$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa File: 3ce97c74-b9d2-32ef-83fc-60176c57c547.roa (raw, json) Hash identifier: +dNTUa7OIBO0kXdfTb+mOX8RLydb89IxWpKQ8Ga8WJI= Subject key identifier: 6B:43:5D:3A:AF:EB:FF:93:5E:9E:41:C0:93:2E:A5:0F:85:98:D9:1C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118EE5C4F42415CB558380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 216.239.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8e:e5:c4:f4:24:15:cb:55:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5a1a4fd8-e747-421a-a2d5-c4f527618ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d3:40:30:5c:28:4c:8e:3c:31:56:67:d0:c5: ad:bb:cb:41:03:29:6c:1e:75:05:3a:e6:cb:1a:e8: 03:7a:7a:2b:34:2c:34:85:39:fa:d5:a8:a9:d4:3f: e5:bc:52:ac:fa:81:b6:e1:81:b3:a9:40:0e:d5:65: 8a:61:5a:3f:de:a6:f6:ed:fa:d2:83:b7:e9:52:a4: 4a:ca:fd:8b:06:ea:5f:83:6e:54:9e:7c:08:9b:c8: 97:32:30:63:07:61:a7:65:28:dc:9c:3c:de:3e:37: 8e:37:e0:69:7c:71:67:64:ec:21:9c:65:b4:a6:69: a0:ff:67:f0:78:a9:0c:4c:87:b4:93:4a:1c:ad:50: 97:2a:a7:db:0a:78:c7:1c:84:86:84:af:c9:0e:de: 6f:84:0c:b2:4e:71:8d:02:57:df:3d:67:f9:58:a8: 17:48:27:76:29:de:64:3f:95:14:1f:86:d9:67:11: 92:2e:d0:fe:fd:dc:8e:6d:1a:b2:8c:8b:43:9e:00: 80:ea:9a:d7:f6:d9:65:b3:a2:4b:20:6b:a4:43:e4: 81:c7:ee:8f:5f:0d:15:d2:12:59:aa:b7:17:fb:f5: e1:35:a1:cd:04:82:ff:96:3a:14:d8:06:26:0f:33: fd:fc:f0:fb:c2:6e:1d:05:71:74:b1:1c:fd:63:32: 68:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:43:5D:3A:AF:EB:FF:93:5E:9E:41:C0:93:2E:A5:0F:85:98:D9:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ce97c74-b9d2-32ef-83fc-60176c57c547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:43:d6:4b:a6:26:02:72:98:e2:b7:76:b3:53:5a:a8:94:20: 03:0f:fb:ed:ab:fd:24:02:67:3f:80:96:52:6e:c7:39:d8:4f: b6:b2:14:c4:44:c2:fb:37:4c:7f:a1:81:6a:d0:0a:62:11:84: 46:33:de:a8:82:13:15:0d:e7:24:e0:a0:39:65:d8:b8:f5:23: c9:d6:2c:75:25:10:ce:32:63:ba:9c:69:97:35:d3:bf:0a:2e: 52:9b:95:fa:25:bd:5a:94:4f:17:f7:69:32:84:4c:a2:65:80: 82:5e:f0:eb:05:7b:c3:07:0e:61:cd:a2:18:c8:23:9f:91:44: 75:97:9e:ee:13:b8:cc:f8:1a:98:96:2a:f5:9d:75:50:c1:ea: 81:82:cb:56:9a:12:bc:9e:6d:98:a6:d3:f1:16:3e:cb:d2:c1: 99:e8:b8:a4:e8:3b:d2:5d:43:52:a1:96:8f:78:54:75:4d:f7: da:6f:30:d4:96:0e:f6:11:7c:31:df:e0:d5:80:e3:c6:08:4f: 1d:c2:bb:1e:e7:d9:e3:f5:d2:c9:51:b8:57:6a:9c:e7:c3:4c: bc:6c:8a:a3:6c:2e:c9:3a:6a:4e:40:6d:c2:90:a9:5e:40:6a: c9:cb:fa:a6:8f:24:a1:c9:b6:a4:56:5d:c0:fb:8f:6b:e7:d9: 19:50:95:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY7lxPQkFctVg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWExYTRmZDgtZTc0Ny00MjFhLWEyZDUtYzRmNTI3NjE4ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidNAMFwoTI48MVZn0MWtu8tBAylsHnUFOubL GugDenorNCw0hTn61aip1D/lvFKs+oG24YGzqUAO1WWKYVo/3qb27frSg7fpUqRK yv2LBupfg25UnnwIm8iXMjBjB2GnZSjcnDzePjeON+BpfHFnZOwhnGW0pmmg/2fw eKkMTIe0k0ocrVCXKqfbCnjHHISGhK/JDt5vhAyyTnGNAlffPWf5WKgXSCd2Kd5k P5UUH4bZZxGSLtD+/dyObRqyjItDngCA6prX9tlls6JLIGukQ+SBx+6PXw0V0hJZ qrcX+/XhNaHNBIL/ljoU2AYmDzP9/PD7wm4dBXF0sRz9YzJoSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtDXTqv6/+TXp5BwJMupQ+FmNkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2NlOTdjNzQtYjlkMi0z MmVmLTgzZmMtNjAxNzZjNTdjNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdD1kumJgJymOK3drNTWqiUIAMP++2r/SQCZz+AllJuxznYT7ayFMRE wvs3TH+hgWrQCmIRhEYz3qiCExUN5yTgoDll2Lj1I8nWLHUlEM4yY7qcaZc1078K LlKblfolvVqUTxf3aTKETKJlgIJe8OsFe8MHDmHNohjII5+RRHWXnu4TuMz4GpiW KvWddVDB6oGCy1aaEryebZim0/EWPsvSwZnouKToO9JdQ1Khlo94VHVN99pvMNSW DvYRfDHf4NWA48YITx3Cux7n2eP10slRuFdqnOfDTLxsiqNsLsk6ak5AbcKQqV5A asnL+qaPJKHJtqRWXcD7j2vn2RlQlSI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:27 2025 by rpki-client