$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa File: 35ac0cb4-1492-3672-87c8-e934c1ffc305.roa (raw, json) Hash identifier: x8YpRu4c+MKK7oCZXvaZy0m2V/QfSnF4PNQSVGkktlQ= Subject key identifier: 9B:94:E0:3D:2C:4D:89:30:BE:71:22:C1:64:74:47:12:F6:C2:A1:1D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A8B0B65CE11BA2283616AEC00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 1299 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:65:ce:11:ba:22:83:61:6a:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=0addd6bf-e802-4775-9f47-cf0ba0e4ec4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d7:12:59:54:89:34:42:04:aa:ed:01:20:99: 1b:7a:6c:55:2a:a9:54:68:40:d5:41:12:e7:c0:07: 42:3c:06:f1:18:83:b0:86:7a:6f:86:e5:55:89:32: 98:03:91:fa:c3:ae:e9:1d:2d:82:80:9a:8d:52:9f: 9e:2c:3b:13:07:4f:1a:18:53:06:e5:29:50:3d:df: 2c:21:c6:cb:ec:1f:5f:4f:fc:69:85:22:8e:10:91: 59:ef:f5:24:38:2f:7b:71:03:4f:86:0a:7c:ec:e9: 3f:bf:93:15:4b:92:67:dd:b4:40:95:cd:30:2e:11: db:97:e4:5c:6f:03:bb:65:8b:0d:3d:74:55:b4:71: f8:1c:1d:f2:64:28:bb:6d:ca:a4:16:ac:bc:39:02: ee:84:ac:d0:71:a2:22:78:95:2f:f0:30:f8:cb:66: ed:1a:73:a5:7e:ac:0c:da:4c:43:12:ee:10:e5:c5: de:9c:31:91:48:94:22:a0:3c:c7:57:cd:b9:44:cc: a2:cb:6b:c0:88:e2:2e:4c:0e:05:2b:60:ac:68:7a: 31:ce:5a:b0:e6:11:10:58:42:2e:a6:6e:20:7b:dd: d0:f2:1e:42:51:5f:6a:50:50:6c:60:76:d5:bd:db: 7f:ab:c4:23:51:6e:6d:b9:a4:07:ea:8b:d6:57:4c: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:94:E0:3D:2C:4D:89:30:BE:71:22:C1:64:74:47:12:F6:C2:A1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0c:43:5d:0b:62:15:87:53:e4:51:1b:76:91:2f:f9:2f:fb: 9a:1d:bd:de:90:97:e3:28:4f:d3:8c:c2:de:ff:c3:fe:e7:0a: 46:9e:ad:4a:d5:72:80:c1:4f:e6:0b:30:23:64:1d:eb:bc:e1: 72:5e:2e:65:af:79:d3:d5:6a:82:29:cf:7b:94:d5:cf:8e:f6: ed:a7:0f:5c:cd:7d:c8:a6:7d:9e:69:d5:19:41:6c:48:b6:9f: 25:da:05:10:c6:4b:f0:02:84:f9:b2:99:de:09:e7:15:98:83: 7b:9b:eb:33:4a:8b:da:ca:9b:65:d2:7d:6a:37:58:d4:da:22: 02:25:fc:93:c3:1f:0f:aa:fe:39:51:ee:77:9e:92:5a:5c:de: 58:42:89:09:6e:06:f2:52:fe:1f:b8:75:81:54:9f:5f:bd:8b: 27:d2:35:e8:8b:9c:4e:2d:2e:d0:8b:38:ba:fa:2b:77:65:65: fa:1a:a6:c5:a0:17:61:38:92:36:34:46:9e:ee:31:ab:ea:3d: 59:36:25:c4:82:dd:03:8d:d2:01:c3:b3:82:61:6b:30:e5:d6: a0:63:fe:c5:5d:c8:3a:13:6d:de:83:3d:ba:bd:67:16:e1:3a: 5b:39:25:0c:cb:4b:a4:62:97:53:c5:f7:56:8f:47:4e:46:0f: 6b:95:ed:63 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqLC2XOEboig2Fq7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MGFkZGQ2YmYtZTgwMi00Nzc1LTlmNDctY2YwYmEwZTRlYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69cSWVSJNEIEqu0BIJkbemxVKqlUaEDVQRLn wAdCPAbxGIOwhnpvhuVViTKYA5H6w67pHS2CgJqNUp+eLDsTB08aGFMG5SlQPd8s IcbL7B9fT/xphSKOEJFZ7/UkOC97cQNPhgp87Ok/v5MVS5Jn3bRAlc0wLhHbl+Rc bwO7ZYsNPXRVtHH4HB3yZCi7bcqkFqy8OQLuhKzQcaIieJUv8DD4y2btGnOlfqwM 2kxDEu4Q5cXenDGRSJQioDzHV825RMyiy2vAiOIuTA4FK2CsaHoxzlqw5hEQWEIu pm4ge93Q8h5CUV9qUFBsYHbVvdt/q8QjUW5tuaQH6ovWV0zxBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJuU4D0sTYkwvnEiwWR0RxL2wqEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzVhYzBjYjQtMTQ5Mi0z NjcyLTg3YzgtZTkzNGMxZmZjMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACQxDXQtiFYdT5FEbdpEv+S/7mh293pCX4yhP04zC3v/D/ucKRp6tStVy gMFP5gswI2Qd67zhcl4uZa9509VqginPe5TVz4727acPXM19yKZ9nmnVGUFsSLaf JdoFEMZL8AKE+bKZ3gnnFZiDe5vrM0qL2sqbZdJ9ajdY1NoiAiX8k8MfD6r+OVHu d56SWlzeWEKJCW4G8lL+H7h1gVSfX72LJ9I16IucTi0u0Is4uvord2Vl+hqmxaAX YTiSNjRGnu4xq+o9WTYlxILdA43SAcOzgmFrMOXWoGP+xV3IOhNt3oM9ur1nFuE6 WzklDMtLpGKXU8X3Vo9HTkYPa5XtYw== -----END CERTIFICATE-----Generated at Sun Jul 20 11:15:45 2025 by rpki-client