$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/692d73d3-f560-3594-8cf0-f8007fe6ac58.roa File: 692d73d3-f560-3594-8cf0-f8007fe6ac58.roa (raw, json) Hash identifier: 7wcKTaCoyU3ub+AwsFTA2Eprj+RzWTG4x0ySSB8AWg4= Subject key identifier: 3A:48:27:7B:52:0E:1F:A4:AD:C1:EB:7F:A7:8B:81:82:B3:37:8E:40 Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584A58CB143351F185DAC7E83800 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/692d73d3-f560-3594-8cf0-f8007fe6ac58.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 22504 IP address blocks: 162.118.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:14:33:51:f1:85:da:c7:e8:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=c979996e-2f4a-4584-942c-994449ea2202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:6f:5c:16:69:71:a9:50:bf:73:1a:72:33: 4c:8a:34:52:d7:6b:35:58:49:17:58:cc:39:b7:7c: 7a:f0:14:3b:9f:70:b9:6c:57:cf:80:26:07:08:3c: 44:30:dd:6a:7f:91:a7:21:56:44:50:82:6c:a6:7f: 6f:a7:6a:e7:c1:30:5e:ee:14:ae:61:ce:07:21:7b: 3d:55:98:22:ff:9c:11:ac:fb:57:2e:78:7b:a5:fb: 74:d5:f1:4e:12:ce:6e:8a:41:ab:c2:74:5f:b0:ef: 9a:3a:60:39:0e:7d:29:05:b6:40:25:d1:96:c3:e6: fb:27:ad:80:0d:b9:c2:16:28:61:40:be:b7:00:1d: 7c:81:c4:89:89:e0:aa:ef:78:83:47:74:ab:39:9f: 45:0e:0b:c8:52:13:7c:27:62:4b:b6:a8:f3:a1:7a: c0:45:b6:11:38:c2:a4:1f:bd:47:95:1f:89:f8:0c: 42:09:ef:a0:d3:d3:3c:02:52:cb:37:28:0f:3e:59: 72:7c:6f:e6:55:d3:a6:0d:46:4a:7c:0a:6f:91:4b: 8a:e6:30:72:27:03:92:06:6b:f3:92:dd:75:70:82: 80:eb:0e:60:96:1e:2e:1c:c9:32:3f:6c:82:46:cd: 7b:32:ec:44:65:bd:41:b7:22:56:e8:e2:a9:55:68: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:48:27:7B:52:0E:1F:A4:AD:C1:EB:7F:A7:8B:81:82:B3:37:8E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/692d73d3-f560-3594-8cf0-f8007fe6ac58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:95:42:e2:d3:c5:66:a3:a6:8d:6c:45:1a:c8:12:9c:86:68: 36:73:77:36:51:a6:7c:63:a0:a8:8b:0b:a5:ac:32:19:89:1b: 43:c9:9c:a8:6b:aa:85:c3:a3:dc:c1:ad:24:e9:ca:d2:30:2d: fd:94:55:d3:31:94:d5:af:ac:ae:cf:9f:61:c8:36:b4:40:44: 30:50:59:0e:8a:52:00:6e:05:f5:0c:3e:ff:ab:81:bf:2d:d7: c8:e5:99:f8:a8:58:02:50:87:73:92:9c:fe:62:03:93:e7:78: 75:d9:21:ef:cd:ab:76:65:c4:dc:1a:8a:ec:ca:f6:d9:0c:ce: 97:fe:ff:22:76:07:15:28:7f:ad:0a:07:c7:3a:5f:a6:81:72: 69:92:22:f3:bd:22:77:52:2a:a5:a6:a6:2e:8a:c6:1b:15:54: 7c:95:48:35:1a:ce:e9:8a:33:6b:e7:03:ea:0b:3d:fb:10:ac: 45:0c:59:67:a7:8b:f9:35:0e:8a:4b:b8:e5:87:78:e9:c6:06: 8a:7a:11:4f:9d:44:3a:e1:e9:ee:0c:f0:b7:1b:2f:ab:39:cc: 99:3a:e8:ae:cb:8c:77:cc:d7:5c:4f:b0:74:ef:dc:ed:15:af: ac:fb:91:bf:d9:87:2c:b5:e9:80:41:a1:bf:08:97:21:ca:df: 60:ef:9d:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYyxQzUfGF2sfoOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk Yzk3OTk5NmUtMmY0YS00NTg0LTk0MmMtOTk0NDQ5ZWEyMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxtvXBZpcalQv3MacjNMijRS12s1WEkXWMw5 t3x68BQ7n3C5bFfPgCYHCDxEMN1qf5GnIVZEUIJspn9vp2rnwTBe7hSuYc4HIXs9 VZgi/5wRrPtXLnh7pft01fFOEs5uikGrwnRfsO+aOmA5Dn0pBbZAJdGWw+b7J62A DbnCFihhQL63AB18gcSJieCq73iDR3SrOZ9FDgvIUhN8J2JLtqjzoXrARbYROMKk H71HlR+J+AxCCe+g09M8AlLLNygPPllyfG/mVdOmDUZKfApvkUuK5jByJwOSBmvz kt11cIKA6w5glh4uHMkyP2yCRs17MuxEZb1BtyJW6OKpVWh8sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpIJ3tSDh+krcHrf6eLgYKzN45AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvNjkyZDczZDMtZjU2MC0z NTk0LThjZjAtZjgwMDdmZTZhYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+VQuLTxWajpo1sRRrIEpyGaDZzdzZRpnxjoKiLC6WsMhmJG0PJnKhr qoXDo9zBrSTpytIwLf2UVdMxlNWvrK7Pn2HINrRARDBQWQ6KUgBuBfUMPv+rgb8t 18jlmfioWAJQh3OSnP5iA5PneHXZIe/Nq3ZlxNwaiuzK9tkMzpf+/yJ2BxUof60K B8c6X6aBcmmSIvO9IndSKqWmpi6KxhsVVHyVSDUazumKM2vnA+oLPfsQrEUMWWen i/k1DopLuOWHeOnGBop6EU+dRDrh6e4M8LcbL6s5zJk66K7LjHfM11xPsHTv3O0V r6z7kb/Zhyy16YBBob8IlyHK32DvnSk= -----END CERTIFICATE-----Generated at Tue Jul 1 13:36:46 2025 by rpki-client