$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa File: d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa (raw, json) Hash identifier: HpihwHYTOH/PQMAtIhDy0FIjrHRU9X8FrByBsWli7ko= Subject key identifier: 25:CE:02:1C:82:04:2C:A5:AE:C2:C2:BA:0B:2D:92:97:2A:83:93:E2 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584A3B7B032F8C59778777A701C0 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 14511 IP address blocks: 66.231.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:03:2f:8c:59:77:87:77:a7:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=65c66da1-dae5-4683-b60f-152bfcd61ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:2f:7d:02:31:46:5a:5f:3d:61:68:18:e8: 25:3c:fb:9a:10:b1:24:95:d6:1a:fa:cc:b1:4a:75: cc:cc:a4:27:47:41:e3:d9:4b:d2:3c:bb:13:8b:16: c5:18:3d:bc:d9:a4:1d:ec:6c:f8:b7:87:c3:02:6f: db:34:17:43:ce:23:47:7d:6a:b9:54:88:49:01:d6: 44:a1:e6:64:94:63:6c:56:b4:57:1b:a8:db:f5:f5: 24:44:7d:2a:64:ca:20:6f:4c:7d:98:45:12:3a:1e: 4c:6a:a3:38:41:cd:cc:2f:08:8a:86:c8:82:fc:43: 2d:36:61:9f:3a:01:68:42:85:c7:0f:fa:12:cb:10: 96:3a:79:d5:25:a4:2d:04:bc:a6:75:7d:a6:9e:24: 50:7b:c5:25:9b:c9:01:00:20:5b:ac:08:e5:47:a7: eb:ce:e9:7b:a8:69:a1:cd:8f:6f:dd:fe:71:5a:5b: d2:10:d9:6e:99:65:31:ce:f8:aa:5f:4f:49:ba:82: 16:a7:b3:2d:e9:3b:61:e4:b9:ac:17:e3:83:99:f3: 34:7b:9f:5d:7b:97:95:d1:0d:dd:20:97:11:00:71: 79:da:4d:e1:e5:f2:7d:50:f6:55:b8:84:82:b9:b7: 1f:62:59:b8:58:2e:7c:22:9c:7a:1c:73:da:ba:06: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:02:1C:82:04:2C:A5:AE:C2:C2:BA:0B:2D:92:97:2A:83:93:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:26:b8:92:b1:23:41:1a:f3:9c:4b:60:a8:8b:df:ce:91:15: 84:cf:23:99:47:f7:06:de:e2:72:05:ff:2e:7c:0f:10:2c:e6: 30:6d:8d:67:78:81:4a:77:14:36:27:fd:19:19:a1:a7:20:76: 17:54:65:73:cb:d7:78:74:68:f4:62:3e:ea:38:80:7d:2b:57: 34:e3:fd:d0:30:f9:32:f8:22:c6:de:25:19:32:9e:bf:2c:24: d7:39:57:ec:e9:01:32:84:95:dc:48:41:f2:1b:6e:05:31:ea: 7e:e3:1a:5d:ee:10:78:c4:a1:90:61:28:94:52:68:d9:20:d7: b7:27:81:90:5a:f6:01:2c:3a:b5:b9:9d:6d:50:31:db:36:a1: 75:79:9c:bf:d8:f8:ac:01:8d:ed:1b:8e:fa:e3:64:4f:eb:a4: a1:a9:76:f3:39:a1:5a:db:07:e3:33:40:ae:48:36:ae:04:ba: c8:64:8b:62:f9:af:3e:f4:a5:a7:43:c6:37:ad:a8:81:ce:5e: fe:fa:be:82:d6:03:5a:77:9a:07:43:19:c1:51:55:74:fe:7f: 0b:7a:fb:63:fe:37:89:1a:ae:8d:07:b9:67:c9:12:72:17:f9: 23:f5:e1:f7:eb:4c:bf:a2:6d:5e:96:44:94:05:02:d4:69:9c: 10:52:e3:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewMvjFl3h3enAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NjVjNjZkYTEtZGFlNS00NjgzLWI2MGYtMTUyYmZjZDYxZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCwvfQIxRlpfPWFoGOglPPuaELEkldYa+syx SnXMzKQnR0Hj2UvSPLsTixbFGD282aQd7Gz4t4fDAm/bNBdDziNHfWq5VIhJAdZE oeZklGNsVrRXG6jb9fUkRH0qZMogb0x9mEUSOh5MaqM4Qc3MLwiKhsiC/EMtNmGf OgFoQoXHD/oSyxCWOnnVJaQtBLymdX2mniRQe8Ulm8kBACBbrAjlR6frzul7qGmh zY9v3f5xWlvSENlumWUxzviqX09JuoIWp7Mt6Tth5LmsF+ODmfM0e59de5eV0Q3d IJcRAHF52k3h5fJ9UPZVuISCubcfYlm4WC58Ipx6HHPaugZDzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXOAhyCBCylrsLCugstkpcqg5PiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvZDIzODBlMWMtNDU4NC0z ZmJlLTlhYzctYzAwZmM1MTk5NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQudgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQmuJKxI0Ea85xLYKiL386RFYTPI5lH9wbe4nIF/y58DxAs5jBtjWd4 gUp3FDYn/RkZoacgdhdUZXPL13h0aPRiPuo4gH0rVzTj/dAw+TL4IsbeJRkynr8s JNc5V+zpATKEldxIQfIbbgUx6n7jGl3uEHjEoZBhKJRSaNkg17cngZBa9gEsOrW5 nW1QMds2oXV5nL/Y+KwBje0bjvrjZE/rpKGpdvM5oVrbB+MzQK5INq4Eushki2L5 rz70padDxjetqIHOXv76voLWA1p3mgdDGcFRVXT+fwt6+2P+N4karo0HuWfJEnIX +SP14ffrTL+ibV6WRJQFAtRpnBBS42s= -----END CERTIFICATE-----Generated at Tue Jul 1 05:10:10 2025 by rpki-client