$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa File: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (raw, json) Hash identifier: l/VgOdYmsmIp9MYJnNyh6Bx03OfsvT/tbIXTmyJrU14= Subject key identifier: 28:6F:89:58:75:F3:DF:F6:0A:2F:41:F5:36:2C:6C:B9:64:7E:B0:AF Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F43285849ED4FCCEC031C6294DE303EC0 Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 18986 IP address blocks: 202.130.217.0/24 maxlen: 24 203.21.47.0/24 maxlen: 24 203.21.104.0/24 maxlen: 24 203.28.168.0/24 maxlen: 24 203.30.143.0/24 maxlen: 24 203.30.211.0/24 maxlen: 24 203.34.15.0/24 maxlen: 24 203.57.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cc:ec:03:1c:62:94:de:30:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=8c4c23c5-2585-4799-a7e8-469ccf326f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:d2:6a:36:bb:eb:97:c3:7d:65:71:e2:e2: 7c:79:2b:f0:3c:c8:13:69:2f:c6:76:16:b1:59:6b: 91:db:19:68:31:f0:06:c4:c1:93:90:3e:60:b9:f5: 4d:a5:8a:b1:6b:8c:e2:92:90:f1:31:e0:1a:ab:81: 56:97:57:86:58:ec:81:3c:a3:22:19:17:af:bb:43: d4:3b:04:c5:62:24:93:82:ff:01:39:3d:b9:b5:25: 68:59:08:37:57:7d:da:a1:c4:de:7c:c7:e8:6d:e0: 1a:c3:ab:a9:3e:16:01:da:75:8a:ce:a3:e6:c5:43: d0:52:f7:b0:7b:9a:11:0f:30:69:9e:2a:e1:af:9d: e0:99:d1:92:da:3e:96:2b:3e:54:44:22:79:af:7f: 1a:7a:c4:0c:49:e7:49:3e:7a:30:a8:62:5c:60:7b: 62:00:dd:37:57:40:98:35:69:2c:6b:a7:b4:1b:3a: 48:d5:39:8f:51:d5:32:4a:53:ae:ae:90:da:a4:be: 29:7c:f9:51:b2:a8:7c:a4:45:58:26:8f:77:31:7d: 60:5d:99:16:75:28:ad:1b:73:e8:3d:c7:79:17:c1: 83:ad:17:96:fc:d4:a0:69:78:5b:89:cb:76:44:39: b6:73:71:b5:7a:f4:e2:b7:10:e1:20:88:ed:1c:a4: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6F:89:58:75:F3:DF:F6:0A:2F:41:F5:36:2C:6C:B9:64:7E:B0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: 202.130.217.0/24 203.21.47.0/24 203.21.104.0/24 203.28.168.0/24 203.30.143.0/24 203.30.211.0/24 203.34.15.0/24 203.57.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:75:32:f2:52:5b:f2:27:b3:97:4b:21:64:7e:b9:c1:67:10: 6c:5b:49:1d:e1:c4:4f:d1:80:2f:b9:4a:12:32:41:c2:b2:01: d4:3f:a0:b2:44:63:e3:d9:e8:c6:69:0c:c4:ad:2d:bd:10:d5: 6e:66:33:8d:53:57:3f:6d:f4:02:27:61:0a:28:9c:6f:af:9a: 8c:3d:87:d5:4e:99:ff:a5:80:db:85:1f:ea:22:20:76:96:28: 6d:c4:3d:9d:78:6e:9d:95:d9:d0:52:58:6f:fc:1a:ec:30:a6: 2e:3a:43:04:5e:7c:04:35:c5:2c:08:33:af:11:8b:16:ef:69: 97:3c:38:a6:95:39:0f:76:6a:76:89:46:33:9f:0d:40:88:c1: 77:9c:1d:f3:a0:79:59:76:2d:7a:f4:f9:e8:77:18:6c:3b:44: d9:dc:c0:eb:6b:56:18:47:cc:5b:92:3b:f8:72:db:c3:0d:25: f7:98:48:1f:a7:50:3e:4e:96:76:0a:d8:e5:42:bf:2f:fd:c5: f4:b9:3b:5a:1d:d0:a6:14:d6:de:a6:0e:46:e2:9d:63:75:f8: 85:03:9e:2c:3a:b0:2f:a2:42:bd:f7:27:50:16:f1:43:28:b9: bc:3f:40:bb:a1:2b:72:63:28:ac:cb:ea:a5:f6:cf:8f:a4:38: a3:fd:96:49 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEntT8zsAxxilN4wPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OGM0YzIzYzUtMjU4NS00Nzk5LWE3ZTgtNDY5Y2NmMzI2ZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JPSaja765fDfWVx4uJ8eSvwPMgTaS/Gdhax WWuR2xloMfAGxMGTkD5gufVNpYqxa4zikpDxMeAaq4FWl1eGWOyBPKMiGRevu0PU OwTFYiSTgv8BOT25tSVoWQg3V33aocTefMfobeAaw6upPhYB2nWKzqPmxUPQUvew e5oRDzBpnirhr53gmdGS2j6WKz5URCJ5r38aesQMSedJPnowqGJcYHtiAN03V0CY NWksa6e0GzpI1TmPUdUySlOurpDapL4pfPlRsqh8pEVYJo93MX1gXZkWdSitG3Po Pcd5F8GDrReW/NSgaXhbict2RDm2c3G1evTitxDhIIjtHKTX/wIDAQABo4IDfzCC A3swHQYDVR0OBBYEFChviVh189/2Ci9B9TYsbLlkfrCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvYzk4YmNjN2YtMzNhOS0z NjA5LTg0ZjEtMjE2Y2NlM2VhNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAyoLZAwQA yxUvAwQAyxVoAwQAyxyoAwQAyx6PAwQAyx7TAwQAyyIPAwQAyzluMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACl1MvJSW/Ins5dLIWR+ucFnEGxbSR3hxE/RgC+5ShIyQcKyAdQ/oLJEY+PZ6MZp DMStLb0Q1W5mM41TVz9t9AInYQoonG+vmow9h9VOmf+lgNuFH+oiIHaWKG3EPZ14 bp2V2dBSWG/8Guwwpi46QwRefAQ1xSwIM68RixbvaZc8OKaVOQ92anaJRjOfDUCI wXecHfOgeVl2LXr0+eh3GGw7RNncwOtrVhhHzFuSO/hy28MNJfeYSB+nUD5OlnYK 2OVCvy/9xfS5O1od0KYU1t6mDkbinWN1+IUDniw6sC+iQr33J1AW8UMoubw/QLuh K3JjKKzL6qX2z4+kOKP9lkk= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:12 2025 by rpki-client