$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa File: a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa (raw, json) Hash identifier: M6x+jjO4cuiyQRaCcgyUIw5b1bBM8pYwYEy2+11Lh0M= Subject key identifier: 9B:59:E8:5B:6D:FA:BC:5F:D9:51:6D:98:DD:4E:0A:BE:AD:7E:F2:B1 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96562A54D16E13DBB879A8 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 97.68.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:56:2a:54:d1:6e:13:db:b8:79:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=0291dd66-bf5e-4e69-ac6c-087c623467ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:32:ed:48:23:54:43:c9:d3:a7:3c:c5:b1: 9a:96:d2:46:6f:2a:ec:4d:c0:80:26:48:6e:e4:2e: f1:78:18:de:54:a4:c2:04:99:60:4e:7b:3b:bd:77: 73:d3:26:56:aa:33:34:bd:8f:ab:91:1a:c2:02:c9: 5e:f7:1b:21:54:26:c7:13:f8:dd:18:7d:f2:7e:ad: 3d:53:74:68:ae:1f:9f:03:39:53:45:5d:6a:00:d6: 9e:1c:21:e5:13:c1:4d:9c:a1:1b:3b:09:f2:2c:38: 92:a0:2c:cd:f4:be:71:e7:c5:df:10:2d:b5:e6:80: d5:8b:83:48:cd:a0:2f:06:92:ae:a0:68:ed:3c:b7: 1f:2f:a3:2a:21:b8:77:7b:4b:9e:ad:70:56:b8:29: 20:51:39:4b:42:f8:fe:35:97:22:16:36:9c:02:01: a9:56:4b:0b:c6:fc:37:6f:ac:22:2c:ac:45:ae:80: 3c:00:b9:a3:9c:76:9b:60:1b:bb:13:40:d6:25:2a: 4f:35:2c:90:92:3e:d2:d8:06:e8:8c:19:65:3f:1d: 5b:d7:02:df:e2:58:db:9a:96:34:7b:89:f4:d0:84: a9:89:31:ea:ee:4c:71:54:0a:10:d4:ab:98:fc:28: 7f:72:fb:95:ca:93:d0:54:76:1d:d3:6e:af:38:59: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:E8:5B:6D:FA:BC:5F:D9:51:6D:98:DD:4E:0A:BE:AD:7E:F2:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.68.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:de:b2:b1:6a:40:51:66:cc:f3:cd:d3:64:b9:da:88:0b:ad: c6:08:be:8e:81:cc:c8:fa:47:7d:4b:79:32:e1:0a:09:47:40: bb:c1:cf:23:b4:94:f3:31:49:69:e7:df:64:ad:4d:13:c1:d0: dc:46:3b:32:39:26:ec:c7:a5:c9:33:57:3e:69:25:27:be:eb: 9f:0c:52:bf:ab:9a:15:e2:d1:09:23:1c:0a:ae:ca:04:62:ba: c1:7b:b5:a3:02:a0:a1:51:66:e2:48:50:69:86:3c:83:73:df: 9e:75:a5:59:b6:bb:1d:84:9e:22:7e:c2:b9:c0:f7:b5:d2:e7: f1:3a:a3:80:1f:53:20:da:28:27:a4:d1:1e:b0:a7:00:ff:1b: ef:37:bf:ce:71:7c:03:fe:c9:7e:e3:95:2d:bb:c2:c9:cb:5a: 3d:b0:cd:5d:92:4f:0d:11:08:e2:df:1a:97:61:60:64:22:6c: 3b:f4:ec:e1:e9:b2:6d:42:4d:a0:8c:48:75:90:56:c2:7c:2c: 99:c6:33:ec:65:15:14:2e:5c:08:a9:29:c7:f5:8b:7b:76:77: ff:54:39:e4:a3:92:32:d1:41:d1:55:59:09:00:49:d4:5b:44: 31:86:aa:bd:0f:17:59:3d:ef:62:d4:5a:11:93:ac:98:3d:34: ac:70:90:2e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqellYqVNFuE9u4eagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MDI5MWRkNjYtYmY1ZS00ZTY5LWFjNmMtMDg3YzYyMzQ2N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx94y7UgjVEPJ06c8xbGaltJGbyrsTcCAJkhu 5C7xeBjeVKTCBJlgTns7vXdz0yZWqjM0vY+rkRrCAsle9xshVCbHE/jdGH3yfq09 U3Rorh+fAzlTRV1qANaeHCHlE8FNnKEbOwnyLDiSoCzN9L5x58XfEC215oDVi4NI zaAvBpKuoGjtPLcfL6MqIbh3e0uerXBWuCkgUTlLQvj+NZciFjacAgGpVksLxvw3 b6wiLKxFroA8ALmjnHabYBu7E0DWJSpPNSyQkj7S2AbojBllPx1b1wLf4ljbmpY0 e4n00ISpiTHq7kxxVAoQ1KuY/Ch/cvuVypPQVHYd026vOFlILwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJtZ6Ftt+rxf2VFtmN1OCr6tfvKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTM1YTA1ZjgtMDVkOS0z ZjQ2LTgzOTgtOWJmYTA4OGJkYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYUQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPd6ysWpAUWbM883TZLnaiAutxgi+joHMyPpHfUt5MuEKCUdAu8HPI7SU 8zFJaeffZK1NE8HQ3EY7Mjkm7MelyTNXPmklJ77rnwxSv6uaFeLRCSMcCq7KBGK6 wXu1owKgoVFm4khQaYY8g3PfnnWlWba7HYSeIn7CucD3tdLn8TqjgB9TINooJ6TR HrCnAP8b7ze/znF8A/7JfuOVLbvCyctaPbDNXZJPDREI4t8al2FgZCJsO/Ts4emy bUJNoIxIdZBWwnwsmcYz7GUVFC5cCKkpx/WLe3Z3/1Q55KOSMtFB0VVZCQBJ1FtE MYaqvQ8XWT3vYtRaEZOsmD00rHCQLg== -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:23 2025 by rpki-client