$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa File: 1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa (raw, json) Hash identifier: VhMl0RBtpkuTZeqvpqr5XGnFjonGQkSjv3+KlJzVqXU= Subject key identifier: B0:99:F5:F2:84:36:9D:F7:9F:C8:2F:DC:E5:4D:F7:86:10:35:EB:6D Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584A3B7B038D5A3EBEA10FF2F280 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 29744 IP address blocks: 216.196.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:03:8d:5a:3e:be:a1:0f:f2:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=bfde23a8-556a-44b5-81f8-db85edd9ae7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5b:ed:da:d5:76:0e:b5:b1:0c:c5:42:d4:ae: ca:b3:5d:40:5d:e9:6b:f2:ec:1b:e0:b4:41:c7:11: dd:c4:fa:a6:fb:37:1f:67:23:21:bb:5c:6f:ec:0f: 8f:15:78:53:7c:7d:d3:e3:98:03:19:fc:ac:54:2d: fc:06:09:d7:53:c2:42:56:cb:78:c7:30:0c:d6:19: bf:f4:3e:19:9b:e1:6b:a8:14:e8:4a:0d:b0:fc:a6: f1:59:43:12:40:d8:d5:db:bb:1a:c8:72:18:a2:a6: c3:ae:b0:bd:7a:c7:55:b1:b4:89:f4:f7:04:a8:2d: fb:07:4b:c5:65:57:af:b6:6e:df:2a:b5:3f:1d:20: 08:78:5c:13:26:f9:01:6d:f9:a9:82:99:e4:59:54: 78:6b:df:cf:ea:63:8f:1a:32:8d:c0:fa:98:a5:c2: 86:3b:c7:a6:7a:7e:8e:52:85:b7:09:99:18:29:88: b8:37:f0:6b:13:48:a3:bd:41:67:74:b8:d8:d4:bb: 80:bd:d7:2c:4f:24:74:d5:17:79:a9:a4:3b:68:5a: e9:86:d9:7c:dc:16:2c:a9:5d:10:02:94:6f:08:47: f9:10:dd:6c:bd:e2:79:a7:e9:ec:e6:80:61:c3:e1: 27:95:51:e4:c0:4e:c7:88:c6:eb:fa:d7:e5:0f:5d: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:99:F5:F2:84:36:9D:F7:9F:C8:2F:DC:E5:4D:F7:86:10:35:EB:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:0b:de:0c:16:af:35:c6:51:10:0a:7a:6c:4c:42:36:89:5a: 4c:b2:44:12:c4:f0:a3:2c:d2:49:e4:56:71:db:90:79:f0:19: a4:d9:63:92:5d:b8:70:af:d0:df:4e:b4:f4:34:6d:1e:5e:0c: 45:95:dc:df:c5:48:4c:19:31:87:7f:e3:f2:56:93:be:e3:0c: de:75:e4:2d:6b:77:53:91:20:39:7a:52:c3:0d:94:b6:45:71: 73:7f:0f:2c:0b:e1:32:9b:b2:38:f7:44:f8:74:55:a6:27:64: 2d:52:35:21:35:70:1b:af:1d:99:95:8f:ba:e6:22:fc:18:85: d6:27:05:d7:4e:e6:45:11:cc:6f:35:78:b5:a6:db:6f:52:e9: f2:43:4c:3e:cb:36:6b:02:3f:c9:3f:7a:4d:58:d5:aa:c8:d7: 1e:40:6a:97:a5:a5:66:e5:18:05:19:3c:b9:8b:5e:16:1d:7d: 97:e0:a4:6c:c1:e8:39:fb:a1:ae:c3:1b:1f:b1:bc:6c:07:ed: 86:d1:85:4f:d4:0a:5e:0b:c6:f4:7c:fe:45:78:a2:bb:3e:98: 0e:48:74:66:a0:09:3d:4d:f3:5d:fe:43:55:52:8c:28:9f:4f: ca:9c:29:f6:10:1e:9b:99:57:e0:47:42:a1:d9:fb:cc:5b:79: 22:4a:06:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewONWj6+oQ/y8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YmZkZTIzYTgtNTU2YS00NGI1LTgxZjgtZGI4NWVkZDlhZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71vt2tV2DrWxDMVC1K7Ks11AXelr8uwb4LRB xxHdxPqm+zcfZyMhu1xv7A+PFXhTfH3T45gDGfysVC38BgnXU8JCVst4xzAM1hm/ 9D4Zm+FrqBToSg2w/KbxWUMSQNjV27sayHIYoqbDrrC9esdVsbSJ9PcEqC37B0vF ZVevtm7fKrU/HSAIeFwTJvkBbfmpgpnkWVR4a9/P6mOPGjKNwPqYpcKGO8emen6O UoW3CZkYKYi4N/BrE0ijvUFndLjY1LuAvdcsTyR01Rd5qaQ7aFrphtl83BYsqV0Q ApRvCEf5EN1sveJ5p+ns5oBhw+EnlVHkwE7HiMbr+tflD11klwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCZ9fKENp33n8gv3OVN94YQNettMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvMTkyMmFmZTItM2JhYi0z ZTEzLWE3YzAtYzFhODhlNmJlYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoL3gwWrzXGURAKemxMQjaJWkyyRBLE8KMs0knkVnHbkHnwGaTZY5Jd uHCv0N9OtPQ0bR5eDEWV3N/FSEwZMYd/4/JWk77jDN515C1rd1ORIDl6UsMNlLZF cXN/DywL4TKbsjj3RPh0VaYnZC1SNSE1cBuvHZmVj7rmIvwYhdYnBddO5kURzG81 eLWm229S6fJDTD7LNmsCP8k/ek1Y1arI1x5AapelpWblGAUZPLmLXhYdfZfgpGzB 6Dn7oa7DGx+xvGwH7YbRhU/UCl4LxvR8/kV4ors+mA5IdGagCT1N813+Q1VSjCif T8qcKfYQHpuZV+BHQqHZ+8xbeSJKBsE= -----END CERTIFICATE-----Generated at Tue Jul 1 05:07:05 2025 by rpki-client