$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa File: 25e1f105-51dc-3628-8af3-fd38d010fc75.roa (raw, json) Hash identifier: 1Zpc+jTs56dAMKR1j5MtvN/TLm88RM4St6Mt+nKg+94= Subject key identifier: 35:5A:04:DD:FE:27:B9:2D:1D:0D:21:54:0E:A1:89:84:C9:24:42:55 Certificate issuer: /CN=77258d44-b15b-4045-943b-356f0becdaa2 Certificate serial: 010D0C9F4328584A7D15F8E125CD8224A7BA5100 Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 399554 IP address blocks: 209.35.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f8:e1:25:cd:82:24:a7:ba:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=cf035d3e-fe04-439d-8fd0-04621b262897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:56:51:23:14:12:3a:3d:ee:0b:6a:9e:e1: 28:6c:a0:63:40:02:25:1e:1c:b6:16:3d:cb:71:b4: ef:57:32:13:b8:3f:2b:88:af:38:6b:3e:af:9c:3c: 98:85:f8:79:4c:25:8e:cd:78:44:e5:60:fd:d2:0f: df:65:d6:1c:c5:31:41:13:a1:a5:05:50:6e:16:a6: 38:34:f7:76:ec:04:20:2b:d1:4d:93:a6:e9:71:02: 48:e5:68:2a:94:3c:e5:bf:db:20:30:28:c7:71:dc: 93:95:a6:f4:0a:64:e5:47:c0:cf:cf:f9:05:00:c6: 25:c4:a0:12:a4:72:99:17:3d:12:82:99:c5:58:94: ec:a0:b5:3f:74:86:0a:08:b0:64:5c:00:9b:6b:48: 6d:4b:fb:94:97:a0:37:85:86:f0:ec:b4:6a:6c:c8: ee:cc:9c:e9:03:de:ac:76:fe:93:41:d3:29:05:75: dd:41:3a:0d:ca:a1:a6:c3:fa:47:f1:1a:6f:5d:1d: 85:f0:6c:d7:50:06:11:a7:53:5e:63:53:b8:1e:42: 3d:ed:dc:0a:59:4a:21:b0:61:b2:ed:8d:11:13:95: 4e:36:1f:80:68:e6:1a:e2:13:f2:70:ad:98:89:0f: 37:0f:3f:6b:eb:53:a5:f9:93:bb:39:8a:c7:a5:5a: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5A:04:DD:FE:27:B9:2D:1D:0D:21:54:0E:A1:89:84:C9:24:42:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl X509v3 Authority Key Identifier: keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer sbgp-ipAddrBlock: critical IPv4: 209.35.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:98:75:28:d0:07:94:1c:33:c7:9a:6c:9f:19:9a:1c:70:c3: 69:c9:3e:24:76:f4:29:4d:a1:ce:d9:48:e4:b1:15:59:95:6b: e4:8e:9c:5c:71:da:1d:e9:a5:56:dc:0b:ca:7e:88:ae:96:ab: b0:84:ba:ee:7d:21:b0:57:7a:da:10:25:7e:af:78:45:e9:5b: 09:a7:6b:1c:af:41:6a:bb:e2:0e:4c:62:9c:dc:56:f5:4d:08: f2:2d:d4:96:d9:fe:a6:e2:0b:48:30:a8:bc:e4:e5:20:3a:c7: d7:7c:14:7b:5a:3e:cd:a0:af:05:78:aa:5a:90:e4:9d:1a:57: f7:8a:ec:9f:f5:35:63:3a:8e:0f:64:60:27:0f:c3:df:a5:5d: a3:08:f9:66:c5:39:8e:a1:c3:bb:c7:72:c3:d0:53:15:41:7f: d8:0b:1e:72:7a:ba:7c:25:0a:e2:19:f2:a4:ad:e3:85:02:fb: bb:a6:1d:62:51:04:bb:cf:96:57:6d:c3:5c:d0:7a:e1:4e:b9: 4e:46:16:d6:ba:e8:81:11:d6:9e:15:55:4d:57:be:62:6e:3b: 3f:e0:d0:dd:45:2e:78:c4:8c:f8:f6:06:ff:bf:ae:60:75:c9: d0:a7:d2:ed:b6:16:60:46:c6:66:d2:a2:77:9a:ea:47:f5:39: 89:e8:4e:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfjhJc2CJKe6UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzcyNThkNDQtYjE1Yi00MDQ1LTk0M2ItMzU2ZjBiZWNk YWEyMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk Y2YwMzVkM2UtZmUwNC00MzlkLThmZDAtMDQ2MjFiMjYyODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22NWUSMUEjo97gtqnuEobKBjQAIlHhy2Fj3L cbTvVzITuD8riK84az6vnDyYhfh5TCWOzXhE5WD90g/fZdYcxTFBE6GlBVBuFqY4 NPd27AQgK9FNk6bpcQJI5WgqlDzlv9sgMCjHcdyTlab0CmTlR8DPz/kFAMYlxKAS pHKZFz0SgpnFWJTsoLU/dIYKCLBkXACba0htS/uUl6A3hYbw7LRqbMjuzJzpA96s dv6TQdMpBXXdQToNyqGmw/pH8RpvXR2F8GzXUAYRp1NeY1O4HkI97dwKWUohsGGy 7Y0RE5VONh+AaOYa4hPycK2YiQ83Dz9r61Ol+ZO7OYrHpVoIMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVaBN3+J7ktHQ0hVA6hiYTJJEJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NzI1 OGQ0NC1iMTViLTQwNDUtOTQzYi0zNTZmMGJlY2RhYTIvMjVlMWYxMDUtNTFkYy0z NjI4LThhZjMtZmQzOGQwMTBmYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzcyNThkNDQtYjE1Yi00MDQ1LTk0 M2ItMzU2ZjBiZWNkYWEyLzc3MjU4ZDQ0LWIxNWItNDA0NS05NDNiLTM1NmYwYmVj ZGFhMi5jcmwwHwYDVR0jBBgwFoAUaqOvqLEhEhWHFL78vmgQRyDG97swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NzI1OGQ0NC1iMTViLTQwNDUtOTQzYi0zNTZm MGJlY2RhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0SOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACYdSjQB5QcM8eabJ8Zmhxww2nJPiR29ClNoc7ZSOSxFVmVa+SOnFxx 2h3ppVbcC8p+iK6Wq7CEuu59IbBXetoQJX6veEXpWwmnaxyvQWq74g5MYpzcVvVN CPIt1JbZ/qbiC0gwqLzk5SA6x9d8FHtaPs2grwV4qlqQ5J0aV/eK7J/1NWM6jg9k YCcPw9+lXaMI+WbFOY6hw7vHcsPQUxVBf9gLHnJ6unwlCuIZ8qSt44UC+7umHWJR BLvPlldtw1zQeuFOuU5GFta66IER1p4VVU1XvmJuOz/g0N1FLnjEjPj2Bv+/rmB1 ydCn0u22FmBGxmbSonea6kf1OYnoTkg= -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:53 2025 by rpki-client