$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa File: a38526c3-764b-3a1b-8738-d253135a31d1.roa (raw, json) Hash identifier: RnOXUbPD7l6CKM98QOgNwsKv+HhfcPKWKPqAt/Bil00= Subject key identifier: B4:62:32:44:A2:2A:52:39:2F:0B:C9:58:3C:3C:34:51:E9:48:94:B4 Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F4328584AB651013FDBC9181953B3DB40 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 1299 IP address blocks: 70.35.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:01:3f:db:c9:18:19:53:b3:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=0e75041e-040e-4274-b0b5-ab4fb0c7e091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b5:29:e3:8d:f3:9c:66:9a:82:89:84:8c:f5: db:df:1b:e2:d0:b3:6a:c6:59:f2:1b:cb:91:b6:e4: ec:86:c1:21:be:c0:be:d7:7c:9d:f2:95:e5:f6:6f: 1f:f8:4c:0e:75:6a:d1:07:68:1b:bc:c3:40:df:18: 65:cb:91:b2:97:b6:4c:5f:11:86:d3:8d:4b:f5:3d: db:fe:6c:98:a1:5b:3d:cc:ba:b0:15:4b:aa:32:53: e0:5f:9d:c4:36:69:92:70:ff:bc:b7:64:5e:b6:c4: 1b:06:eb:78:7a:b6:89:85:7c:1c:63:4c:e8:e0:62: 3b:d8:00:69:41:a8:cc:b5:cd:ad:7c:28:59:44:86: 93:a3:80:33:79:c7:12:86:cf:51:a7:69:97:36:d4: bc:74:44:8d:35:ca:cf:c5:af:96:99:95:4a:f6:00: 58:1f:13:fe:f9:17:65:91:3d:45:6d:ef:3c:c5:4e: 09:0b:f1:d8:a2:cc:47:e4:7c:29:18:80:a2:f7:11: e6:6a:76:ed:01:02:92:0d:23:63:00:94:1d:11:15: 73:de:0b:df:e4:c3:1c:20:f8:20:6a:f6:61:76:57: d3:d0:ec:a6:84:f4:50:71:30:5f:b4:38:0d:10:d7: 08:48:44:91:c5:42:51:8a:f6:a0:45:ab:c1:dd:c0: 74:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:32:44:A2:2A:52:39:2F:0B:C9:58:3C:3C:34:51:E9:48:94:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 70.35.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:27:94:ef:23:ca:ca:74:df:4a:d5:b7:4e:ce:88:f2:a6:1c: 23:20:ad:b9:87:1d:02:b2:f5:f6:f3:63:57:65:7d:66:61:7b: 90:a1:81:b3:a1:75:e7:7d:9a:dd:05:4f:8e:6d:19:14:c0:31: 34:32:7a:75:29:e5:ac:38:cb:8a:d7:5f:a2:e4:71:9a:c8:01: 23:6a:e1:fb:66:5c:b0:e1:0d:b7:ec:c0:99:6f:03:6b:50:1c: da:bc:59:ee:99:9b:9a:78:f6:44:2e:99:85:04:61:cd:e9:36: 3c:9d:dc:26:46:e8:97:16:eb:51:34:8d:ef:cc:b1:01:ee:24: 68:2d:b3:3b:52:71:c7:d7:dc:37:93:42:24:de:e7:23:5c:d6: db:8b:4b:f7:b0:88:3e:a0:21:d7:b4:8b:a3:ba:70:b7:15:b1: dd:8a:5a:1f:80:05:1f:d2:ce:2d:ef:54:1e:73:4e:c8:46:2f: bf:b2:53:1a:cd:56:11:52:5c:8f:ba:c0:65:87:7c:f5:a2:2d: c4:97:f1:c0:19:75:60:b2:93:95:33:cf:b3:c3:e6:2e:5a:62: 27:94:ae:f8:0f:df:ff:ba:2a:00:f5:83:21:71:ae:0b:44:0a: 82:b4:da:02:6d:2d:dd:1a:98:09:69:9f:7e:cf:9c:3f:d2:ed: bf:a7:e0:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQE/28kYGVOz20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MGU3NTA0MWUtMDQwZS00Mjc0LWIwYjUtYWI0ZmIwYzdlMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLUp443znGaagomEjPXb3xvi0LNqxlnyG8uR tuTshsEhvsC+13yd8pXl9m8f+EwOdWrRB2gbvMNA3xhly5Gyl7ZMXxGG041L9T3b /myYoVs9zLqwFUuqMlPgX53ENmmScP+8t2RetsQbBut4eraJhXwcY0zo4GI72ABp QajMtc2tfChZRIaTo4AzeccShs9Rp2mXNtS8dESNNcrPxa+WmZVK9gBYHxP++Rdl kT1Fbe88xU4JC/HYosxH5HwpGICi9xHmanbtAQKSDSNjAJQdERVz3gvf5MMcIPgg avZhdlfT0OymhPRQcTBftDgNENcISESRxUJRivagRavB3cB0NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRiMkSiKlI5LwvJWDw8NFHpSJS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvYTM4NTI2YzMtNzY0Yi0z YTFiLTg3MzgtZDI1MzEzNWEzMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwnlO8jysp030rVt07OiPKmHCMgrbmHHQKy9fbzY1dlfWZhe5ChgbOh ded9mt0FT45tGRTAMTQyenUp5aw4y4rXX6LkcZrIASNq4ftmXLDhDbfswJlvA2tQ HNq8We6Zm5p49kQumYUEYc3pNjyd3CZG6JcW61E0je/MsQHuJGgtsztSccfX3DeT QiTe5yNc1tuLS/ewiD6gIde0i6O6cLcVsd2KWh+ABR/Szi3vVB5zTshGL7+yUxrN VhFSXI+6wGWHfPWiLcSX8cAZdWCyk5Uzz7PD5i5aYieUrvgP3/+6KgD1gyFxrgtE CoK02gJtLd0amAlpn37PnD/S7b+n4E8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:16:39 2025 by rpki-client