ZEmrvK7/8lfG3wr xhizFFfHpXSboNm+nOwRH5Tofv4W9j5SmEvAv1SlfPygIRGavc9VIvxOgrr8Kj2S FjSBobairy07A4LBSPQO3ni0Pw49OIcxOC4EqoFAaysw9nns+LGWboLutSQ4tP/D J7Ac+Fs9+P+aCZtT5M4aPiH+xQfNbI8JU95L/h733ul4KJcl5MpYE8N1BUW7qWtB m6Mm5MCZRb+KB8kI9cI17rL1RH0t6rnz3OPftIxDsK7lj1l/i0Ry1mzyrMaRq1U5 FUBdQbVnvCH8cZO5zki65Pcks0TR3wI= -----END CERTIFICATE-----Generated at Tue Jul 1 16:05:14 2025 by rpki-client