$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa File: 35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (raw, json) Hash identifier: gGbfkI/ElhBngQrT+ekEFznXdlC/28zTyD8jeOv502Y= Subject key identifier: C4:F0:30:31:0C:C7:4F:D1:AD:17:B2:3A:80:15:F2:50:5E:E7:0A:3D Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584AB7B63BD39B483A55153DA440 Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 23316 IP address blocks: 64.136.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:3b:d3:9b:48:3a:55:15:3d:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=fb1b1942-fbfd-4389-bffa-9e8af5af6c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:84:41:1e:80:2d:4b:ec:13:b2:e1:af:8a:a2: e6:bc:b8:3d:11:da:24:06:6b:cc:0f:2c:ba:af:e6: 4c:82:b1:ae:6a:bf:c3:2f:64:85:f7:99:48:5a:87: f7:a6:eb:fc:99:11:91:e9:c4:77:fc:ec:34:6b:b2: c4:06:2a:1c:e6:df:a4:7b:50:b2:2b:3e:7c:59:ad: 1b:1d:96:8b:f1:d5:b8:39:1e:50:1c:01:93:67:44: 1d:72:65:b1:e0:f2:ae:70:67:fc:bd:14:1e:e4:b3: a6:c1:e6:ca:43:85:77:17:e8:18:a2:49:5e:31:55: f4:63:3f:82:df:3a:ec:03:60:b2:9a:62:d9:48:b3: 18:36:14:9d:02:44:2e:f3:74:75:11:3e:95:e0:20: 88:df:42:70:d8:ea:cf:e2:75:88:df:3b:35:a2:0d: 79:6f:46:99:f5:06:7b:89:f0:0f:06:ff:d3:52:95: 17:97:2a:7a:16:ea:96:8b:77:71:89:0b:a7:21:46: e9:49:da:82:f2:20:a1:77:23:8f:fb:14:49:32:7a: 90:6f:9b:78:f2:82:83:ca:ec:ad:5d:8b:6b:b2:37: e5:3a:49:5b:1d:c8:64:8c:69:e0:db:db:ca:97:f1: c7:62:54:b9:25:bc:de:ad:1c:b2:d6:ed:78:6b:0a: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F0:30:31:0C:C7:4F:D1:AD:17:B2:3A:80:15:F2:50:5E:E7:0A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: 64.136.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:77:2f:33:64:4e:67:27:28:48:e0:46:5c:d6:01:0b:63:47: c6:4f:2c:a8:de:93:0a:16:58:3f:66:9f:50:d8:3e:b4:13:12: 72:48:db:8d:5b:7e:0e:ef:12:41:d6:3f:c3:4c:cc:89:37:9c: 39:0c:77:c3:9d:4c:43:7e:b2:0e:69:5b:51:0a:c6:1f:bd:07: 66:59:78:50:12:48:28:b5:c3:f7:cd:19:bc:8b:e7:5a:99:2e: 3d:40:72:31:d1:1d:1b:82:62:75:1d:69:dc:71:d0:c9:a9:18: 28:23:2f:a2:a4:e4:95:60:5d:4a:77:05:bf:c1:ce:8e:31:89: e6:24:04:58:c7:d6:44:f8:c0:9b:b0:f2:0d:41:23:34:3a:73: bc:97:ac:60:ff:ac:28:b2:c2:4b:34:58:45:96:0c:72:05:0f: f3:aa:3b:72:fd:ea:8b:72:0e:49:39:44:13:9a:27:6a:f2:27: c0:65:77:be:1b:6a:b1:d1:f1:c9:79:5e:87:3c:c2:59:87:ea: ae:ab:0e:e3:3b:2a:9d:a4:3d:ab:33:85:28:80:88:c9:e5:b2: 12:e5:b3:8d:d9:28:f2:ee:e8:eb:ff:8e:84:f8:01:67:1c:c3: 72:6b:82:c3:a1:63:26:ce:a2:33:1a:92:5a:c7:66:69:79:95: ab:33:0f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjvTm0g6VRU9pEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZmIxYjE5NDItZmJmZC00Mzg5LWJmZmEtOWU4YWY1YWY2YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oRBHoAtS+wTsuGviqLmvLg9EdokBmvMDyy6 r+ZMgrGuar/DL2SF95lIWof3puv8mRGR6cR3/Ow0a7LEBioc5t+ke1CyKz58Wa0b HZaL8dW4OR5QHAGTZ0QdcmWx4PKucGf8vRQe5LOmwebKQ4V3F+gYokleMVX0Yz+C 3zrsA2CymmLZSLMYNhSdAkQu83R1ET6V4CCI30Jw2OrP4nWI3zs1og15b0aZ9QZ7 ifAPBv/TUpUXlyp6FuqWi3dxiQunIUbpSdqC8iChdyOP+xRJMnqQb5t48oKDyuyt XYtrsjflOklbHchkjGng29vKl/HHYlS5JbzerRyy1u14awpMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTwMDEMx0/RrReyOoAV8lBe5wo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMzVjNjhkYjEtYjI3Zi0z NDI4LWIzMTItYzAzZDg2ZTRmOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQIiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ3LzNkTmcnKEjgRlzWAQtjR8ZPLKjekwoWWD9mn1DYPrQTEnJI241b fg7vEkHWP8NMzIk3nDkMd8OdTEN+sg5pW1EKxh+9B2ZZeFASSCi1w/fNGbyL51qZ Lj1AcjHRHRuCYnUdadxx0MmpGCgjL6Kk5JVgXUp3Bb/Bzo4xieYkBFjH1kT4wJuw 8g1BIzQ6c7yXrGD/rCiywks0WEWWDHIFD/OqO3L96otyDkk5RBOaJ2ryJ8Bld74b arHR8cl5Xoc8wlmH6q6rDuM7Kp2kPaszhSiAiMnlshLls43ZKPLu6Ov/joT4AWcc w3JrgsOhYybOojMaklrHZml5laszDwk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:36 2025 by rpki-client