$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa File: 35a4a280-a419-3d31-a496-90f9731524db.roa (raw, json) Hash identifier: hiv9UunjF41+7iiJbjxQdlzKHicdhwY7wQABhnmqjkI= Subject key identifier: E6:89:4B:CB:53:5C:8C:63:21:25:75:70:BF:79:4D:CC:9E:C8:66:7C Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584AC8763460C8B1A3A1F3AAC080 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 3214 IP address blocks: 104.255.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:34:60:c8:b1:a3:a1:f3:aa:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=da1c1e46-3879-44dc-8f61-121312058774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:a2:fb:7f:6d:a7:31:53:27:57:f3:33:06: 25:d5:44:e1:6a:45:8c:51:fd:5a:bd:54:1b:8b:80: 36:00:cb:c8:f1:e4:12:b1:41:a8:de:f1:6d:2b:b0: a8:eb:3f:4d:b8:a6:67:f2:41:24:fe:08:59:ca:8b: 9f:b1:4e:c8:31:d8:ca:84:25:9a:29:a8:27:f4:a9: 8f:1c:15:82:a4:3e:fc:29:48:a5:8b:76:ca:30:9a: 3b:cd:9c:b4:86:16:fd:15:61:65:52:97:50:d8:f3: bd:10:cd:ca:c2:d2:1c:d8:25:88:f9:48:b8:6b:3f: fe:88:76:e6:3e:2d:25:39:b6:e2:c4:6a:07:f2:ea: 8d:db:61:11:f9:18:4c:e0:52:92:70:56:2e:ab:c6: 94:4f:bd:65:a3:42:58:b2:94:cf:18:c2:4a:13:4e: ec:69:39:68:a6:c2:4f:a1:f4:c5:eb:6a:ac:d5:6a: c1:3f:88:b1:f6:e7:24:da:74:d2:ef:90:8a:68:1a: ad:9f:a4:19:b1:37:cd:0f:4e:87:b1:15:d5:d7:5b: b0:10:b5:5e:4f:a5:69:63:fa:33:c4:f4:82:27:86: 4a:aa:b3:d9:41:58:78:d7:ab:6f:87:8c:45:49:8d: 21:4e:c9:93:45:19:13:d4:d9:00:a5:53:d9:19:4b: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:89:4B:CB:53:5C:8C:63:21:25:75:70:BF:79:4D:CC:9E:C8:66:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/35a4a280-a419-3d31-a496-90f9731524db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 104.255.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f1:67:5f:c2:99:74:d0:f1:4c:91:6f:e5:47:26:93:e9:d4: dc:5b:40:46:76:9a:40:29:cf:a2:88:8d:65:30:6b:5a:cd:b3: 54:32:98:39:e3:c6:5d:4e:d5:2b:16:4f:d2:9f:63:ef:12:ee: 2a:99:85:30:e0:4f:93:49:a5:c5:36:83:c0:c2:98:60:fe:ea: 9f:38:05:98:19:45:3c:c3:89:9f:af:df:e6:b8:da:ff:eb:e8: 1a:8d:e7:07:f9:52:ea:b2:35:96:97:9f:61:f8:01:68:87:bd: b9:fe:f4:4a:fc:ab:27:b8:4e:13:d0:5b:2c:92:1e:3c:33:37: e4:9b:47:f6:a5:cd:20:6c:64:45:af:22:2e:23:34:7d:ed:ba: d9:3d:7b:89:c6:e3:33:43:27:1e:17:c0:cf:48:a8:46:70:f4: 3a:2d:ed:96:29:5e:2c:7b:2d:df:ea:e6:c8:2d:82:1b:53:d5: d6:18:a9:71:65:c0:7d:53:02:6e:7f:31:f4:ad:d5:51:d9:b2: 9a:52:6f:4c:a8:a4:0d:33:ff:d9:e7:d6:40:84:78:df:a3:31: b8:d8:0f:6c:d3:a8:63:3a:3f:1d:df:15:5c:be:f3:c0:81:b1: 16:0a:a7:90:5a:e9:a4:a4:45:c9:b5:bc:8e:53:2f:d5:e2:b3: a5:7c:d6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdjRgyLGjofOqwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGExYzFlNDYtMzg3OS00NGRjLThmNjEtMTIxMzEyMDU4Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNmi+39tpzFTJ1fzMwYl1UThakWMUf1avVQb i4A2AMvI8eQSsUGo3vFtK7Co6z9NuKZn8kEk/ghZyoufsU7IMdjKhCWaKagn9KmP HBWCpD78KUili3bKMJo7zZy0hhb9FWFlUpdQ2PO9EM3KwtIc2CWI+Ui4az/+iHbm Pi0lObbixGoH8uqN22ER+RhM4FKScFYuq8aUT71lo0JYspTPGMJKE07saTlopsJP ofTF62qs1WrBP4ix9uck2nTS75CKaBqtn6QZsTfND06HsRXV11uwELVeT6VpY/oz xPSCJ4ZKqrPZQVh416tvh4xFSY0hTsmTRRkT1NkApVPZGUvCWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaJS8tTXIxjISV1cL95TcyeyGZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvMzVhNGEyODAtYTQxOS0z ZDMxLWE0OTYtOTBmOTczMTUyNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnxZ1/CmXTQ8UyRb+VHJpPp1NxbQEZ2mkApz6KIjWUwa1rNs1QymDnj xl1O1SsWT9KfY+8S7iqZhTDgT5NJpcU2g8DCmGD+6p84BZgZRTzDiZ+v3+a42v/r 6BqN5wf5UuqyNZaXn2H4AWiHvbn+9Er8qye4ThPQWyySHjwzN+SbR/alzSBsZEWv Ii4jNH3tutk9e4nG4zNDJx4XwM9IqEZw9Dot7ZYpXix7Ld/q5sgtghtT1dYYqXFl wH1TAm5/MfSt1VHZsppSb0yopA0z/9nn1kCEeN+jMbjYD2zTqGM6Px3fFVy+88CB sRYKp5Ba6aSkRcm1vI5TL9Xis6V81s0= -----END CERTIFICATE-----Generated at Fri Aug 8 13:07:15 2025 by rpki-client