$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa File: 35db1a21-9d13-36a4-92ff-c93c50255a11.roa (raw, json) Hash identifier: 0XRbbjGhvszqrpoiAlmXr+wnmWWnPV9Hfjn1Te4W/QM= Subject key identifier: 21:74:70:E9:B2:B7:CF:2A:A6:F6:2B:7D:F4:16:D6:4C:9A:66:F4:BA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC0163A7A6E299C4C15260C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 198.40.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3a:7a:6e:29:9c:4c:15:26:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=3dd42df2-c46e-4668-82c3-10bebb3aa357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:1d:b4:e8:d6:5a:6d:58:8d:88:78:44:3f: 39:ad:16:40:18:bb:93:68:8e:e7:0e:fe:0b:73:36: 3d:dd:04:4a:2a:f3:f8:2d:f2:37:d4:46:cf:2e:76: 26:56:0e:1b:7d:4d:ee:4b:b6:4b:ba:e4:78:bd:42: 35:20:36:82:bd:69:76:61:38:34:fa:bc:64:9e:47: ea:d8:98:b6:9a:ca:e6:0e:41:0e:5d:f3:3d:c8:d0: 48:38:d7:25:82:7d:86:bf:b0:6d:cf:f4:1c:84:b8: b3:fa:83:f0:09:be:36:2a:82:41:7d:79:16:81:20: cc:d9:29:ff:ca:a7:af:45:e9:2b:65:1a:33:cb:88: 12:ec:90:6f:f8:16:fc:67:1c:53:96:aa:f6:ca:b9: e6:82:81:ed:b1:b2:37:f8:97:5e:16:6f:e1:bd:f7: 53:6c:9f:5e:1e:76:f3:cf:b6:c0:ce:d7:67:e4:27: cc:0c:99:52:9a:ad:8c:b4:51:96:19:f4:c6:8b:73: 96:4f:98:9b:44:3d:58:c1:ae:55:91:77:21:1b:32: 5f:08:d9:92:1f:28:fe:49:76:c2:0d:db:9c:66:37: 83:c8:6a:33:ae:f4:3d:4b:8c:50:ff:55:40:56:12: 04:51:09:4b:d7:0a:5f:e7:f3:b9:24:31:7c:6a:ae: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:74:70:E9:B2:B7:CF:2A:A6:F6:2B:7D:F4:16:D6:4C:9A:66:F4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:50:d8:03:58:30:26:1b:62:d3:91:24:c9:ce:c5:53:cd:da: c5:50:66:06:51:b7:3f:8c:d8:b4:a8:83:08:94:a4:35:04:90: 51:b5:a1:bd:5c:c0:65:0f:e0:5d:82:ea:1b:95:c6:1a:cc:dd: a6:4c:09:93:25:f3:33:a4:c2:ec:6e:03:ab:dd:5d:02:95:a8: 8a:99:41:f7:eb:2d:3f:90:02:c8:7d:4f:08:17:2f:b1:eb:71: 42:ee:b0:57:84:e2:4f:dd:14:f4:df:34:f2:27:f2:d3:79:86: d7:56:9d:a9:65:82:50:2b:49:90:92:ab:6b:db:68:3c:ca:df: a2:7e:e4:7a:e0:d4:66:32:e5:66:76:d1:13:45:c6:08:50:7f: 5f:fb:89:b0:36:ca:d9:5a:f6:07:c8:4c:af:15:dd:65:68:54: c0:ed:c0:c0:33:f5:db:07:9a:c3:35:5c:23:81:bc:29:ea:da: 7a:2b:a5:31:3a:51:25:ae:c7:0d:da:5d:83:e8:89:73:0a:59: 14:7a:de:54:3b:14:fa:f3:7f:be:7c:50:f8:77:ba:b1:81:33: f7:b1:8f:c9:1a:af:51:e1:51:ad:e5:15:3a:3c:cc:25:19:99: 22:fc:09:96:67:d6:1b:21:1c:47:2d:15:fc:ba:d8:29:d3:e8: 56:70:fd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFjp6bimcTBUmDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk M2RkNDJkZjItYzQ2ZS00NjY4LTgyYzMtMTBiZWJiM2FhMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wIdtOjWWm1YjYh4RD85rRZAGLuTaI7nDv4L czY93QRKKvP4LfI31EbPLnYmVg4bfU3uS7ZLuuR4vUI1IDaCvWl2YTg0+rxknkfq 2Ji2msrmDkEOXfM9yNBIONclgn2Gv7Btz/QchLiz+oPwCb42KoJBfXkWgSDM2Sn/ yqevRekrZRozy4gS7JBv+Bb8ZxxTlqr2yrnmgoHtsbI3+JdeFm/hvfdTbJ9eHnbz z7bAztdn5CfMDJlSmq2MtFGWGfTGi3OWT5ibRD1Ywa5VkXchGzJfCNmSHyj+SXbC DducZjeDyGozrvQ9S4xQ/1VAVhIEUQlL1wpf5/O5JDF8aq6cjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF0cOmyt88qpvYrffQW1kyaZvS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzVkYjFhMjEtOWQxMy0z NmE0LTkyZmYtYzkzYzUwMjU1YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFQ2ANYMCYbYtORJMnOxVPN2sVQZgZRtz+M2LSogwiUpDUEkFG1ob1c wGUP4F2C6huVxhrM3aZMCZMl8zOkwuxuA6vdXQKVqIqZQffrLT+QAsh9TwgXL7Hr cULusFeE4k/dFPTfNPIn8tN5htdWnallglArSZCSq2vbaDzK36J+5Hrg1GYy5WZ2 0RNFxghQf1/7ibA2ytla9gfITK8V3WVoVMDtwMAz9dsHmsM1XCOBvCnq2norpTE6 USWuxw3aXYPoiXMKWRR63lQ7FPrzf758UPh3urGBM/exj8kar1HhUa3lFTo8zCUZ mSL8CZZn1hshHEctFfy62CnT6FZw/Qo= -----END CERTIFICATE-----Generated at Thu Aug 7 01:12:26 2025 by rpki-client