$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa File: 04dd4315-6a9f-3488-9092-fe5794692979.roa (raw, json) Hash identifier: cjfiautD/+yKCPe6QlHIgDB2RiDBfechKGdW3A1DJnM= Subject key identifier: 81:91:BF:E6:E4:9C:47:8F:BD:D7:24:E4:D7:EC:13:6E:DB:B1:F4:A6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B52A7677A31B567A1ECCD0360 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 6079 IP address blocks: 216.170.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:67:7a:31:b5:67:a1:ec:cd:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=96d4cddd-d607-431b-9725-ed618d01fe5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:1d:db:0e:47:c3:48:8e:2b:48:3e:1e:de: 94:a1:a6:86:be:1f:90:58:11:5d:c1:32:bc:dd:c8: 38:d5:f3:78:fe:24:58:e4:aa:a6:1d:5d:14:09:e7: 79:33:44:04:72:36:a9:f5:1b:45:8f:1f:e2:a9:df: 9b:24:9f:72:d4:ef:a6:02:bb:2c:1c:fa:f1:3b:bd: 79:4b:9d:2d:2e:da:86:66:97:aa:0c:e6:06:2d:a5: 50:03:92:35:b5:43:bf:b8:4f:47:72:5e:34:79:96: 71:57:f6:b4:2a:c4:bb:d6:e6:d7:15:93:54:c1:20: 15:2e:36:6f:c1:f1:ab:9d:c0:f2:99:83:63:76:82: 90:c7:c4:e7:47:b2:81:df:de:9c:b7:39:cf:04:09: 71:f9:68:30:d3:37:aa:fe:d6:e3:0b:3f:3c:18:ea: 5b:8b:4b:16:63:2a:b8:dc:f8:22:06:4a:a2:36:7d: a4:e7:d2:a1:db:e5:a2:0b:d4:49:d0:9d:1c:0a:2f: 36:90:56:82:f6:1c:0d:34:6e:ae:65:71:15:24:4f: 1f:f7:15:df:ba:b7:37:ac:1f:7f:4b:17:f2:60:6f: 97:1f:a7:ab:d1:a6:2a:0a:09:b1:e6:62:ff:b8:ef: e2:b3:ed:3f:3b:33:f5:65:7d:63:49:1a:7f:d6:ce: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:91:BF:E6:E4:9C:47:8F:BD:D7:24:E4:D7:EC:13:6E:DB:B1:F4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e7:ff:f4:c4:2f:07:d3:cd:ec:b0:17:da:63:72:80:52:ad: f8:f7:85:60:cf:08:30:5d:d8:27:15:1a:bd:94:e1:ff:c7:f9: 29:15:54:61:4d:02:c6:7b:07:01:1e:81:4f:29:4f:63:ba:bf: 2a:9a:31:57:87:0f:0a:b7:a7:ae:7a:f0:93:5d:56:ed:1d:90: 81:ea:ee:36:36:9f:91:fa:26:4a:35:50:38:98:5d:40:97:f8: 7f:59:ea:4b:57:ba:5f:08:b9:cf:1f:f6:64:89:5d:db:18:87: c0:60:87:e5:db:b8:ab:b0:88:e2:4f:b6:ad:93:79:c3:0a:c8: 3c:e7:29:ff:5e:bc:be:1c:d6:f7:d7:5b:90:7d:0b:ab:88:06: 8e:c5:93:2d:13:23:ac:ef:44:e9:60:1e:db:89:a6:d5:f8:85: d5:4d:23:0a:a7:09:69:fc:df:f7:50:4e:2a:dc:a4:9d:9c:ad: fc:20:ac:4b:23:6f:85:ea:8e:47:60:0c:f8:88:ab:84:e0:34: 3b:a6:b9:1f:be:9b:9a:f3:c9:7b:84:53:f6:5f:ab:93:3c:99: 3d:92:23:eb:c0:bf:01:e2:4c:af:30:12:49:84:ff:5a:df:f4: 59:0f:14:42:74:26:ad:de:3f:62:6d:aa:2c:04:a9:31:ea:e2: 59:b6:8e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2d6MbVnoezNA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk OTZkNGNkZGQtZDYwNy00MzFiLTk3MjUtZWQ2MThkMDFmZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YYd2w5Hw0iOK0g+Ht6UoaaGvh+QWBFdwTK8 3cg41fN4/iRY5KqmHV0UCed5M0QEcjap9RtFjx/iqd+bJJ9y1O+mArssHPrxO715 S50tLtqGZpeqDOYGLaVQA5I1tUO/uE9Hcl40eZZxV/a0KsS71ubXFZNUwSAVLjZv wfGrncDymYNjdoKQx8TnR7KB396ctznPBAlx+Wgw0zeq/tbjCz88GOpbi0sWYyq4 3PgiBkqiNn2k59Kh2+WiC9RJ0J0cCi82kFaC9hwNNG6uZXEVJE8f9xXfurc3rB9/ SxfyYG+XH6er0aYqCgmx5mL/uO/is+0/OzP1ZX1jSRp/1s6BBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGRv+bknEePvdck5NfsE27bsfSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDRkZDQzMTUtNmE5Zi0z NDg4LTkwOTItZmU1Nzk0NjkyOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLn//TELwfTzeywF9pjcoBSrfj3hWDPCDBd2CcVGr2U4f/H+SkVVGFN AsZ7BwEegU8pT2O6vyqaMVeHDwq3p6568JNdVu0dkIHq7jY2n5H6Jko1UDiYXUCX +H9Z6ktXul8Iuc8f9mSJXdsYh8Bgh+XbuKuwiOJPtq2TecMKyDznKf9evL4c1vfX W5B9C6uIBo7Fky0TI6zvROlgHtuJptX4hdVNIwqnCWn83/dQTircpJ2crfwgrEsj b4XqjkdgDPiIq4TgNDumuR++m5rzyXuEU/Zfq5M8mT2SI+vAvwHiTK8wEkmE/1rf 9FkPFEJ0Jq3eP2JtqiwEqTHq4lm2jsw= -----END CERTIFICATE-----Generated at Sat Oct 11 18:42:57 2025 by rpki-client