$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa File: 61f3e7bb-3cef-3819-a71f-ff3645a33210.roa (raw, json) Hash identifier: /5EpyvImiV2P9iDRiA1/6XQyq6N9xWE5BPvBIKVyPrc= Subject key identifier: 93:E0:31:34:C1:8E:30:82:D5:66:6C:DB:83:FA:E3:C8:21:B3:37:86 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849DC8FBE32802859D8F7C06E80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 20303 IP address blocks: 69.91.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:be:32:80:28:59:d8:f7:c0:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=baf14b0c-419e-4ddb-bfdf-fbd9421af07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0f:3a:81:1f:20:68:c8:6c:69:a6:92:0d:82: 9b:6d:1b:69:4e:60:b3:aa:57:32:75:a6:3c:bb:a0: 9d:22:f7:af:53:63:b3:b7:43:61:ee:14:0b:d5:75: 23:27:da:85:83:31:8f:23:7c:72:b4:6b:12:32:fc: 8f:a0:cb:e0:bc:ea:ff:46:e9:8c:0d:3a:69:58:49: 99:bc:df:57:19:1d:b7:3e:45:3d:d4:60:e1:fc:35: c3:20:9d:e3:2f:c9:54:79:56:74:90:7c:d2:25:ee: 8d:df:68:26:d8:21:ed:8d:73:e6:21:54:fb:9a:0b: f4:4e:a4:4a:6f:53:a6:59:07:91:94:52:ce:f6:fb: 5a:1d:0f:69:3b:5d:17:ec:e5:b0:06:7d:7b:6e:76: 9d:07:c9:e3:c1:d8:e0:d7:7b:75:80:1f:f8:e8:73: ad:a5:d3:1b:00:d7:4f:8c:7a:6f:50:4d:24:18:01: 1f:a4:97:6b:c8:bc:14:e8:7d:f9:92:ca:46:84:2d: 8e:ce:af:8e:3b:64:10:32:ec:ff:6a:61:1a:71:e8: d6:1c:7f:84:44:36:10:da:30:47:ca:f5:9e:a5:b4: ca:3d:6f:34:f2:ee:d4:c1:74:82:aa:8d:d9:2d:8c: 5b:b3:b1:bd:3b:92:47:05:3e:6c:75:b4:77:29:83: a3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E0:31:34:C1:8E:30:82:D5:66:6C:DB:83:FA:E3:C8:21:B3:37:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 69.91.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d4:7c:49:84:43:92:c2:8e:7c:9c:ed:ad:f9:75:b1:d6:50: 99:34:56:55:69:61:87:12:61:05:04:a0:39:4c:7b:84:6f:0a: bf:6a:67:06:3d:62:f4:ef:8b:4e:39:27:0c:36:f5:c3:81:93: 71:9b:6b:ca:97:0a:dc:3b:1c:68:20:b3:7e:78:a1:02:b0:fa: ee:c1:7c:35:c7:58:c6:b8:30:90:7e:90:9e:59:77:1b:91:91: 3b:b0:ad:5f:2f:12:7f:2e:60:51:eb:32:c8:b7:0c:25:7c:bb: 76:46:bd:bc:08:11:fa:97:c7:db:a6:ed:a4:44:ee:34:8d:15: 9a:52:d6:59:33:a0:7a:ac:eb:31:62:ea:9a:74:64:1f:17:4c: 74:00:1e:42:e5:6c:a2:d3:e2:14:a8:0e:90:dc:65:92:09:47: 42:46:79:cd:bc:a1:55:e0:df:61:c7:d1:21:62:cb:e1:a7:8b: 09:f8:88:38:43:a6:82:e7:29:a4:fd:4c:57:68:37:e1:70:41: 1b:d8:65:47:81:f9:bd:5e:7c:1c:ba:ec:f4:b4:e6:78:ac:76: 5c:f7:cc:a3:1a:79:71:9c:17:24:99:c0:6a:d8:17:a1:bd:3f: 26:50:62:2f:f3:5e:9f:e3:6f:96:81:55:5a:67:1d:90:e1:f9: 6f:2f:ee:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj74ygChZ2PfAboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YmFmMTRiMGMtNDE5ZS00ZGRiLWJmZGYtZmJkOTQyMWFmMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ86gR8gaMhsaaaSDYKbbRtpTmCzqlcydaY8 u6CdIvevU2Ozt0Nh7hQL1XUjJ9qFgzGPI3xytGsSMvyPoMvgvOr/RumMDTppWEmZ vN9XGR23PkU91GDh/DXDIJ3jL8lUeVZ0kHzSJe6N32gm2CHtjXPmIVT7mgv0TqRK b1OmWQeRlFLO9vtaHQ9pO10X7OWwBn17bnadB8njwdjg13t1gB/46HOtpdMbANdP jHpvUE0kGAEfpJdryLwU6H35kspGhC2Ozq+OO2QQMuz/amEacejWHH+ERDYQ2jBH yvWepbTKPW808u7UwXSCqo3ZLYxbs7G9O5JHBT5sdbR3KYOjQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPgMTTBjjCC1WZs24P648ghszeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjFmM2U3YmItM2NlZi0z ODE5LWE3MWYtZmYzNjQ1YTMzMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRVuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7UfEmEQ5LCjnyc7a35dbHWUJk0VlVpYYcSYQUEoDlMe4RvCr9qZwY9 YvTvi045Jww29cOBk3Gba8qXCtw7HGggs354oQKw+u7BfDXHWMa4MJB+kJ5ZdxuR kTuwrV8vEn8uYFHrMsi3DCV8u3ZGvbwIEfqXx9um7aRE7jSNFZpS1lkzoHqs6zFi 6pp0ZB8XTHQAHkLlbKLT4hSoDpDcZZIJR0JGec28oVXg32HH0SFiy+Gniwn4iDhD poLnKaT9TFdoN+FwQRvYZUeB+b1efBy67PS05nisdlz3zKMaeXGcFySZwGrYF6G9 PyZQYi/zXp/jb5aBVVpnHZDh+W8v7vQ= -----END CERTIFICATE-----Generated at Mon Jun 16 20:08:14 2025 by rpki-client