$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa File: 64db7fdd-16d1-3399-a90b-2ec2083580a3.roa (raw, json) Hash identifier: 8/F+CY3Dt1SfaNRJkVpvNXMr6pQYidUcCtaNlW4/4bo= Subject key identifier: 7F:47:63:5E:17:83:1E:25:D8:44:BB:E8:68:A6:2F:02:9D:81:7F:65 Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F4328584AB650E9111764B7FEA0A87600 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 35889 IP address blocks: 192.35.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e9:11:17:64:b7:fe:a0:a8:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=d192d672-98ab-4d75-8395-b269fa2cb498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:ec:8a:a9:32:7d:34:b8:35:1c:09:63:8f: 6c:0b:ee:0a:b6:65:6e:3a:41:60:6b:73:e3:12:0b: a9:2f:c9:1b:8d:34:71:a2:da:97:ff:8a:9c:bf:81: c3:0b:4e:1f:97:44:0d:67:b1:55:a5:d2:22:72:b9: 40:4e:56:f6:f1:e7:35:c7:bd:d6:c7:a2:f6:4d:25: 07:6b:60:4b:19:cb:1f:0d:5e:84:7a:32:92:ad:43: c1:32:e7:13:4e:06:10:99:45:94:90:62:46:57:6e: 20:5d:2f:bf:26:d3:0d:05:eb:75:ff:4f:f4:df:97: 7b:0b:24:6f:ea:ba:e3:92:af:11:dc:ee:12:a3:e0: ac:f9:9d:d0:98:6f:15:15:98:08:82:bd:b9:2b:0d: 2c:b8:01:c9:51:7a:2c:e2:e7:2e:65:58:a7:9d:d3: e4:b9:c4:f5:8e:88:e0:21:5e:3f:0c:cd:be:ab:81: ec:80:5f:eb:36:b1:2b:8c:e3:2e:b0:64:90:75:2c: 38:3c:50:de:27:ca:5d:77:2c:6b:f1:36:cc:60:d8: 1d:ef:94:b1:9d:59:47:d6:3f:75:46:08:67:63:4e: 90:0e:49:28:22:d5:24:f9:e3:13:db:52:a4:02:39: 19:5e:5c:67:44:bb:23:32:a9:68:1f:08:41:91:ce: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:47:63:5E:17:83:1E:25:D8:44:BB:E8:68:A6:2F:02:9D:81:7F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/64db7fdd-16d1-3399-a90b-2ec2083580a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 192.35.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b9:33:43:c5:78:47:aa:60:6f:92:d7:33:0d:dc:1d:b1:df: 08:f5:b3:a0:fb:8b:01:99:f3:97:4b:4d:dd:0f:8f:70:2d:6a: bd:4d:5c:67:f2:f8:a3:4a:07:cd:4f:1c:6f:97:01:82:86:9f: 17:d2:87:6a:cf:a7:0c:be:8b:7c:8a:f9:ae:be:5e:0c:17:8e: be:6b:8d:c2:80:87:c7:d0:0c:94:4e:c0:b3:94:53:86:de:cd: ad:84:21:4f:eb:0b:d2:0c:45:a2:de:94:9c:00:e7:42:7c:57: db:73:3c:66:11:4d:c5:a6:f3:0f:38:76:3c:b3:d1:2a:db:46: f5:af:0d:38:f3:27:c3:04:8b:49:2a:9d:f6:19:07:c2:5a:2d: ac:07:b1:d7:71:d4:74:3b:3c:88:a3:fc:b0:03:f2:22:d8:85: 25:1a:07:b0:71:90:87:f1:a3:af:4f:c0:7c:73:be:fb:e9:17: 95:3d:9f:ca:d9:bf:00:e1:09:e4:83:b7:ae:af:16:3b:c1:72: 85:7f:49:fe:27:e6:6d:97:fd:39:41:0f:d9:7a:42:51:78:f5: 41:18:e8:71:f4:0a:5b:96:0f:79:ea:2c:c8:40:d2:48:71:ac: 43:1b:74:5c:a5:0b:d4:84:35:3f:03:1a:48:de:d1:7e:46:e9: 77:9c:27:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOkRF2S3/qCodgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDE5MmQ2NzItOThhYi00ZDc1LTgzOTUtYjI2OWZhMmNiNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsLsiqkyfTS4NRwJY49sC+4KtmVuOkFga3Pj EgupL8kbjTRxotqX/4qcv4HDC04fl0QNZ7FVpdIicrlATlb28ec1x73Wx6L2TSUH a2BLGcsfDV6EejKSrUPBMucTTgYQmUWUkGJGV24gXS+/JtMNBet1/0/035d7CyRv 6rrjkq8R3O4So+Cs+Z3QmG8VFZgIgr25Kw0suAHJUXos4ucuZVinndPkucT1jojg IV4/DM2+q4HsgF/rNrErjOMusGSQdSw4PFDeJ8pddyxr8TbMYNgd75SxnVlH1j91 RghnY06QDkkoItUk+eMT21KkAjkZXlxnRLsjMqloHwhBkc6vbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9HY14Xgx4l2ES76GimLwKdgX9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNjRkYjdmZGQtMTZkMS0z Mzk5LWE5MGItMmVjMjA4MzU4MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa5M0PFeEeqYG+S1zMN3B2x3wj1s6D7iwGZ85dLTd0Pj3Atar1NXGfy +KNKB81PHG+XAYKGnxfSh2rPpwy+i3yK+a6+XgwXjr5rjcKAh8fQDJROwLOUU4be za2EIU/rC9IMRaLelJwA50J8V9tzPGYRTcWm8w84djyz0SrbRvWvDTjzJ8MEi0kq nfYZB8JaLawHsddx1HQ7PIij/LAD8iLYhSUaB7BxkIfxo69PwHxzvvvpF5U9n8rZ vwDhCeSDt66vFjvBcoV/Sf4n5m2X/TlBD9l6QlF49UEY6HH0CluWD3nqLMhA0khx rEMbdFylC9SENT8DGkje0X5G6XecJyo= -----END CERTIFICATE-----Generated at Mon Aug 4 14:05:51 2025 by rpki-client