$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa File: cec05261-0f78-3265-830a-98a87b1c4a62.roa (raw, json) Hash identifier: pUtBfhgJ+CcLtiLcweNLInYM2YqyE3AaRDQ6pSJ+q9g= Subject key identifier: 69:41:B5:ED:84:AF:12:E1:00:FA:6F:CF:19:9E:C4:E0:D2:0D:E5:45 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B2CF6E4E8257DF4DC5E05C700 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 27602 IP address blocks: 204.48.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e4:e8:25:7d:f4:dc:5e:05:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=7176a5d6-f36a-421a-88f9-8eee48dc996c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1d:dd:b6:68:40:21:1b:de:4a:a3:b8:cb:7d: 3e:de:c7:0a:42:1f:0d:a1:7d:41:f5:c9:6c:87:9f: d1:80:d0:c4:14:49:5c:43:c0:33:3c:ee:88:06:86: 4f:04:7c:53:c5:9f:67:7a:49:24:72:cf:45:77:0c: 1e:09:8b:af:7a:43:92:7b:71:3e:59:e1:3e:47:bf: 4c:54:62:49:aa:83:76:29:9f:d3:61:1d:a4:2f:8a: 23:73:da:35:b1:a6:7b:8a:b8:eb:d1:df:e8:4b:31: f1:4d:dd:88:88:4c:4c:ca:70:22:93:59:9e:ec:ad: 4d:c4:de:d7:d3:2f:55:87:82:e3:e6:10:bd:65:81: 05:76:a6:2d:3b:2a:3a:f8:15:11:a0:01:e3:1d:0f: 31:f3:e3:ca:8c:77:fa:99:be:a1:3d:84:e8:1f:0e: 50:9d:c0:01:4a:1e:5a:d2:08:8a:63:91:1b:7d:5b: 4e:ae:9c:e9:dc:91:a4:a7:7c:84:58:ed:f3:ea:4f: e0:11:48:bd:38:35:23:57:94:19:a0:30:97:71:45: 34:4b:7d:0e:7b:2a:f3:14:7e:af:31:03:83:8d:a3: 25:36:6f:8f:30:3a:3d:ae:0a:45:1f:5e:44:1c:d1: 0f:f3:9c:b0:e3:d5:6c:92:c9:32:af:f8:2a:ea:ce: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:41:B5:ED:84:AF:12:E1:00:FA:6F:CF:19:9E:C4:E0:D2:0D:E5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 204.48.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:92:80:a5:10:5a:37:bd:ce:04:c1:c5:f7:3a:c4:6b:23:97: 21:f7:f3:51:d7:75:2c:91:a6:51:7a:9c:11:44:01:0b:29:ed: 86:95:2d:5a:82:f2:f0:b6:3d:2f:99:c3:bf:35:28:aa:ae:20: 9a:85:fe:9c:a3:f3:c8:4c:f2:9c:4f:ba:db:70:ea:d0:69:fa: 11:65:d6:3a:46:b0:cc:13:db:1a:5a:43:34:9f:9b:21:0f:b9: af:1b:07:2f:56:b8:b9:66:9c:fd:e0:c2:bd:90:d6:a5:73:b7: b2:5e:48:c3:8a:b6:dd:eb:1f:d6:e2:dd:71:15:ea:24:ba:b1: 70:bc:d6:ef:ab:e7:3a:18:77:ca:77:8e:d8:d0:48:2c:58:b5: e6:6b:49:30:58:11:f5:3b:ec:84:d3:c2:f6:9a:b0:4a:7a:22: 70:40:b2:06:cd:93:ce:81:82:cc:68:77:f7:00:05:5b:f2:86: be:46:48:20:e5:ea:3c:2c:37:d7:30:2c:c7:d9:41:8b:a8:e3: 64:3b:aa:21:61:35:f6:73:08:7a:02:ef:c9:fe:fb:82:48:5b: 6c:28:52:f9:20:f1:67:2e:c6:d1:c6:5a:ee:19:a9:7a:d6:7d: 74:d1:e9:7d:7c:27:5b:5d:fb:3d:f1:d5:f3:7e:2f:36:4c:3b: 62:d2:03:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uToJX303F4FxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NzE3NmE1ZDYtZjM2YS00MjFhLTg4ZjktOGVlZTQ4ZGM5OTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx3dtmhAIRveSqO4y30+3scKQh8NoX1B9cls h5/RgNDEFElcQ8AzPO6IBoZPBHxTxZ9nekkkcs9FdwweCYuvekOSe3E+WeE+R79M VGJJqoN2KZ/TYR2kL4ojc9o1saZ7irjr0d/oSzHxTd2IiExMynAik1me7K1NxN7X 0y9Vh4Lj5hC9ZYEFdqYtOyo6+BURoAHjHQ8x8+PKjHf6mb6hPYToHw5QncABSh5a 0giKY5EbfVtOrpzp3JGkp3yEWO3z6k/gEUi9ODUjV5QZoDCXcUU0S30OeyrzFH6v MQODjaMlNm+PMDo9rgpFH15EHNEP85yw49Vskskyr/gq6s7hawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlBte2ErxLhAPpvzxmexODSDeVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VjMDUyNjEtMGY3OC0z MjY1LTgzMGEtOThhODdiMWM0YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDAjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmSgKUQWje9zgTBxfc6xGsjlyH381HXdSyRplF6nBFEAQsp7YaVLVqC 8vC2PS+Zw781KKquIJqF/pyj88hM8pxPuttw6tBp+hFl1jpGsMwT2xpaQzSfmyEP ua8bBy9WuLlmnP3gwr2Q1qVzt7JeSMOKtt3rH9bi3XEV6iS6sXC81u+r5zoYd8p3 jtjQSCxYteZrSTBYEfU77ITTwvaasEp6InBAsgbNk86Bgsxod/cABVvyhr5GSCDl 6jwsN9cwLMfZQYuo42Q7qiFhNfZzCHoC78n++4JIW2woUvkg8WcuxtHGWu4ZqXrW fXTR6X18J1td+z3x1fN+LzZMO2LSA5E= -----END CERTIFICATE-----Generated at Wed Nov 5 09:20:53 2025 by rpki-client