$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa File: b533aff3-439d-33b5-bcd9-30c7b5833b92.roa (raw, json) Hash identifier: XirnvbGEajHbWpu4TqhNprhMR8XwOLNgk/uXbkoofyg= Subject key identifier: 7E:42:13:29:2F:9C:4E:03:53:A1:87:A2:3B:8D:9A:E0:C1:53:CC:BB Certificate issuer: /CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c Certificate serial: 010D0C9F4328584B047C1BC3BAC56012E4B85600 Authority key identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 3402 IP address blocks: 64.239.32.0/22 maxlen: 24 64.239.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:1b:c3:ba:c5:60:12:e4:b8:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=33867c11-e188-4d14-bac8-93d49dc39bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:62:9f:70:2d:11:c1:50:10:3f:59:13:50: af:14:77:f9:cc:f6:af:50:d8:32:0e:8c:52:b0:8b: 24:a9:b6:d2:56:00:46:63:1b:50:7e:60:5c:f2:e6: 17:3c:72:6c:d1:76:56:dc:21:01:f2:8f:63:af:e0: 61:6f:3a:99:c1:e1:d6:69:2b:71:19:bb:cc:96:94: 39:da:ad:d4:43:57:56:7c:1f:b7:0c:a8:ce:cb:a4: 4f:85:7b:41:36:be:db:f9:a4:44:b0:be:41:27:d5: 4d:6f:55:a0:e5:81:50:d1:4e:04:90:8c:e3:cf:52: 06:e8:a2:cb:c5:95:05:bc:29:3a:b1:ea:61:92:f9: 20:c9:52:69:44:37:e7:cc:6a:1b:8c:ad:aa:23:99: e2:2d:26:c1:32:b2:43:7c:72:a2:65:1b:9a:b0:5f: 53:a3:c2:b8:1b:22:69:c4:10:77:70:96:21:f8:cf: 9b:b2:c1:f4:7b:de:86:9a:6e:f0:1c:d9:1e:bc:36: 15:5f:b4:c6:bd:e4:72:26:28:93:32:3e:1f:7d:69: 59:70:0b:65:8e:97:32:ed:67:3d:b5:f6:cc:f6:6d: f6:ce:86:06:d4:f9:a0:f3:0e:35:b4:9d:fd:4b:1c: 1e:57:91:d3:20:4d:bb:08:12:79:60:98:1c:53:0a: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:42:13:29:2F:9C:4E:03:53:A1:87:A2:3B:8D:9A:E0:C1:53:CC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/b533aff3-439d-33b5-bcd9-30c7b5833b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl X509v3 Authority Key Identifier: keyid:73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer sbgp-ipAddrBlock: critical IPv4: 64.239.32.0/22 64.239.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:67:ae:e3:66:cf:a5:56:98:4b:fe:a6:19:15:e4:83:4e:b5: f7:93:9c:15:9c:15:0f:af:f4:3c:5d:56:5b:86:9a:18:90:d8: a3:90:30:fc:e1:a4:9f:30:02:50:70:d0:a8:4a:42:7d:30:1a: 82:47:13:8c:1b:4d:9a:ed:ad:10:92:00:b0:89:e7:b6:4d:2d: 3e:ce:3e:f4:ba:a1:94:1e:b5:fa:c7:94:14:e9:1f:20:7c:16: 66:26:b0:b2:f0:72:0e:7e:b4:12:e7:19:e3:b1:f7:53:b0:aa: 91:34:33:bc:61:be:74:9a:71:98:7e:be:80:52:32:18:85:c2: ce:ce:1a:79:4b:a7:32:20:62:0e:77:bf:17:ad:a9:c8:17:31: e6:c1:66:f4:1e:50:d3:8b:f0:19:d3:62:0d:45:e8:01:ac:37: ad:2d:b0:b3:6f:07:cd:d3:cc:ad:d7:50:9a:e6:c6:63:00:7a: cb:bf:af:ad:24:41:ef:9c:3c:c8:f6:56:a6:16:84:04:e5:7e: f5:f2:9d:dd:3b:84:9d:fa:34:41:1e:0e:d8:de:66:ff:e3:ba: a3:65:7a:37:da:74:eb:bd:6a:f9:d2:61:c6:cb:c0:53:a6:a3: 9a:b8:73:40:ed:f7:45:50:05:32:03:a4:04:f5:81:05:f3:f8: be:d4:4d:0a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsEfBvDusVgEuS4VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhMTEzYmYtMmE1ZC00ZTk3LTlhM2MtMzEzNjYyZjVh NThjMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzM4NjdjMTEtZTE4OC00ZDE0LWJhYzgtOTNkNDlkYzM5YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgxin3AtEcFQED9ZE1CvFHf5zPavUNgyDoxS sIskqbbSVgBGYxtQfmBc8uYXPHJs0XZW3CEB8o9jr+BhbzqZweHWaStxGbvMlpQ5 2q3UQ1dWfB+3DKjOy6RPhXtBNr7b+aREsL5BJ9VNb1Wg5YFQ0U4EkIzjz1IG6KLL xZUFvCk6sephkvkgyVJpRDfnzGobjK2qI5niLSbBMrJDfHKiZRuasF9To8K4GyJp xBB3cJYh+M+bssH0e96Gmm7wHNkevDYVX7TGveRyJiiTMj4ffWlZcAtljpcy7Wc9 tfbM9m32zoYG1Pmg8w41tJ39SxweV5HTIE27CBJ5YJgcUwq7pwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH5CEykvnE4DU6GHojuNmuDBU8y7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNWEx MTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2NjJmNWE1OGMvYjUzM2FmZjMtNDM5ZC0z M2I1LWJjZDktMzBjN2I1ODMzYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzVhMTEzYmYtMmE1ZC00ZTk3LTlh M2MtMzEzNjYyZjVhNThjLzM1YTExM2JmLTJhNWQtNGU5Ny05YTNjLTMxMzY2MmY1 YTU4Yy5jcmwwHwYDVR0jBBgwFoAUc/JkmpYORO5Bk+iL/kw56kje2NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNWExMTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2 NjJmNWE1OGMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQO8gAwQC QO90MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIRnruNmz6VWmEv+phkV5INOtfeTnBWcFQ+v9DxdVluGmhiQ 2KOQMPzhpJ8wAlBw0KhKQn0wGoJHE4wbTZrtrRCSALCJ57ZNLT7OPvS6oZQetfrH lBTpHyB8FmYmsLLwcg5+tBLnGeOx91OwqpE0M7xhvnSacZh+voBSMhiFws7OGnlL pzIgYg53vxetqcgXMebBZvQeUNOL8BnTYg1F6AGsN60tsLNvB83TzK3XUJrmxmMA esu/r60kQe+cPMj2VqYWhATlfvXynd07hJ36NEEeDtjeZv/juqNlejfadOu9avnS YcbLwFOmo5q4c0Dt90VQBTIDpAT1gQXz+L7UTQo= -----END CERTIFICATE-----Generated at Wed Nov 5 18:34:36 2025 by rpki-client