$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa File: b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa (raw, json) Hash identifier: qC3eWEPxZhng8qKd7XAqqJyFPz11svTDpiLNR84Zz5E= Subject key identifier: 98:07:4E:A5:42:5C:C2:A5:EC:34:5B:11:84:60:94:A6:2A:2F:06:92 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F43285849DAB889B2CB79C25B68B6F200 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa Signing time: Wed 14 May 2025 21:11:52 +0000 ROA not before: Wed 14 May 2025 21:11:52 +0000 ROA not after: Tue 12 Aug 2025 21:11:52 +0000 asID: 29 IP address blocks: 192.35.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:b8:89:b2:cb:79:c2:5b:68:b6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: May 14 21:11:52 2025 GMT Not After : Aug 12 21:11:52 2025 GMT Subject: CN=e3554d7c-c382-4304-89cd-1f24399f148b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:2f:08:62:a4:4e:7f:fa:08:a1:15:95:79: d1:9c:ec:96:7f:98:bb:63:5f:cb:d9:f9:a5:4e:23: 28:f5:60:4f:80:54:3f:1d:2a:ec:b7:10:0f:c2:f1: c5:37:ea:92:c5:15:94:16:bf:d5:bb:80:8a:c6:c5: c6:26:36:5f:cd:62:26:a4:bd:06:c1:f6:31:81:fe: 76:c0:df:12:57:31:a7:fb:6f:44:37:87:b3:32:2e: 0f:b4:4f:ba:1d:1c:c5:63:39:75:07:fc:c1:4b:af: 33:67:f2:64:40:9a:0d:de:be:f5:5a:28:21:07:7c: a6:f3:fa:c1:89:57:2d:75:54:3a:f5:cb:65:de:1c: 0d:6a:9a:07:7d:32:4c:c5:ba:e2:d6:f3:71:1c:c7: 0a:ee:31:55:a8:fc:ef:fb:0d:03:52:52:ac:b7:66: 55:93:e9:f1:0a:f9:81:3d:e9:cc:28:a0:35:17:a2: 23:35:da:5d:d1:28:82:51:b8:81:b7:9c:67:17:28: 65:70:a4:93:92:94:b5:7c:b3:e1:77:c5:95:b0:fa: 3b:55:b5:06:5a:90:e6:6e:83:02:32:26:9a:7c:38: 7b:ae:54:16:60:07:3f:ce:00:55:a6:34:df:59:45: df:6d:24:30:54:df:a9:bf:45:53:5f:59:2f:53:91: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:07:4E:A5:42:5C:C2:A5:EC:34:5B:11:84:60:94:A6:2A:2F:06:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.35.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:35:4d:7a:44:26:19:21:d4:c7:8a:78:94:a0:49:a2:72:59: b4:7f:5c:ce:3e:aa:1f:6b:ee:ec:e2:7e:aa:97:54:96:09:b8: 6b:e5:a4:e3:17:66:53:a8:7c:9a:01:07:db:ba:e5:32:42:d3: fb:09:9d:03:66:11:f4:f0:ca:53:45:c1:74:22:c0:89:1b:fe: 6e:03:8f:6b:44:25:77:05:87:14:18:81:5a:3e:01:84:05:86: 16:ba:d7:57:d7:dc:73:05:8a:e4:50:ba:b7:a9:01:28:1d:b6: 84:4e:98:96:d9:c4:cc:f2:5f:2b:cf:16:75:8c:fa:80:15:2a: 3d:ac:54:f2:db:8e:4b:36:e5:9e:db:36:bf:ee:4c:11:e2:1f: 1c:f7:3e:49:3f:f2:75:2e:52:e6:c9:9c:07:8b:93:6b:96:f0: b5:72:54:ef:4e:64:fd:74:d9:96:fc:29:e2:42:98:0a:0d:3e: 12:a1:ff:68:c5:a6:c5:96:1c:2e:02:a1:18:2b:38:dd:76:1c: 6f:2b:26:40:25:3b:07:4d:c3:c6:91:9f:da:53:a4:e5:e5:61: e4:28:5d:b8:63:bd:3d:5a:86:fc:c0:36:98:35:98:5d:6c:8d: 37:0a:7a:ba:d7:b4:a3:17:1e:13:44:87:69:57:a4:5e:c0:b2: 3e:ce:c3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnauImyy3nCW2i28gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDUxNDIxMTE1MloXDTI1MDgxMjIxMTE1MlowLzEtMCsGA1UEAxMk ZTM1NTRkN2MtYzM4Mi00MzA0LTg5Y2QtMWYyNDM5OWYxNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUkvCGKkTn/6CKEVlXnRnOyWf5i7Y1/L2fml TiMo9WBPgFQ/HSrstxAPwvHFN+qSxRWUFr/Vu4CKxsXGJjZfzWImpL0GwfYxgf52 wN8SVzGn+29EN4ezMi4PtE+6HRzFYzl1B/zBS68zZ/JkQJoN3r71WighB3ym8/rB iVctdVQ69ctl3hwNapoHfTJMxbri1vNxHMcK7jFVqPzv+w0DUlKst2ZVk+nxCvmB PenMKKA1F6IjNdpd0SiCUbiBt5xnFyhlcKSTkpS1fLPhd8WVsPo7VbUGWpDmboMC MiaafDh7rlQWYAc/zgBVpjTfWUXfbSQwVN+pv0VTX1kvU5EbNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgHTqVCXMKl7DRbEYRglKYqLwaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvYjFhYmI4OWQtZjVhMC0z OWUyLTlmM2UtNzY1ZTJlN2FjMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU1TXpEJhkh1MeKeJSgSaJyWbR/XM4+qh9r7uzifqqXVJYJuGvlpOMX ZlOofJoBB9u65TJC0/sJnQNmEfTwylNFwXQiwIkb/m4Dj2tEJXcFhxQYgVo+AYQF hha611fX3HMFiuRQurepASgdtoROmJbZxMzyXyvPFnWM+oAVKj2sVPLbjks25Z7b Nr/uTBHiHxz3Pkk/8nUuUubJnAeLk2uW8LVyVO9OZP102Zb8KeJCmAoNPhKh/2jF psWWHC4CoRgrON12HG8rJkAlOwdNw8aRn9pTpOXlYeQoXbhjvT1ahvzANpg1mF1s jTcKerrXtKMXHhNEh2lXpF7Asj7Ow/Q= -----END CERTIFICATE-----Generated at Mon Jun 30 05:26:50 2025 by rpki-client