$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa File: 76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa (raw, json) Hash identifier: bYbTc9gTvKZ3kGVshzUNkRAOaKEJrHQmlNubQs7lQrQ= Subject key identifier: 5C:E9:09:C9:80:72:2E:EC:AC:30:E1:10:69:ED:4F:3A:38:F1:BB:E8 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B21CC1F16C92C9BA450BE0040 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 199.255.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1f:16:c9:2c:9b:a4:50:be:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=d04e7735-94e8-4d2e-9f71-cd3877200aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:32:50:b9:4b:83:e6:15:50:31:1f:da:8e:46: 1a:f0:45:4b:f6:5c:d0:cf:80:f3:c2:e2:fc:4e:55: 12:b9:61:55:b3:4b:83:b6:e6:72:7b:bb:62:4c:cd: b5:e9:92:9a:37:e7:bf:a3:69:64:e1:0d:d6:d1:f9: ac:be:aa:de:8a:4f:5f:3b:75:da:a4:d8:19:60:12: 13:2e:42:2f:45:fd:21:0f:3d:dd:7f:cf:56:fa:5b: a9:df:78:2b:ed:9c:96:71:bd:e3:98:e1:de:f4:92: a4:e8:f7:0f:cb:2e:0e:4f:3d:2f:a1:94:39:d2:cb: b9:25:82:62:5a:21:54:79:ff:d0:bb:49:35:cd:30: 93:8d:45:e9:35:ad:0c:3c:75:64:48:f9:fd:3e:b8: 01:14:0f:0b:74:96:e2:8a:6f:a4:84:76:fd:25:ae: 8e:f6:cc:cc:de:d5:75:c0:29:c1:ed:f0:3f:83:0e: ab:c6:5e:0c:b4:9e:f6:dd:90:12:1e:e4:8b:39:16: 20:86:67:66:b8:0f:87:83:9a:46:38:09:4e:9f:85: b1:57:2b:35:0d:08:3c:4f:3f:7f:ec:b7:4a:b2:c2: af:ac:17:50:8a:05:66:24:6a:09:5e:9b:8e:5e:7f: 60:32:59:65:22:1d:da:20:52:72:84:76:54:ca:51: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E9:09:C9:80:72:2E:EC:AC:30:E1:10:69:ED:4F:3A:38:F1:BB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/76c375a0-d704-3fe6-a68e-c4f387fa72e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a6:1d:17:14:0a:2f:8f:04:d0:3c:34:83:5f:ec:79:31:95: 89:06:63:67:c3:1a:25:b5:ba:90:b8:8b:20:2a:67:82:ec:30: bd:4a:50:f6:a0:e6:cf:bd:c3:0d:3a:e0:5f:ea:05:4c:0b:cd: 00:1a:9e:f3:b6:9c:9e:7c:88:11:b5:eb:d1:85:89:5a:d4:a9: d6:9e:e5:de:3a:3c:ea:bf:f5:5c:c1:c6:59:20:7d:20:db:9f: d4:9c:84:74:b8:fb:6d:72:8e:72:4a:b7:73:40:2e:bb:b4:a9: f2:f5:a5:93:49:bc:ad:d6:56:41:50:a4:b8:a0:17:80:57:8f: 7f:db:24:59:f1:e7:b2:87:f4:0b:83:c7:9f:b1:57:b6:ae:a8: 56:1c:d7:51:7f:17:81:f3:e9:90:45:22:63:b8:d4:44:d5:0c: 9f:b4:98:bc:7b:e9:a5:47:d5:76:cf:f3:c6:a5:ab:22:fe:1f: 68:79:f5:cc:e8:07:47:e0:29:7e:9f:c4:a8:ab:01:2c:c4:f5: 27:3d:d6:a5:3e:90:92:0f:f6:5c:d0:48:42:37:2e:49:28:0b: 14:fc:2b:b1:c6:ae:f0:cf:f4:64:32:b0:02:db:ec:b8:b0:dc: 4b:54:9c:84:af:6a:31:ab:61:aa:78:20:f5:b4:56:fa:3d:69: fa:c1:61:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB8WySybpFC+AEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZDA0ZTc3MzUtOTRlOC00ZDJlLTlmNzEtY2QzODc3MjAwYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TJQuUuD5hVQMR/ajkYa8EVL9lzQz4DzwuL8 TlUSuWFVs0uDtuZye7tiTM216ZKaN+e/o2lk4Q3W0fmsvqreik9fO3XapNgZYBIT LkIvRf0hDz3df89W+lup33gr7ZyWcb3jmOHe9JKk6PcPyy4OTz0voZQ50su5JYJi WiFUef/Qu0k1zTCTjUXpNa0MPHVkSPn9PrgBFA8LdJbiim+khHb9Ja6O9szM3tV1 wCnB7fA/gw6rxl4MtJ723ZASHuSLORYghmdmuA+Hg5pGOAlOn4WxVys1DQg8Tz9/ 7LdKssKvrBdQigVmJGoJXpuOXn9gMlllIh3aIFJyhHZUylHEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzpCcmAci7srDDhEGntTzo48bvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNzZjMzc1YTAtZDcwNC0z ZmU2LWE2OGUtYzRmMzg3ZmE3MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSmHRcUCi+PBNA8NINf7HkxlYkGY2fDGiW1upC4iyAqZ4LsML1KUPag 5s+9ww064F/qBUwLzQAanvO2nJ58iBG169GFiVrUqdae5d46POq/9VzBxlkgfSDb n9SchHS4+21yjnJKt3NALru0qfL1pZNJvK3WVkFQpLigF4BXj3/bJFnx57KH9AuD x5+xV7auqFYc11F/F4Hz6ZBFImO41ETVDJ+0mLx76aVH1XbP88alqyL+H2h59czo B0fgKX6fxKirASzE9Sc91qU+kJIP9lzQSEI3LkkoCxT8K7HGrvDP9GQysALb7Liw 3EtUnISvajGrYap4IPW0Vvo9afrBYSk= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:36 2025 by rpki-client