$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa File: 3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa (raw, json) Hash identifier: EIGYRxCmn1LWYsd8YGp+fy5Fm37Dsp7rbR8M5mvF0+o= Subject key identifier: FD:9A:82:2E:1D:DB:DF:C5:1C:EA:B9:27:56:45:D5:C2:7E:04:BC:25 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F43285849DF4658490F033760E1D690A0 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa Signing time: Fri 16 May 2025 12:20:49 +0000 ROA not before: Fri 16 May 2025 12:20:49 +0000 ROA not after: Thu 14 Aug 2025 12:20:49 +0000 asID: 398083 IP address blocks: 192.35.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:46:58:49:0f:03:37:60:e1:d6:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: May 16 12:20:49 2025 GMT Not After : Aug 14 12:20:49 2025 GMT Subject: CN=b70bccab-1bfb-4101-aafa-7219754d40fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:15:7d:88:26:d4:2a:5a:36:53:94:a2:81: c6:7b:50:7e:c7:e3:d8:1d:8e:21:f1:13:34:ef:26: 9c:d3:ff:5c:b9:c3:80:1a:c8:6e:70:33:f6:de:75: 04:9c:63:2c:0b:82:f9:f8:81:19:92:e7:d4:53:71: e1:ab:a5:18:f7:cf:37:b8:a5:fd:0e:f5:df:a8:72: 73:e8:37:e5:4f:b5:7e:49:65:6b:8c:6f:08:4b:1f: 3c:10:4a:68:ee:fc:19:f4:e2:17:03:0b:ef:a1:a3: 1f:35:5e:08:8d:85:b2:44:ca:94:6a:47:9a:2b:b5: 61:00:b5:96:c7:d5:27:0a:85:7f:4b:85:ed:48:2d: b4:66:8c:3c:32:29:6d:c4:89:31:a7:7d:5d:32:60: 97:0a:c5:2b:60:d3:17:1c:67:69:87:ce:15:33:c8: 35:29:3d:6b:1e:e5:fb:d9:f6:7c:f0:2c:6b:a4:b3: 5d:02:32:9e:98:63:be:e1:59:37:8c:5f:78:f3:7a: 69:0a:ce:bd:ff:41:63:6f:33:61:8f:c9:26:b9:a4: b9:b6:3a:89:0f:24:b3:00:bd:9f:85:cd:75:a3:4f: bf:27:93:10:c5:6c:df:65:27:78:50:64:ab:80:26: 4f:40:8b:50:91:c7:5f:84:d0:4d:4b:a8:4d:35:55: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9A:82:2E:1D:DB:DF:C5:1C:EA:B9:27:56:45:D5:C2:7E:04:BC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/3ac2f426-8b20-3807-8729-c56bcbde4bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.35.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cc:4c:9f:88:31:28:50:73:e2:ce:01:0d:26:54:9d:3b:f5: 86:6a:19:ab:a8:73:67:84:ed:c4:5d:5e:f1:30:44:49:1f:23: 49:9b:ba:a2:6c:68:16:88:ce:93:64:e5:2b:79:82:1f:78:ad: 8c:f7:ba:a8:a8:f3:89:f0:68:b7:27:88:e4:76:a1:01:e9:6e: 19:76:10:76:52:96:5d:2f:03:7a:e7:b9:32:e4:ca:fe:83:1b: 05:5c:0e:b9:2a:b9:fc:51:ba:7b:46:4a:0e:7e:0f:bf:7b:b5: 84:f8:2c:0e:5c:3b:f6:4c:8e:e8:a0:eb:10:e6:07:ad:0f:79: 65:49:f7:34:72:d9:f1:6f:7b:49:ed:8d:9b:8d:83:14:30:63: e0:92:aa:71:fb:45:e6:46:c2:97:0d:d8:84:c2:28:24:8f:59: 07:61:ad:5f:2a:6a:36:d8:24:3b:a9:cc:78:b8:c0:df:0d:4c: 12:f0:0c:08:63:08:ea:0b:fd:df:c3:99:08:94:18:cd:6f:54: 4f:5d:30:5b:f2:7f:52:0f:3f:99:a5:ff:a0:68:c4:9f:e1:ba: 82:cb:b9:73:ac:b0:5a:b5:87:d5:d7:95:b2:61:1e:ea:39:68: 87:7b:69:82:77:98:eb:8f:cb:8d:2f:19:7b:f9:4f:0a:04:37: 69:3d:99:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfRlhJDwM3YOHWkKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDUxNjEyMjA0OVoXDTI1MDgxNDEyMjA0OVowLzEtMCsGA1UEAxMk YjcwYmNjYWItMWJmYi00MTAxLWFhZmEtNzIxOTc1NGQ0MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8YVfYgm1CpaNlOUooHGe1B+x+PYHY4h8RM0 7yac0/9cucOAGshucDP23nUEnGMsC4L5+IEZkufUU3Hhq6UY9883uKX9DvXfqHJz 6DflT7V+SWVrjG8ISx88EEpo7vwZ9OIXAwvvoaMfNV4IjYWyRMqUakeaK7VhALWW x9UnCoV/S4XtSC20Zow8MiltxIkxp31dMmCXCsUrYNMXHGdph84VM8g1KT1rHuX7 2fZ88CxrpLNdAjKemGO+4Vk3jF9483ppCs69/0FjbzNhj8kmuaS5tjqJDySzAL2f hc11o0+/J5MQxWzfZSd4UGSrgCZPQItQkcdfhNBNS6hNNVWdZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2agi4d29/FHOq5J1ZF1cJ+BLwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvM2FjMmY0MjYtOGIyMC0z ODA3LTg3MjktYzU2YmNiZGU0YmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzMTJ+IMShQc+LOAQ0mVJ079YZqGauoc2eE7cRdXvEwREkfI0mbuqJs aBaIzpNk5St5gh94rYz3uqio84nwaLcniOR2oQHpbhl2EHZSll0vA3rnuTLkyv6D GwVcDrkqufxRuntGSg5+D797tYT4LA5cO/ZMjuig6xDmB60PeWVJ9zRy2fFve0nt jZuNgxQwY+CSqnH7ReZGwpcN2ITCKCSPWQdhrV8qajbYJDupzHi4wN8NTBLwDAhj COoL/d/DmQiUGM1vVE9dMFvyf1IPP5ml/6BoxJ/huoLLuXOssFq1h9XXlbJhHuo5 aId7aYJ3mOuPy40vGXv5TwoEN2k9mbU= -----END CERTIFICATE-----Generated at Mon Jun 30 23:40:34 2025 by rpki-client