$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa File: ea25304e-5e06-3ced-b3a0-30a19c749708.roa (raw, json) Hash identifier: YiDR0QFyp/rDrXfydYeSTQ93zIsd8tj+ZVUX6brk7Ms= Subject key identifier: 2C:88:12:B4:8A:C9:86:B8:C8:ED:A5:FD:0E:EC:66:86:8B:7C:42:5B Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F43285849D42FAAE8E5F6D6E9F5D11780 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 64236 IP address blocks: 199.91.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:aa:e8:e5:f6:d6:e9:f5:d1:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=7fd90cbc-ca93-4e8f-be99-28d767550378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:b4:52:72:a9:3e:e5:7f:9e:17:bb:48:8c: 8e:d9:b2:e5:59:c2:a3:d7:00:87:63:e4:43:3a:98: 65:08:21:61:21:7e:62:02:52:25:6a:2d:b4:7b:a1: 6c:b6:87:1d:c1:cf:ad:00:97:96:88:59:7c:52:55: 9a:2c:5d:2c:99:28:4c:13:06:03:00:78:cd:f9:75: 62:99:01:a3:4a:db:01:6b:b2:b9:3d:3c:9f:a4:af: cc:76:f7:b6:c1:ae:b1:8f:2f:e0:d7:16:c3:0e:5f: a6:56:39:f1:3e:22:e0:2b:2f:a1:c5:91:ed:2e:8e: 4d:c8:14:5e:10:aa:85:29:d4:10:08:63:d7:9c:75: 56:6d:6e:c6:a1:12:15:00:58:3c:8e:b3:bf:fa:1e: 62:1d:dd:ac:86:0f:03:78:6d:21:8a:3e:b3:83:6f: 26:04:11:ce:6c:e4:02:a8:31:16:7f:05:5e:2f:d0: 46:0b:82:86:d2:dc:2e:f6:ff:38:36:3b:b6:7e:03: 36:a9:c1:f6:db:e1:53:fa:f8:a5:57:2d:29:58:ac: 7b:33:42:cd:d8:bb:13:00:bc:58:9f:ee:7c:30:18: b0:b7:b9:4e:0a:a3:e2:c9:4a:04:6e:e4:99:c8:6e: 5d:9f:03:00:44:51:73:67:94:bc:2c:bf:c5:21:7d: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:12:B4:8A:C9:86:B8:C8:ED:A5:FD:0E:EC:66:86:8B:7C:42:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ea25304e-5e06-3ced-b3a0-30a19c749708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv4: 199.91.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:92:03:36:d5:0f:5f:0e:a8:c0:c9:ff:ab:16:d3:17:d0:a8: 7c:57:0a:db:93:e3:10:f6:44:0b:f8:65:15:2a:6f:25:f4:5d: a4:74:0e:0b:0e:04:e3:9b:e8:c2:af:6f:67:d9:dc:25:41:33: b6:8f:1c:2f:74:d8:73:cd:09:9b:d3:3e:92:b8:2d:d8:b0:ad: 3b:ad:6f:83:fd:5a:22:0a:41:2b:6c:a8:eb:e2:56:66:c0:8b: 50:91:d2:d3:ef:61:6b:91:a8:2b:64:27:3b:10:2a:2b:e8:8f: 0a:04:93:8f:56:2b:e9:29:09:60:f3:f5:fc:e3:af:dc:75:17: 3f:dd:e5:9b:43:a5:f0:ab:3b:59:b6:4e:f1:44:46:65:06:30: 86:77:65:52:b3:9f:5b:ff:74:4e:55:97:a1:09:e0:38:7c:14: 6e:ed:dd:77:07:97:06:53:44:59:97:c9:ae:c7:cb:5f:ba:e4: e3:99:6e:0d:66:4f:52:32:90:d8:df:02:41:67:9f:2e:44:20: 2f:ef:74:51:e6:e7:39:19:d2:38:f9:30:5e:9c:c0:6d:90:22: 70:ca:56:06:d9:01:30:ca:e9:e7:d2:34:4a:38:6f:be:25:19: 28:cf:3c:c3:5e:e5:38:4a:b9:21:16:86:e5:9b:a9:7f:b3:bb: ae:24:3f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6ro5fbW6fXRF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2ZkOTBjYmMtY2E5My00ZThmLWJlOTktMjhkNzY3NTUwMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAici0UnKpPuV/nhe7SIyO2bLlWcKj1wCHY+RD OphlCCFhIX5iAlIlai20e6Fstocdwc+tAJeWiFl8UlWaLF0smShMEwYDAHjN+XVi mQGjStsBa7K5PTyfpK/Mdve2wa6xjy/g1xbDDl+mVjnxPiLgKy+hxZHtLo5NyBRe EKqFKdQQCGPXnHVWbW7GoRIVAFg8jrO/+h5iHd2shg8DeG0hij6zg28mBBHObOQC qDEWfwVeL9BGC4KG0twu9v84Nju2fgM2qcH22+FT+vilVy0pWKx7M0LN2LsTALxY n+58MBiwt7lOCqPiyUoEbuSZyG5dnwMARFFzZ5S8LL/FIX2v0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyIErSKyYa4yO2l/Q7sZoaLfEJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvZWEyNTMwNGUtNWUwNi0z Y2VkLWIzYTAtMzBhMTljNzQ5NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1usMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGSAzbVD18OqMDJ/6sW0xfQqHxXCtuT4xD2RAv4ZRUqbyX0XaR0DgsO BOOb6MKvb2fZ3CVBM7aPHC902HPNCZvTPpK4LdiwrTutb4P9WiIKQStsqOviVmbA i1CR0tPvYWuRqCtkJzsQKivojwoEk49WK+kpCWDz9fzjr9x1Fz/d5ZtDpfCrO1m2 TvFERmUGMIZ3ZVKzn1v/dE5Vl6EJ4Dh8FG7t3XcHlwZTRFmXya7Hy1+65OOZbg1m T1IykNjfAkFnny5EIC/vdFHm5zkZ0jj5MF6cwG2QInDKVgbZATDK6efSNEo4b74l GSjPPMNe5ThKuSEWhuWbqX+zu64kP8g= -----END CERTIFICATE-----Generated at Mon Jun 16 05:59:54 2025 by rpki-client