$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa File: 76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa (raw, json) Hash identifier: a7gaI44UKBhpgZwnZZC/1umFJyk3NiOvhq7RGZp0Mbg= Subject key identifier: 3E:2D:A8:54:88:E1:76:67:85:DD:51:E2:38:94:10:72:58:4A:0A:17 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A4110539A92F22DB06D394B60 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 16509 IP address blocks: 199.255.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:53:9a:92:f2:2d:b0:6d:39:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=c5e418c6-2ef1-4ff5-abe3-d46c69ab18fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:dc:f6:35:3c:36:ab:cd:05:0b:05:b1:30: dd:e1:30:1b:35:2c:33:24:83:1e:ff:4a:dc:99:28: 4c:d0:3b:23:10:89:6a:4d:65:23:5f:88:1e:00:c4: 39:3e:2b:22:c7:aa:6a:c4:58:c0:4d:e9:6c:50:8d: 4d:a9:f8:f9:e8:e1:71:32:5e:dc:a5:2d:89:71:dd: 21:54:a3:6f:f0:14:28:09:09:87:b4:2e:29:88:75: 4e:6f:e0:46:f0:91:a7:79:1d:bc:7b:64:c5:60:4e: f1:d9:3a:fb:58:25:ef:83:96:96:0b:d6:34:ff:09: c7:22:81:ef:a4:ce:5b:f8:65:67:8a:ed:29:76:3a: 2e:bd:1b:a3:c0:e1:b6:23:9a:f2:24:88:81:8f:42: e4:d0:0a:8f:d5:d3:3f:39:45:91:38:3a:7f:78:2d: 67:0e:15:03:cc:06:71:ce:04:ff:91:30:65:b2:47: 80:fe:7d:bc:b7:20:02:25:50:20:60:1b:e3:9c:7e: 66:a2:de:cc:ee:0a:7d:71:70:bb:e8:b3:0c:67:fb: 57:c7:55:01:aa:40:35:e7:96:24:16:1e:98:c1:cf: ed:fe:d2:c6:11:c5:9d:8d:86:d5:f5:11:36:20:55: d0:2b:86:af:b2:5d:54:df:ae:9e:6a:22:09:43:bc: 43:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2D:A8:54:88:E1:76:67:85:DD:51:E2:38:94:10:72:58:4A:0A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:99:79:dc:a8:7b:6d:5b:09:c0:06:c9:70:6d:e7:8a:6e:dd: 76:37:63:71:57:60:7f:21:f5:2b:cd:c2:8a:e1:41:a0:52:35: 05:33:3e:0f:52:2a:53:40:7e:90:42:b3:59:ca:d1:5c:b2:4f: e6:08:0f:59:b8:e5:37:a5:f3:df:1b:49:1c:e1:93:01:9c:e5: 4d:f2:17:fb:19:53:78:9c:ce:e5:51:6e:5c:3b:d9:9c:da:f1: 62:2b:83:7b:7f:dd:db:a2:2d:5c:98:cc:30:fd:ed:15:60:dc: e4:de:3f:8d:ac:bc:60:41:09:3c:ea:39:80:70:d7:32:a4:93: f7:a4:18:f9:56:6a:6a:16:e9:26:38:7b:d3:c6:3f:98:78:4b: 31:35:21:c6:79:2e:4a:73:f3:4c:39:08:b5:03:a1:1a:62:4c: 56:c2:99:e0:f9:85:59:4b:23:ab:e7:b1:26:d7:3e:b4:0e:9e: 52:1d:4a:aa:b6:1f:a5:e1:06:3e:30:0f:1c:e8:7f:ef:57:f4: eb:be:75:09:ce:67:9e:95:6c:23:84:98:33:a8:fc:81:f6:f9: da:fe:70:9b:25:bb:5b:c7:de:2e:f4:5b:22:20:df:3f:17:12: e8:fd:20:08:41:e0:c1:68:9f:9b:77:02:22:14:82:d0:25:16: eb:78:28:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFOakvItsG05S2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk YzVlNDE4YzYtMmVmMS00ZmY1LWFiZTMtZDQ2YzY5YWIxOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ7c9jU8NqvNBQsFsTDd4TAbNSwzJIMe/0rc mShM0DsjEIlqTWUjX4geAMQ5Pisix6pqxFjATelsUI1Nqfj56OFxMl7cpS2Jcd0h VKNv8BQoCQmHtC4piHVOb+BG8JGneR28e2TFYE7x2Tr7WCXvg5aWC9Y0/wnHIoHv pM5b+GVniu0pdjouvRujwOG2I5ryJIiBj0Lk0AqP1dM/OUWRODp/eC1nDhUDzAZx zgT/kTBlskeA/n28tyACJVAgYBvjnH5mot7M7gp9cXC76LMMZ/tXx1UBqkA155Yk Fh6Ywc/t/tLGEcWdjYbV9RE2IFXQK4avsl1U366eaiIJQ7xDgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4tqFSI4XZnhd1R4jiUEHJYSgoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNzZjMzc1YTAtZDcwNC0z ZmU2LWE2OGUtYzRmMzg3ZmE3MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKZedyoe21bCcAGyXBt54pu3XY3Y3FXYH8h9SvNworhQaBSNQUzPg9S KlNAfpBCs1nK0VyyT+YID1m45Tel898bSRzhkwGc5U3yF/sZU3iczuVRblw72Zza 8WIrg3t/3duiLVyYzDD97RVg3OTeP42svGBBCTzqOYBw1zKkk/ekGPlWamoW6SY4 e9PGP5h4SzE1IcZ5Lkpz80w5CLUDoRpiTFbCmeD5hVlLI6vnsSbXPrQOnlIdSqq2 H6XhBj4wDxzof+9X9Ou+dQnOZ56VbCOEmDOo/IH2+dr+cJslu1vH3i70WyIg3z8X Euj9IAhB4MFon5t3AiIUgtAlFut4KGA= -----END CERTIFICATE-----Generated at Sun Jun 29 04:24:38 2025 by rpki-client