$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa File: 64db7fdd-16d1-3399-a90b-2ec2083580a3.roa (raw, json) Hash identifier: /V2OkZfYGEUFJzEd7lEdQEzbzELE2YC0Q5Ps2rRmdbE= Subject key identifier: C9:7D:9F:6C:BE:5A:AB:91:C4:35:EF:E8:E8:29:B7:AE:12:3D:95:DA Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F43285849D594E60F891C3AF2A0D19280 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 35889 IP address blocks: 192.35.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e6:0f:89:1c:3a:f2:a0:d1:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=68990f9d-d786-45be-a6c2-e5f309b83173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:69:d6:06:6b:b4:4c:51:01:02:53:59:4e: c8:f6:bf:70:2b:22:65:9d:ee:e0:c4:b5:9a:b8:72: e7:0e:e6:68:21:89:ca:41:49:bf:13:bb:eb:f0:5b: 76:07:21:d3:c4:50:03:e2:1a:14:fb:5e:38:e2:03: cb:33:99:b8:f3:70:25:db:9f:d6:32:4d:71:03:0c: 84:36:c1:09:3b:83:99:b7:9e:3c:65:ef:fe:6a:75: 17:a3:d1:49:f9:bc:a3:fc:a6:33:59:61:cf:20:a0: f7:9f:c9:10:fa:87:6a:14:d3:37:43:f9:6c:bb:4c: 4f:e2:d0:7e:be:af:d8:48:0f:dd:84:dd:6e:57:2b: 5b:a9:fc:57:44:9a:8e:cc:86:d0:6b:54:52:f0:3b: 72:98:89:fb:1e:91:f9:c2:03:d6:97:c8:11:89:30: d7:99:e4:ee:b5:0c:a6:e2:f4:29:7b:d4:32:e6:77: e6:5e:50:ae:75:02:82:f9:9a:0c:83:3d:72:6e:ea: fb:25:06:c7:4f:19:52:5e:03:ee:13:8c:47:e5:c2: d8:5a:de:be:50:93:90:8d:f3:e1:5e:94:c5:64:f3: 61:fc:3a:a5:f9:30:85:1f:30:a5:d2:44:62:86:03: 5b:cd:57:55:ac:56:53:8f:7d:31:99:2a:61:01:bf: df:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7D:9F:6C:BE:5A:AB:91:C4:35:EF:E8:E8:29:B7:AE:12:3D:95:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 192.35.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c0:32:12:bd:8f:a9:f3:12:c6:b5:5c:5a:40:a8:83:d1:ee: 0c:83:1e:22:3d:a1:df:bd:89:01:ad:1b:ee:26:93:e7:7a:d6: cd:3e:43:28:39:52:59:4a:e4:7d:58:ae:c4:a0:57:5f:33:3b: 5b:4c:97:e6:80:57:67:22:2a:7e:0d:61:0f:4f:53:96:8d:26: 8f:83:4b:32:f6:42:43:b2:99:25:57:28:5d:09:c2:1b:1e:58: 01:d1:83:5a:38:cc:ff:7f:ff:a1:5b:d3:bf:08:22:19:be:d7: fd:e7:a1:5a:17:f9:14:ee:85:76:90:ea:d1:42:41:eb:50:41: da:c9:b8:81:af:b4:df:81:5c:74:64:32:70:84:b4:2f:b3:41: 90:b8:fc:9e:52:9a:c2:8d:b0:d4:9b:f6:75:b4:28:62:7f:dc: 97:65:23:d3:45:b6:0c:93:8e:e2:0a:bd:02:08:62:fb:33:30: e9:f1:05:b2:62:2b:0c:17:9c:94:43:22:53:3c:57:71:97:7e: db:38:79:db:74:cd:45:32:1c:aa:bb:d0:6c:cb:d1:d2:39:53: 06:d7:93:dc:f6:41:d3:90:e5:c1:5d:eb:dd:6c:1d:c8:9c:1e: 73:d7:1c:44:7c:e9:b8:e2:ea:fa:25:a1:4e:76:af:b4:37:0e: 4c:d2:fe:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOYPiRw68qDRkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk Njg5OTBmOWQtZDc4Ni00NWJlLWE2YzItZTVmMzA5YjgzMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm9p1gZrtExRAQJTWU7I9r9wKyJlne7gxLWa uHLnDuZoIYnKQUm/E7vr8Ft2ByHTxFAD4hoU+1444gPLM5m483Al25/WMk1xAwyE NsEJO4OZt548Ze/+anUXo9FJ+byj/KYzWWHPIKD3n8kQ+odqFNM3Q/lsu0xP4tB+ vq/YSA/dhN1uVytbqfxXRJqOzIbQa1RS8DtymIn7HpH5wgPWl8gRiTDXmeTutQym 4vQpe9Qy5nfmXlCudQKC+ZoMgz1ybur7JQbHTxlSXgPuE4xH5cLYWt6+UJOQjfPh XpTFZPNh/Dql+TCFHzCl0kRihgNbzVdVrFZTj30xmSphAb/fawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMl9n2y+WquRxDXv6Ogpt64SPZXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNjRkYjdmZGQtMTZkMS0z Mzk5LWE5MGItMmVjMjA4MzU4MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjAMhK9j6nzEsa1XFpAqIPR7gyDHiI9od+9iQGtG+4mk+d61s0+Qyg5 UllK5H1YrsSgV18zO1tMl+aAV2ciKn4NYQ9PU5aNJo+DSzL2QkOymSVXKF0Jwhse WAHRg1o4zP9//6Fb078IIhm+1/3noVoX+RTuhXaQ6tFCQetQQdrJuIGvtN+BXHRk MnCEtC+zQZC4/J5SmsKNsNSb9nW0KGJ/3JdlI9NFtgyTjuIKvQIIYvszMOnxBbJi KwwXnJRDIlM8V3GXfts4edt0zUUyHKq70GzL0dI5UwbXk9z2QdOQ5cFd691sHcic HnPXHER86bji6voloU52r7Q3DkzS/lc= -----END CERTIFICATE-----Generated at Mon Jun 30 03:56:15 2025 by rpki-client