$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/097c44a0-7f9a-36a9-9016-4355a163faf9.roa File: 097c44a0-7f9a-36a9-9016-4355a163faf9.roa (raw, json) Hash identifier: 7v+vqqpF1Te1ecpHLNcgXIr4cMRUtr0v7SuKlyKYhV4= Subject key identifier: E4:ED:62:BD:8D:B0:57:8A:A9:31:6D:9F:87:9F:7F:FC:EF:BF:B7:21 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584A3B7B037F38B59005FD6E2E60 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/097c44a0-7f9a-36a9-9016-4355a163faf9.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 29744 IP address blocks: 66.231.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:03:7f:38:b5:90:05:fd:6e:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=2c43b1f2-f1ca-4f06-80b0-2940a966b6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:ee:59:c0:d1:78:4f:b7:3a:70:04:ca:11: 8e:17:e1:8a:c1:0c:1e:a5:6b:b4:1c:50:4b:39:5b: 51:b0:e7:50:91:11:01:1e:e2:77:14:af:bd:c6:77: aa:51:ca:d7:75:c4:0d:da:50:9e:92:8c:69:ac:dc: 18:5f:94:1d:7c:31:95:fb:61:6a:38:ac:56:94:a6: 74:9e:93:af:20:e0:5a:79:52:42:67:08:03:1b:25: 19:88:1e:58:19:f0:e2:4c:16:30:45:42:f2:50:e1: 7f:e3:b2:6d:34:ef:0d:2b:0d:ba:05:96:a0:f0:a6: 86:a9:10:a3:78:b7:0f:a6:36:84:e5:f6:82:ae:3d: a4:73:51:97:c4:0f:78:46:58:0d:65:1e:a3:a2:d1: 2f:9d:3c:d8:36:fe:6d:80:c1:91:e2:c5:67:36:ca: 6c:81:1e:b2:7d:fd:4e:db:67:55:bf:71:da:5b:bb: 2c:f1:5f:67:b6:f2:cc:b4:25:84:6d:7e:78:85:1e: 55:b1:a0:8a:e3:ca:8c:ba:a0:8c:f2:3c:cc:8e:80: f5:36:9c:a4:cc:72:9f:71:dd:2a:59:aa:96:87:f3: fa:b0:7b:cc:65:89:ba:34:87:6b:a1:0f:bb:17:2f: 37:d2:3a:c1:12:5f:75:29:8a:89:28:5e:6c:37:b4: 35:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:ED:62:BD:8D:B0:57:8A:A9:31:6D:9F:87:9F:7F:FC:EF:BF:B7:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/097c44a0-7f9a-36a9-9016-4355a163faf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:95:2a:d5:52:7c:a7:e8:4c:c8:54:3a:ce:b1:cb:36:7e:75: 28:cb:7e:cb:76:1b:e0:b5:59:c8:50:4b:ec:0b:cd:52:ee:29: 09:d1:c1:ce:ec:ba:e5:77:94:62:d0:2a:39:f9:2c:b5:85:68: 6b:81:d4:20:0c:e9:1f:85:d4:fe:39:7d:a1:b2:c4:84:99:b2: de:de:58:d1:d5:b1:95:9d:3a:39:5e:ef:41:b0:30:f3:a3:10: 16:3b:b3:43:24:3e:76:23:3c:ba:6c:60:fa:91:7c:33:c2:92: ad:8a:8d:c2:17:66:5c:6a:5c:25:03:09:a9:ad:39:b6:48:2d: 7b:ab:4e:07:ee:72:01:22:77:4b:49:88:de:d7:c4:10:67:75: cd:44:8a:6a:d1:fb:ba:fb:52:55:6b:87:f3:db:4f:74:77:1b: d0:f8:9c:bb:25:25:b6:cf:8e:0a:2f:d1:83:53:c7:3c:c3:df: b5:69:e4:8e:22:0f:01:f6:73:17:df:5e:56:e5:5f:a8:eb:62: c5:01:82:6a:bc:a2:10:0f:3a:a0:3a:3a:da:9e:87:f9:9f:38: e7:2e:24:24:56:4e:51:6e:9c:7f:ee:fe:b0:e4:ee:49:cc:79: b8:1a:27:cf:fc:aa:78:d8:5e:3b:33:4b:bb:37:c1:ae:9a:38: 16:5c:d5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewN/OLWQBf1uLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MmM0M2IxZjItZjFjYS00ZjA2LTgwYjAtMjk0MGE5NjZiNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVPuWcDReE+3OnAEyhGOF+GKwQwepWu0HFBL OVtRsOdQkREBHuJ3FK+9xneqUcrXdcQN2lCekoxprNwYX5QdfDGV+2FqOKxWlKZ0 npOvIOBaeVJCZwgDGyUZiB5YGfDiTBYwRULyUOF/47JtNO8NKw26BZag8KaGqRCj eLcPpjaE5faCrj2kc1GXxA94RlgNZR6jotEvnTzYNv5tgMGR4sVnNspsgR6yff1O 22dVv3HaW7ss8V9ntvLMtCWEbX54hR5VsaCK48qMuqCM8jzMjoD1NpykzHKfcd0q WaqWh/P6sHvMZYm6NIdroQ+7Fy830jrBEl91KYqJKF5sN7Q10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTtYr2NsFeKqTFtn4eff/zvv7chMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvMDk3YzQ0YTAtN2Y5YS0z NmE5LTkwMTYtNDM1NWExNjNmYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQud4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyVKtVSfKfoTMhUOs6xyzZ+dSjLfst2G+C1WchQS+wLzVLuKQnRwc7s uuV3lGLQKjn5LLWFaGuB1CAM6R+F1P45faGyxISZst7eWNHVsZWdOjle70GwMPOj EBY7s0MkPnYjPLpsYPqRfDPCkq2KjcIXZlxqXCUDCamtObZILXurTgfucgEid0tJ iN7XxBBndc1EimrR+7r7UlVrh/PbT3R3G9D4nLslJbbPjgov0YNTxzzD37Vp5I4i DwH2cxffXlblX6jrYsUBgmq8ohAPOqA6Otqeh/mfOOcuJCRWTlFunH/u/rDk7knM ebgaJ8/8qnjYXjszS7s3wa6aOBZc1aY= -----END CERTIFICATE-----Generated at Tue Jul 1 09:03:39 2025 by rpki-client