$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa File: 1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa (raw, json) Hash identifier: rUWHZZaI8Vdmm6bSsxIcy5r5yMIDZN5CYssYpMBOLqI= Subject key identifier: 33:B2:20:4F:FD:DE:CF:17:FF:AA:D4:7B:6C:3E:17:1D:D3:9E:C8:15 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F432858495C2446ACA4F9CB538265D0C0 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 29744 IP address blocks: 216.196.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:46:ac:a4:f9:cb:53:82:65:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=316b0f20-80fe-4352-a58e-a36d78fe9b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:6a:90:48:0d:c1:27:fc:7d:5f:98:09:28: cf:37:0f:ba:fb:8e:b7:75:4a:60:2f:46:80:bd:8a: eb:a3:a2:8d:c3:35:f2:c2:42:62:61:9e:2e:00:c2: 14:6d:5e:8a:0f:c3:d9:dc:10:bc:9b:09:77:be:97: 3f:fd:ef:e2:dc:a9:31:2a:95:52:65:36:1b:21:c1: be:40:b6:f1:f7:b3:ee:f4:c2:56:af:4e:00:ac:40: 44:81:13:dc:54:c5:9b:b4:d3:97:fb:be:0f:d0:f6: ae:15:8e:5a:e9:c7:c5:01:f0:4e:93:3f:ee:ba:a2: b1:af:95:d4:f8:f1:aa:8b:be:8e:3b:49:6d:34:23: a9:15:a7:d8:9e:66:31:64:a1:9b:8d:59:d1:5f:53: c7:e3:e3:e3:c3:1f:8d:8d:ba:6c:6e:7d:86:9a:0f: 71:b7:71:08:e0:99:bc:dc:f1:77:7e:98:a6:19:22: 24:4a:88:9f:d1:b4:80:22:95:8d:26:e8:ee:4d:36: 00:e6:75:de:de:11:e3:1a:69:3f:4c:19:39:55:27: c1:48:24:67:10:cb:db:bc:b9:5f:d0:91:87:5d:00: bb:b8:e6:d2:1a:4f:9b:cc:81:8a:18:43:00:9e:2f: ce:70:b3:b9:ee:4a:8b:f2:47:20:09:ff:9f:3f:9c: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B2:20:4F:FD:DE:CF:17:FF:AA:D4:7B:6C:3E:17:1D:D3:9E:C8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:df:53:ec:bd:d3:de:6d:a8:27:c2:3d:2e:83:7e:5b:15:c8: b2:1d:1c:f6:e1:34:37:31:ab:3d:bd:f5:00:95:ed:ab:04:d7: 88:20:17:da:19:6e:19:35:11:51:48:95:f3:03:e9:d0:a3:38: ac:1e:a4:08:00:92:2a:e8:d0:62:3a:d1:09:d1:62:70:e4:67: 44:fe:40:c1:02:97:d2:66:a2:47:8e:d4:7c:68:c7:00:23:34: 16:f7:a9:76:5b:aa:c7:38:99:24:d7:8c:c5:70:cf:ee:dc:94: a0:b0:9c:84:95:53:00:02:06:3c:92:63:f3:80:f7:fc:03:63: 0c:ec:ad:fb:5a:13:5c:f8:37:af:52:b1:38:27:bf:e4:83:1d: 2f:c2:ce:d2:20:5f:27:cc:a5:c9:f8:a0:79:8e:3e:06:c2:ed: ba:a0:f7:5d:20:af:3e:ab:79:ea:ab:41:e4:ca:a4:a6:7d:e9: b2:5a:eb:56:77:47:f9:31:fd:26:7f:26:40:ce:0a:1f:c0:92: 0f:23:75:ff:71:96:82:1d:51:e6:3c:75:13:8a:3f:b7:79:16: bc:7e:5a:bc:1d:fd:b0:f5:1a:12:01:27:31:00:17:08:c6:8f: f0:95:d1:24:3d:8b:0a:97:34:47:24:4b:20:34:aa:46:e8:37: d2:47:f8:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEaspPnLU4Jl0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MzE2YjBmMjAtODBmZS00MzUyLWE1OGUtYTM2ZDc4ZmU5YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVdqkEgNwSf8fV+YCSjPNw+6+463dUpgL0aA vYrro6KNwzXywkJiYZ4uAMIUbV6KD8PZ3BC8mwl3vpc//e/i3KkxKpVSZTYbIcG+ QLbx97Pu9MJWr04ArEBEgRPcVMWbtNOX+74P0PauFY5a6cfFAfBOkz/uuqKxr5XU +PGqi76OO0ltNCOpFafYnmYxZKGbjVnRX1PH4+Pjwx+Njbpsbn2Gmg9xt3EI4Jm8 3PF3fpimGSIkSoif0bSAIpWNJujuTTYA5nXe3hHjGmk/TBk5VSfBSCRnEMvbvLlf 0JGHXQC7uObSGk+bzIGKGEMAni/OcLO57kqL8kcgCf+fP5z3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOyIE/93s8X/6rUe2w+Fx3TnsgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvMTkyMmFmZTItM2JhYi0z ZTEzLWE3YzAtYzFhODhlNmJlYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTfU+y9095tqCfCPS6DflsVyLIdHPbhNDcxqz299QCV7asE14ggF9oZ bhk1EVFIlfMD6dCjOKwepAgAkiro0GI60QnRYnDkZ0T+QMECl9JmokeO1HxoxwAj NBb3qXZbqsc4mSTXjMVwz+7clKCwnISVUwACBjySY/OA9/wDYwzsrftaE1z4N69S sTgnv+SDHS/CztIgXyfMpcn4oHmOPgbC7bqg910grz6reeqrQeTKpKZ96bJa61Z3 R/kx/SZ/JkDOCh/Akg8jdf9xloIdUeY8dROKP7d5Frx+Wrwd/bD1GhIBJzEAFwjG j/CV0SQ9iwqXNEckSyA0qkboN9JH+Ho= -----END CERTIFICATE-----Generated at Sat May 10 14:33:52 2025 by rpki-client