$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa File: c038d6f1-52c4-353f-bf06-0895e4955e50.roa (raw, json) Hash identifier: i38yU3K66TCoJnDwkeoY0pvpJb5LBo64zrutQ7f7Ns0= Subject key identifier: 97:4A:29:76:9A:91:45:98:C1:84:A6:E8:CD:99:46:71:A5:94:FA:07 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F4328584AB4EB73FFFF07323012D12880 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 64236 IP address blocks: 199.193.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:73:ff:ff:07:32:30:12:d1:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=33080548-7b18-4778-ad04-1bbf4aff771b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:46:5d:45:40:50:4b:6c:cd:ac:24:91:44: cd:2b:a7:03:1a:b9:1a:60:19:3b:b5:f4:5e:55:22: 1f:53:66:59:84:c5:f6:a1:8b:70:82:c8:03:b1:c7: 43:92:f5:2c:a2:77:24:f0:13:4d:bf:3c:59:c5:a9: 96:f3:48:a5:9c:02:d4:01:cd:e0:21:91:fd:e3:b2: 76:26:f6:93:63:05:f4:7b:6d:bf:be:00:78:a8:c1: 40:4b:40:d8:fb:8e:43:0f:bf:59:1b:56:df:03:20: ad:ec:85:a6:fa:54:03:fa:cc:66:70:8e:32:0a:04: 1c:be:a0:a3:0a:08:fb:c6:8f:f0:39:95:62:a3:03: 9d:35:3f:05:de:ee:d9:cd:31:e3:b8:ce:f0:78:8a: 5c:db:0f:07:55:17:cc:fb:a8:19:bc:14:18:fd:d6: ec:02:eb:ca:e1:eb:1e:28:ef:f0:c6:9b:96:bc:49: 24:52:89:0f:00:ff:61:d0:30:3f:97:66:1e:5a:69: 07:72:cb:93:5e:c2:79:da:b7:5d:ba:a8:25:e6:27: 34:32:15:8e:91:d7:3e:c3:f1:d1:fc:cd:d5:24:67: 8c:e2:5b:e1:87:da:b2:6a:b2:ee:b4:17:c7:a0:d2: 4c:41:66:65:2d:6f:95:30:e7:77:5c:b6:a3:7f:f6: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4A:29:76:9A:91:45:98:C1:84:A6:E8:CD:99:46:71:A5:94:FA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/c038d6f1-52c4-353f-bf06-0895e4955e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.193.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:28:4d:4a:33:9f:50:86:6c:ae:d9:a2:b3:9f:ce:36:eb:8f: e2:41:7c:79:3b:14:43:90:88:d0:0f:04:0c:fa:06:ec:c4:8d: ec:cf:6f:1c:1f:06:b6:3d:b7:44:8f:57:32:a3:f5:4e:1b:da: d9:e4:84:5c:37:74:51:da:be:ec:8a:50:ac:8c:00:0d:9d:1e: 6d:72:d5:57:0f:e4:15:aa:13:fe:d2:46:2d:81:de:f9:4d:88: e1:23:98:dc:e4:69:29:8e:e6:67:ff:b6:33:e5:47:cd:01:c5: 58:4a:fc:7f:14:1f:e6:ad:27:03:fa:21:64:c7:46:86:a2:5c: e7:0d:ae:15:37:53:5e:bb:ff:79:1c:b8:cc:61:1f:a6:b4:24: 7f:ec:b7:af:b3:75:30:88:0a:3f:da:99:4f:15:de:dc:64:d6: d1:2e:91:18:aa:c4:ed:6e:68:9f:81:b8:55:3f:ab:24:3a:36: 8b:6e:e3:63:11:84:c1:82:27:3c:53:10:3b:a7:d2:e1:0e:ab: b2:d1:7c:c2:34:ac:dd:3b:cb:ba:87:93:9d:01:b5:bf:05:fb: c6:1f:33:7b:3a:b4:7f:e2:ea:f1:c6:4e:0f:9b:be:48:2d:88: 5f:31:cb:db:0e:a2:76:5c:4f:85:9b:b2:5f:65:c5:d6:90:f8: 80:fa:46:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063P//wcyMBLRKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzMwODA1NDgtN2IxOC00Nzc4LWFkMDQtMWJiZjRhZmY3NzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuxGXUVAUEtszawkkUTNK6cDGrkaYBk7tfRe VSIfU2ZZhMX2oYtwgsgDscdDkvUsonck8BNNvzxZxamW80ilnALUAc3gIZH947J2 JvaTYwX0e22/vgB4qMFAS0DY+45DD79ZG1bfAyCt7IWm+lQD+sxmcI4yCgQcvqCj Cgj7xo/wOZViowOdNT8F3u7ZzTHjuM7weIpc2w8HVRfM+6gZvBQY/dbsAuvK4ese KO/wxpuWvEkkUokPAP9h0DA/l2YeWmkHcsuTXsJ52rdduqgl5ic0MhWOkdc+w/HR /M3VJGeM4lvhh9qyarLutBfHoNJMQWZlLW+VMOd3XLajf/YFLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdKKXaakUWYwYSm6M2ZRnGllPoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvYzAzOGQ2ZjEtNTJjNC0z NTNmLWJmMDYtMDg5NWU0OTU1ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsoTUozn1CGbK7ZorOfzjbrj+JBfHk7FEOQiNAPBAz6BuzEjezPbxwf BrY9t0SPVzKj9U4b2tnkhFw3dFHavuyKUKyMAA2dHm1y1VcP5BWqE/7SRi2B3vlN iOEjmNzkaSmO5mf/tjPlR80BxVhK/H8UH+atJwP6IWTHRoaiXOcNrhU3U167/3kc uMxhH6a0JH/st6+zdTCICj/amU8V3txk1tEukRiqxO1uaJ+BuFU/qyQ6Notu42MR hMGCJzxTEDun0uEOq7LRfMI0rN07y7qHk50Btb8F+8YfM3s6tH/i6vHGTg+bvkgt iF8xy9sOonZcT4Wbsl9lxdaQ+ID6Rto= -----END CERTIFICATE-----Generated at Mon Aug 4 18:37:28 2025 by rpki-client