$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4f975034-e7da-3ac1-a79d-f731b88a7ace.roa File: 4f975034-e7da-3ac1-a79d-f731b88a7ace.roa (raw, json) Hash identifier: b82j67rIJfD0IS1drYZ0CCClxl2lAFFVr2X/YPxo+rM= Subject key identifier: 3C:0B:76:11:38:EE:9E:CD:40:1D:DA:E1:7F:3C:D1:89:F6:79:7C:DB Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A9532E0C8E1345923FB841A80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4f975034-e7da-3ac1-a79d-f731b88a7ace.roa Signing time: Sun 20 Jul 2025 16:18:43 +0000 ROA not before: Sun 20 Jul 2025 16:18:43 +0000 ROA not after: Sat 18 Oct 2025 16:18:43 +0000 asID: 7018 IP address blocks: 69.91.149.0/24 maxlen: 24 69.91.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:95:32:e0:c8:e1:34:59:23:fb:84:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 20 16:18:43 2025 GMT Not After : Oct 18 16:18:43 2025 GMT Subject: CN=a2c481e5-2ba3-40f2-b25e-2500d0ffeb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:6b:b8:50:8b:0a:d8:19:eb:1d:a3:e9:dc: 75:1d:23:66:14:ca:2e:d8:c9:97:f7:63:43:51:87: c2:13:b9:d3:a3:d8:ac:ae:05:e3:df:c0:ab:35:d6: f6:ce:7e:c8:4a:95:2d:e2:da:a0:5e:d3:bf:4e:08: 33:f5:7a:17:06:eb:4f:dc:d0:23:ec:89:06:2c:c6: f3:dd:cd:11:22:1f:d7:2e:17:f4:76:bd:39:08:6d: cd:fa:0b:a4:e7:44:79:93:55:f0:25:ce:73:a7:8a: 9b:01:d9:95:e4:a7:3f:c8:46:7e:82:c6:a8:a9:b0: 86:ad:59:52:f8:35:bb:ff:3b:62:cc:06:82:75:ca: c9:34:5e:85:fa:37:e6:4a:08:3f:1c:52:38:dc:1d: 2b:04:56:6c:44:04:eb:82:03:2c:6f:f1:69:24:5a: e8:70:49:ba:24:fb:43:88:7d:57:c2:69:91:6b:eb: 19:71:a7:62:5a:ce:7e:ce:18:f5:5c:c5:16:c7:cb: 55:1e:cd:ed:f0:4d:b3:f7:1a:cc:84:79:4e:52:04: e7:0a:6f:86:03:64:a1:25:64:2c:9f:9e:85:c7:fe: b4:47:8c:cb:da:ea:d3:b4:e1:6a:93:44:52:59:d0: 48:44:1a:86:95:d8:8c:4f:d0:e6:8b:cd:69:02:83: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0B:76:11:38:EE:9E:CD:40:1D:DA:E1:7F:3C:D1:89:F6:79:7C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4f975034-e7da-3ac1-a79d-f731b88a7ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 69.91.149.0/24 69.91.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:eb:5f:1a:23:0e:12:ad:ca:47:3b:91:74:eb:b3:e0:98:83: a6:88:2f:58:c5:15:c9:40:5a:58:d0:c1:56:58:76:83:70:95: 56:84:d5:02:34:e2:18:c1:6d:64:10:c9:1d:d7:30:09:2c:c6: d5:8b:96:40:1e:2f:4e:40:44:d8:f1:6f:ff:57:90:08:05:e0: 17:52:50:2f:3a:f3:bf:78:b0:40:97:15:89:ad:33:c6:c3:09: f9:05:de:a7:3c:39:07:25:0f:d9:89:7f:b4:25:6a:a8:25:06: ad:53:50:88:59:83:72:44:ed:a7:87:c5:5f:04:bc:12:dd:46: 96:72:e8:dc:c2:74:ee:d8:00:60:dc:02:73:68:48:fb:e8:b4: cd:4f:15:94:05:da:90:b9:4f:c6:97:d4:18:fc:7f:b9:ef:ff: a7:e7:01:d1:3d:2d:5c:94:42:ba:c2:6e:24:8c:75:4b:bb:97: 76:62:5c:d1:50:6a:44:0d:cd:c1:18:2d:05:2d:2a:8f:05:36: df:ed:e5:c4:c0:c0:6f:6d:95:e6:56:fb:88:ea:5e:f5:65:9a: a6:87:08:da:bf:a3:6f:42:16:bd:c1:f8:96:40:ff:c2:a6:e3: 68:8b:73:75:ed:1b:c3:44:50:55:6b:4d:a0:0d:11:40:81:d5: 01:fe:93:a7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqVMuDI4TRZI/uEGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcyMDE2MTg0M1oXDTI1MTAxODE2MTg0M1owLzEtMCsGA1UEAxMk YTJjNDgxZTUtMmJhMy00MGYyLWIyNWUtMjUwMGQwZmZlYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWNruFCLCtgZ6x2j6dx1HSNmFMou2MmX92ND UYfCE7nTo9isrgXj38CrNdb2zn7ISpUt4tqgXtO/Tggz9XoXButP3NAj7IkGLMbz 3c0RIh/XLhf0dr05CG3N+guk50R5k1XwJc5zp4qbAdmV5Kc/yEZ+gsaoqbCGrVlS +DW7/ztizAaCdcrJNF6F+jfmSgg/HFI43B0rBFZsRATrggMsb/FpJFrocEm6JPtD iH1XwmmRa+sZcadiWs5+zhj1XMUWx8tVHs3t8E2z9xrMhHlOUgTnCm+GA2ShJWQs n56Fx/60R4zL2urTtOFqk0RSWdBIRBqGldiMT9Dmi81pAoO3SQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDwLdhE47p7NQB3a4X880Yn2eXzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGY5NzUwMzQtZTdkYS0z YWMxLWE3OWQtZjczMWI4OGE3YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARVuVAwQA RVu5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIHrXxojDhKtykc7kXTrs+CYg6aIL1jFFclAWljQwVZYdoNw lVaE1QI04hjBbWQQyR3XMAksxtWLlkAeL05ARNjxb/9XkAgF4BdSUC868794sECX FYmtM8bDCfkF3qc8OQclD9mJf7QlaqglBq1TUIhZg3JE7aeHxV8EvBLdRpZy6NzC dO7YAGDcAnNoSPvotM1PFZQF2pC5T8aX1Bj8f7nv/6fnAdE9LVyUQrrCbiSMdUu7 l3ZiXNFQakQNzcEYLQUtKo8FNt/t5cTAwG9tleZW+4jqXvVlmqaHCNq/o29CFr3B +JZA/8Km42iLc3XtG8NEUFVrTaANEUCB1QH+k6c= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:01 2025 by rpki-client