$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4f975034-e7da-3ac1-a79d-f731b88a7ace.roa File: 4f975034-e7da-3ac1-a79d-f731b88a7ace.roa (raw, json) Hash identifier: ijrMKngiqnfl7jrk5RF5LImfqx88ASYWV4JnGeMr3RI= Subject key identifier: 65:68:62:B3:2A:B7:A4:28:C7:D1:9B:80:50:C5:F3:01:72:A6:AE:D9 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B758CB3F23281EFE5B5066700 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4f975034-e7da-3ac1-a79d-f731b88a7ace.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 69.91.149.0/24 maxlen: 24 69.91.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:b3:f2:32:81:ef:e5:b5:06:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=303fdfbd-974a-4be6-a9fe-afd26659cc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:8a:70:6e:c6:34:1f:b4:4e:4c:f0:5d:f6: e8:dd:ed:23:29:f2:a5:8a:42:95:10:9e:c1:0e:5b: 9f:a4:b6:6a:b6:3a:d4:e8:5a:12:44:32:55:9f:2e: c4:d8:df:15:25:bf:cf:cd:18:6d:5f:9e:44:dc:ed: f9:34:10:d2:fd:50:46:1e:3f:0d:44:20:27:31:90: 17:69:86:0b:39:38:e7:d7:7c:9a:92:a8:e0:ef:d4: 13:5c:81:e9:29:98:89:b3:84:7f:bc:5e:d7:62:24: 4f:96:34:1d:e3:5f:1b:79:16:ac:4f:2f:e8:e4:5f: e0:4d:51:b6:ee:a4:4f:37:b2:2f:7e:3b:04:f1:7f: a9:65:73:eb:74:18:d0:2d:d2:d2:f5:ca:40:bb:b6: 70:37:cc:06:3a:67:78:92:a7:d6:0e:27:70:e1:17: e2:74:55:4e:9d:73:50:18:66:f7:f2:a6:3a:52:71: 93:86:68:49:a5:34:8b:44:35:25:17:56:97:c3:cb: 92:3f:5d:fb:1f:1e:02:9d:30:af:74:7d:39:16:e6: 65:7a:a0:02:0a:4f:77:d3:0d:6c:40:fa:a1:39:5c: 3b:78:f6:6d:ba:1e:32:92:35:42:4a:89:d6:22:48: 72:01:50:73:d9:df:cf:0b:77:ac:2b:94:2a:4b:50: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:68:62:B3:2A:B7:A4:28:C7:D1:9B:80:50:C5:F3:01:72:A6:AE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4f975034-e7da-3ac1-a79d-f731b88a7ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 69.91.149.0/24 69.91.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:3c:f9:7a:48:b8:ac:72:9a:60:35:66:4e:d0:f3:43:b6:b2: 48:b4:1c:58:eb:06:20:70:4f:da:e7:48:47:4f:2f:f8:b2:b9: 8e:3f:6b:09:8b:60:79:b8:d6:34:d7:75:53:32:ab:54:75:d8: f3:a3:16:bc:fa:f5:48:94:e0:09:16:76:61:6b:2e:8f:82:8a: 70:a5:72:2c:e4:45:c2:1e:b6:0c:ed:e0:a9:6a:d9:45:13:83: ae:73:13:be:41:2e:67:98:34:00:44:a7:e7:f0:fd:cb:76:61: bb:b0:c7:14:8d:0d:84:38:83:22:a8:40:db:0a:1d:cc:da:db: 41:6a:7d:36:dc:c8:0d:6d:4f:be:2f:0e:82:fc:95:7d:1e:89: 15:49:45:09:27:d5:94:26:24:c6:6e:76:26:60:7e:9e:94:18: de:0e:41:c7:43:d0:98:8b:51:4e:d0:f3:37:50:4e:ad:87:80: 7b:aa:28:5d:15:71:8d:6c:a9:70:fc:e2:c6:a7:75:31:1d:ed: 35:60:82:ee:5c:c4:5c:db:b3:b6:62:9f:5b:0c:3a:40:ab:0f: 52:21:12:e2:96:14:0c:4f:a8:1e:f0:c6:b0:af:48:06:5e:9f: 92:1e:fb:a6:44:cb:67:1b:41:08:01:46:f4:2e:92:b8:9e:8a: 5e:48:06:de -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt1jLPyMoHv5bUGZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk MzAzZmRmYmQtOTc0YS00YmU2LWE5ZmUtYWZkMjY2NTljYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/SKcG7GNB+0TkzwXfbo3e0jKfKlikKVEJ7B DlufpLZqtjrU6FoSRDJVny7E2N8VJb/PzRhtX55E3O35NBDS/VBGHj8NRCAnMZAX aYYLOTjn13yakqjg79QTXIHpKZiJs4R/vF7XYiRPljQd418beRasTy/o5F/gTVG2 7qRPN7IvfjsE8X+pZXPrdBjQLdLS9cpAu7ZwN8wGOmd4kqfWDidw4RfidFVOnXNQ GGb38qY6UnGThmhJpTSLRDUlF1aXw8uSP137Hx4CnTCvdH05FuZleqACCk930w1s QPqhOVw7ePZtuh4ykjVCSonWIkhyAVBz2d/PC3esK5QqS1AQuwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGVoYrMqt6Qox9GbgFDF8wFypq7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGY5NzUwMzQtZTdkYS0z YWMxLWE3OWQtZjczMWI4OGE3YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARVuVAwQA RVu5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADk8+XpIuKxymmA1Zk7Q80O2ski0HFjrBiBwT9rnSEdPL/iy uY4/awmLYHm41jTXdVMyq1R12POjFrz69UiU4AkWdmFrLo+CinClcizkRcIetgzt 4Klq2UUTg65zE75BLmeYNABEp+fw/ct2YbuwxxSNDYQ4gyKoQNsKHcza20FqfTbc yA1tT74vDoL8lX0eiRVJRQkn1ZQmJMZudiZgfp6UGN4OQcdD0JiLUU7Q8zdQTq2H gHuqKF0VcY1sqXD84sandTEd7TVggu5cxFzbs7Zin1sMOkCrD1IhEuKWFAxPqB7w xrCvSAZen5Ie+6ZEy2cbQQgBRvQukrieil5IBt4= -----END CERTIFICATE-----Generated at Sat Oct 11 18:36:32 2025 by rpki-client