$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa File: 04dd4315-6a9f-3488-9092-fe5794692979.roa (raw, json) Hash identifier: DLQAqMyJNSEkOcKNmLUsHTbgyLByOBWT5I0kNNzfF6k= Subject key identifier: 69:0A:42:AF:76:44:1A:61:9D:42:56:60:14:2F:C5:51:9D:B9:56:77 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A71EB284AA8C2F7DEEF1DA220 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 6079 IP address blocks: 216.170.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:28:4a:a8:c2:f7:de:ef:1d:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=9a8ea259-422c-439e-b53f-0b7b25f061ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:6a:50:f6:6e:fe:17:db:f7:cf:0f:b7:44: ae:73:27:a8:a2:20:c4:ca:00:db:6a:13:cd:66:4a: 4c:77:49:74:9f:c5:89:bd:0f:2d:b7:90:6e:f3:77: a5:d9:2f:b6:5a:44:07:4f:86:2e:6d:59:38:7e:fe: 01:85:22:72:5d:7c:ba:1e:bc:26:aa:20:94:24:7c: 76:ce:d3:7f:54:1d:d4:c4:9f:cc:df:6f:0f:81:40: ed:a0:5b:7c:9f:49:37:b1:9a:8c:34:6a:60:ac:01: f6:24:d7:8e:87:4d:d5:f1:af:14:ef:55:42:15:82: 73:7d:0a:8f:e5:00:f0:63:7f:07:16:13:86:e1:0b: 49:1f:f6:e5:7c:26:8f:17:85:28:af:30:61:8e:00: 1e:7f:3f:1d:9c:fc:6d:2e:2f:b0:67:5c:3a:e5:91: 46:44:3c:d8:ac:34:02:08:80:0c:ee:6d:d2:55:73: d9:5d:4e:81:d2:f0:03:55:66:4e:7e:f3:60:34:58: af:9d:73:b5:c7:70:14:bc:9f:91:6d:5a:e7:d1:d6: 8c:85:7c:18:3c:ac:ff:41:91:aa:92:2a:21:b3:cb: be:19:94:0f:f8:40:59:61:23:cd:70:2a:68:c3:5f: 98:13:86:43:ae:4e:4c:80:bd:6a:1e:ef:ad:f6:53: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0A:42:AF:76:44:1A:61:9D:42:56:60:14:2F:C5:51:9D:B9:56:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7d:67:cc:2f:2a:42:7b:cb:4a:7d:9e:62:76:ce:10:a1:38: 47:86:29:c8:f0:8d:8e:59:79:8f:ac:57:0f:c5:56:5a:98:6e: bb:33:80:83:a4:1f:e8:18:f1:62:c2:8f:14:1b:de:2d:95:5c: 90:03:9f:b5:12:24:d7:29:8c:33:d0:76:ac:dc:f3:e0:64:fe: 88:4c:8d:6a:9e:b9:6a:bd:a9:55:18:d5:15:ce:9c:25:9f:bb: a2:a2:e6:a1:72:ec:ed:6e:00:e8:4e:85:8b:90:ae:8e:0e:a1: 65:c3:4b:71:e7:da:f9:29:7a:cc:41:b7:07:9f:3e:0b:b1:e6: b0:ee:b3:a3:e5:b5:fe:8c:99:1a:d3:9d:56:ec:64:a2:be:f2: 93:5a:ff:ac:05:61:dc:f3:56:d6:7c:cc:d9:75:d7:a7:54:d7: e3:1d:89:f0:96:46:1b:86:9c:2a:9b:c9:de:58:d4:db:60:7c: d8:7d:04:d1:39:cb:83:4b:db:66:40:90:41:e7:ac:48:c6:5a: c7:38:3c:9d:b6:fa:e0:50:a9:06:65:08:c0:d2:e8:3d:64:17: 88:aa:1a:b6:72:11:d0:86:20:cc:2b:f7:dd:91:05:9b:6f:da: 0f:2d:5a:bb:6f:0d:54:b1:4e:3b:47:e4:a8:a4:ba:8e:d6:64: e2:aa:63:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6yhKqML33u8doiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk OWE4ZWEyNTktNDIyYy00MzllLWI1M2YtMGI3YjI1ZjA2MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0hqUPZu/hfb988Pt0SucyeooiDEygDbahPN ZkpMd0l0n8WJvQ8tt5Bu83el2S+2WkQHT4YubVk4fv4BhSJyXXy6HrwmqiCUJHx2 ztN/VB3UxJ/M328PgUDtoFt8n0k3sZqMNGpgrAH2JNeOh03V8a8U71VCFYJzfQqP 5QDwY38HFhOG4QtJH/blfCaPF4UorzBhjgAefz8dnPxtLi+wZ1w65ZFGRDzYrDQC CIAM7m3SVXPZXU6B0vADVWZOfvNgNFivnXO1x3AUvJ+RbVrn0daMhXwYPKz/QZGq kiohs8u+GZQP+EBZYSPNcCpow1+YE4ZDrk5MgL1qHu+t9lNfPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkKQq92RBphnUJWYBQvxVGduVZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDRkZDQzMTUtNmE5Zi0z NDg4LTkwOTItZmU1Nzk0NjkyOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB9Z8wvKkJ7y0p9nmJ2zhChOEeGKcjwjY5ZeY+sVw/FVlqYbrszgIOk H+gY8WLCjxQb3i2VXJADn7USJNcpjDPQdqzc8+Bk/ohMjWqeuWq9qVUY1RXOnCWf u6Ki5qFy7O1uAOhOhYuQro4OoWXDS3Hn2vkpesxBtwefPgux5rDus6Pltf6MmRrT nVbsZKK+8pNa/6wFYdzzVtZ8zNl116dU1+MdifCWRhuGnCqbyd5Y1NtgfNh9BNE5 y4NL22ZAkEHnrEjGWsc4PJ22+uBQqQZlCMDS6D1kF4iqGrZyEdCGIMwr992RBZtv 2g8tWrtvDVSxTjtH5Kikuo7WZOKqY/U= -----END CERTIFICATE-----Generated at Sat Jul 12 14:47:14 2025 by rpki-client