$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa File: b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa (raw, json) Hash identifier: 4B12V+TZBTwyisBGe0sFNzONG1Gael6y9wbMVnJNsAM= Subject key identifier: AA:CE:A9:DD:E9:14:A5:6B:BA:0D:C9:17:BE:C2:3C:AF:57:6B:F1:D8 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584ABA80CA2569013CA2BB333C00 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 29 IP address blocks: 192.35.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:ca:25:69:01:3c:a2:bb:33:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=2cce3c88-4889-4aa6-bade-eda30765a029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:04:35:41:81:df:ff:73:c5:a5:7e:a9:a4: ee:5b:e7:92:bd:fd:84:57:9b:a5:1b:e0:36:97:86: 9b:47:13:97:31:31:3e:53:31:05:ca:da:7c:ec:08: 69:2c:85:f7:de:b9:5e:55:00:cf:de:4d:47:7d:61: 20:e2:fe:d6:9d:cc:92:50:2f:30:4f:91:e8:ac:5d: 58:23:11:4c:ae:bf:ad:2b:57:6e:33:84:91:26:db: 20:60:93:cc:68:74:1b:9f:9f:32:1b:fc:b7:bc:f7: fe:22:27:86:dc:36:4d:c9:06:5f:e7:43:0b:ed:d0: ba:29:42:2c:b0:4d:1a:39:c2:96:f2:a5:8c:89:46: 14:3d:1e:ce:34:59:63:91:04:96:7f:7f:bd:4a:f7: 5d:ae:a7:2a:d9:d1:67:24:3d:02:c6:0f:ed:7b:4e: cf:49:30:80:b5:ab:3e:6e:52:00:75:e3:90:b9:6d: a4:b6:fb:95:f1:a0:17:98:1c:7a:f3:4d:b7:cb:e5: 5b:eb:4c:5f:30:6d:bb:5c:95:06:7d:c9:b3:fa:9e: 02:90:ae:05:0e:e4:f2:3f:32:b3:0e:c1:a1:da:96: f0:10:9b:1f:9e:94:73:39:37:0c:a1:30:43:3e:67: c4:30:0e:cb:ff:42:73:73:38:46:85:91:43:e1:9c: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CE:A9:DD:E9:14:A5:6B:BA:0D:C9:17:BE:C2:3C:AF:57:6B:F1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/b1abb89d-f5a0-39e2-9f3e-765e2e7ac368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.35.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:29:42:17:b4:ef:c4:5b:a3:57:34:5b:f6:3a:c3:98:4f:d2: 7d:09:65:75:a0:63:74:90:ca:0b:43:c9:bf:bf:9c:f8:fe:50: 3a:0e:98:c6:55:8e:0f:67:40:04:05:fc:03:1f:82:2b:10:a3: 66:06:da:c1:c6:3e:ff:97:27:8d:33:be:dd:58:79:dc:7e:4c: 11:22:5a:49:79:16:7e:bd:88:5f:35:9b:f0:f4:8b:7d:46:9c: 32:46:f9:ce:45:a0:d4:98:c3:05:33:49:93:60:c0:6d:47:38: 8f:de:92:98:84:ad:c4:57:df:3f:b2:c7:59:0e:48:4b:4e:28: 96:22:0f:61:a8:40:76:eb:6d:44:c8:4c:fb:63:75:83:48:79: 25:9d:8d:27:ea:ef:9f:56:ba:87:ba:ac:a8:43:bb:5e:0b:c0: 1d:f4:ae:fb:ac:cb:61:00:7b:ad:7e:ef:6b:5b:a3:00:89:31: ab:05:1b:86:02:1f:e6:61:56:83:fb:37:b3:d3:5a:12:59:a1: 09:19:b4:12:34:73:51:36:81:d6:46:55:0d:53:17:f8:8a:7e: 0a:19:49:6d:69:20:79:17:81:6b:cc:6e:dd:c0:50:8e:92:6d: 0c:41:61:61:d2:d4:d0:e2:ca:e1:2b:93:44:59:68:e9:de:a3: 9e:44:ec:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMolaQE8orszPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk MmNjZTNjODgtNDg4OS00YWE2LWJhZGUtZWRhMzA3NjVhMDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2sENUGB3/9zxaV+qaTuW+eSvf2EV5ulG+A2 l4abRxOXMTE+UzEFytp87AhpLIX33rleVQDP3k1HfWEg4v7WncySUC8wT5HorF1Y IxFMrr+tK1duM4SRJtsgYJPMaHQbn58yG/y3vPf+IieG3DZNyQZf50ML7dC6KUIs sE0aOcKW8qWMiUYUPR7ONFljkQSWf3+9Svddrqcq2dFnJD0Cxg/te07PSTCAtas+ blIAdeOQuW2ktvuV8aAXmBx68023y+Vb60xfMG27XJUGfcmz+p4CkK4FDuTyPzKz DsGh2pbwEJsfnpRzOTcMoTBDPmfEMA7L/0JzczhGhZFD4ZwIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrOqd3pFKVrug3JF77CPK9Xa/HYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvYjFhYmI4OWQtZjVhMC0z OWUyLTlmM2UtNzY1ZTJlN2FjMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwpQhe078Rbo1c0W/Y6w5hP0n0JZXWgY3SQygtDyb+/nPj+UDoOmMZV jg9nQAQF/AMfgisQo2YG2sHGPv+XJ40zvt1Yedx+TBEiWkl5Fn69iF81m/D0i31G nDJG+c5FoNSYwwUzSZNgwG1HOI/ekpiErcRX3z+yx1kOSEtOKJYiD2GoQHbrbUTI TPtjdYNIeSWdjSfq759Wuoe6rKhDu14LwB30rvusy2EAe61+72tbowCJMasFG4YC H+ZhVoP7N7PTWhJZoQkZtBI0c1E2gdZGVQ1TF/iKfgoZSW1pIHkXgWvMbt3AUI6S bQxBYWHS1NDiyuErk0RZaOneo55E7Nk= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:07 2025 by rpki-client