$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa File: 097c095d-ece4-3ab9-b654-21a67c8b50d9.roa (raw, json) Hash identifier: ZaWrz4KMy391cwBqKrjsa7xGeogM/XVM597mG/6Y8oY= Subject key identifier: F9:F0:D5:96:EA:27:A6:64:F2:EF:65:9D:1E:74:04:98:ED:9E:59:D0 Certificate issuer: /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Certificate serial: 010D0C9F4328584B0B76A426A1737A8860068300 Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 965 IP address blocks: 23.129.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a4:26:a1:73:7a:88:60:06:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=1102aa23-2872-4d09-86f0-0fc9c6169de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:7b:4b:7f:be:1c:21:a4:63:eb:db:a4:75: f0:7a:2b:dd:e2:62:73:85:e5:2b:b4:0b:e4:2e:e4: 49:34:7a:d2:d8:cc:19:a8:98:c3:b3:19:de:77:68: 30:78:ce:23:ea:ac:68:66:58:6a:50:bb:8d:1d:ee: 43:4b:72:23:64:0f:07:d7:28:ed:47:bd:b9:f8:cf: 29:30:ff:4a:c5:d0:ba:6f:e4:50:14:1d:01:d2:29: e3:5b:b7:ae:38:d3:a1:ae:58:ab:a3:8b:9c:a5:a4: d9:fa:f5:a0:e4:cb:5b:9c:19:ad:04:a5:1b:9b:6c: 87:61:0e:18:30:e5:4f:cd:db:78:a0:ed:40:68:51: bb:f0:26:bb:e6:3f:e3:86:04:89:86:11:d5:2d:36: 1d:5c:7e:e8:b0:60:9c:49:9d:71:27:00:ab:2f:3f: 11:a2:85:bd:10:91:4c:03:17:69:a3:c3:a9:06:e5: d3:03:ca:8b:aa:22:7b:ae:6c:7c:5a:55:1c:0f:88: c1:a4:04:b7:26:24:02:b1:0f:fc:99:b9:7b:41:d1: 4d:4d:c5:db:73:01:71:cf:f6:89:0c:78:14:45:34: fa:ac:de:99:d7:ae:1a:d5:65:98:1d:53:c5:0c:9f: 97:32:32:37:6e:d5:55:e3:52:ed:92:ef:60:b9:34: 8f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F0:D5:96:EA:27:A6:64:F2:EF:65:9D:1E:74:04:98:ED:9E:59:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/097c095d-ece4-3ab9-b654-21a67c8b50d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl X509v3 Authority Key Identifier: keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a5:67:c7:2c:05:78:a2:e6:1f:91:90:1c:57:b5:e1:14:f8: 8d:b6:0e:43:c1:4d:4e:37:ac:41:76:38:c7:17:81:08:5b:7f: 7e:3a:e1:c4:12:a2:2b:b1:6f:aa:14:19:16:7f:1e:81:ab:40: e6:92:1e:3e:1d:46:86:f5:8b:ed:22:b1:ff:7a:b7:9e:cc:ff: 62:fd:7a:e9:5c:15:f4:ec:21:cf:74:32:d0:58:a8:38:0a:53: be:1a:d4:24:67:fa:0b:7c:f0:75:ed:f6:78:05:95:c1:8e:d4: 30:47:70:6e:47:89:f4:46:e4:90:d2:ed:e1:91:ca:73:56:c0: 44:6a:2e:dd:5c:f0:f7:2a:b8:51:3a:26:d9:c9:da:a8:e7:d5: 47:ad:3f:67:77:af:91:44:8e:d4:ab:13:55:00:bf:bd:76:26: e9:e7:a5:c4:fe:75:4e:0d:93:57:1d:d7:86:7b:fe:c7:bd:90: dd:1c:8c:3b:8c:6d:d5:8b:5e:d0:d6:8c:bc:b5:5d:10:c2:2d: 7c:33:0b:d4:f0:ea:34:07:fc:41:49:3f:df:41:ff:63:15:57: 3a:93:61:b2:f3:a7:d7:0a:02:73:78:4f:3b:f8:62:73:c1:f2: 53:6e:c3:fb:b5:0d:77:37:c6:98:f9:8a:22:f5:4e:13:ea:e6: c3:30:8b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqQmoXN6iGAGgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRk Y2JmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTEwMmFhMjMtMjg3Mi00ZDA5LTg2ZjAtMGZjOWM2MTY5ZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTx7S3++HCGkY+vbpHXweivd4mJzheUrtAvk LuRJNHrS2MwZqJjDsxned2gweM4j6qxoZlhqULuNHe5DS3IjZA8H1yjtR725+M8p MP9KxdC6b+RQFB0B0injW7euONOhrliro4ucpaTZ+vWg5MtbnBmtBKUbm2yHYQ4Y MOVPzdt4oO1AaFG78Ca75j/jhgSJhhHVLTYdXH7osGCcSZ1xJwCrLz8RooW9EJFM Axdpo8OpBuXTA8qLqiJ7rmx8WlUcD4jBpAS3JiQCsQ/8mbl7QdFNTcXbcwFxz/aJ DHgURTT6rN6Z164a1WWYHVPFDJ+XMjI3btVV41Ltku9guTSPWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnw1ZbqJ6Zk8u9lnR50BJjtnlnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3 MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMDk3YzA5NWQtZWNlNC0z YWI5LWI2NTQtMjFhNjdjOGI1MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVhNzI2MDUtOTliYy00YzRiLTk5 NWUtYzAxYTM2ODRkY2JmLzM1YTcyNjA1LTk5YmMtNGM0Yi05OTVlLWMwMWEzNjg0 ZGNiZi5jcmwwHwYDVR0jBBgwFoAUnSedZlfExijXDhO+lc06f9crhFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFh MzY4NGRjYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqlZ8csBXii5h+RkBxXteEU+I22DkPBTU43rEF2OMcXgQhbf3464cQS oiuxb6oUGRZ/HoGrQOaSHj4dRob1i+0isf96t57M/2L9eulcFfTsIc90MtBYqDgK U74a1CRn+gt88HXt9ngFlcGO1DBHcG5HifRG5JDS7eGRynNWwERqLt1c8PcquFE6 JtnJ2qjn1UetP2d3r5FEjtSrE1UAv712JunnpcT+dU4Nk1cd14Z7/se9kN0cjDuM bdWLXtDWjLy1XRDCLXwzC9Tw6jQH/EFJP99B/2MVVzqTYbLzp9cKAnN4Tzv4YnPB 8lNuw/u1DXc3xpj5iiL1ThPq5sMwi9g= -----END CERTIFICATE-----Generated at Sun Sep 7 20:40:27 2025 by rpki-client