$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/936f4307-0324-341c-b90a-bf58d695081a.roa File: 936f4307-0324-341c-b90a-bf58d695081a.roa (raw, json) Hash identifier: g+At5Dx4rZ7NmG9dI/ZG8zmRBftasHXFLQJEgFv5rsU= Subject key identifier: 38:B7:D4:4C:D3:63:32:2D:CE:B0:0E:88:A1:0C:AA:37:BE:2B:D5:0F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A0727D7803B82EEDBA7456C00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/936f4307-0324-341c-b90a-bf58d695081a.roa Signing time: Fri 30 May 2025 19:11:42 +0000 ROA not before: Fri 30 May 2025 19:11:42 +0000 ROA not after: Thu 28 Aug 2025 19:11:42 +0000 asID: 81 IP address blocks: 204.85.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:27:d7:80:3b:82:ee:db:a7:45:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 30 19:11:42 2025 GMT Not After : Aug 28 19:11:42 2025 GMT Subject: CN=bd13bc64-aac7-4b07-9a84-3b82ef230b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:01:5d:cb:fc:c6:3f:11:14:46:be:34:61: 65:55:1b:ec:85:dd:5b:0c:ba:12:a1:4e:5d:93:88: de:08:ec:9f:ff:cf:5c:a0:12:7a:69:3f:e0:ae:fc: 81:8c:f9:ac:58:52:c7:47:51:e0:23:82:4f:23:e4: 0c:12:b4:14:f9:91:17:8c:da:cd:53:4d:17:50:8a: 1b:db:5e:96:ad:19:04:d2:b5:68:85:e7:fd:68:c3: 9a:44:11:9e:2d:ac:c6:95:6b:44:00:2b:eb:d4:bf: 2c:24:3e:2b:b8:69:1d:8b:67:6c:cd:26:99:bc:b3: 02:c0:30:d1:83:9b:d1:7d:34:6b:d0:25:81:aa:45: c6:1b:d8:fc:f8:66:96:ca:66:16:bc:69:68:e8:04: 19:cf:73:e0:9e:6d:1d:81:82:65:8b:2e:1b:37:71: 09:74:14:a2:7e:e6:55:17:8a:bf:c6:90:07:9e:a3: 04:5a:02:3c:fa:c1:83:7b:cc:6f:d5:fd:20:a5:ea: 7f:5a:1d:d3:aa:81:ac:49:04:90:1c:75:5e:e2:68: bb:4e:db:81:5a:d9:7b:da:c3:b9:df:04:ff:57:2d: aa:43:09:16:bc:21:53:d7:5e:60:8d:f3:9e:e9:d1: 17:74:5f:0d:79:14:89:e2:23:dc:fc:20:81:6b:22: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B7:D4:4C:D3:63:32:2D:CE:B0:0E:88:A1:0C:AA:37:BE:2B:D5:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/936f4307-0324-341c-b90a-bf58d695081a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:38:d9:01:8f:7f:52:a9:3a:7c:c5:d2:34:8e:25:d0:68:f6: 7b:ea:bd:db:5a:00:0b:21:06:4e:38:55:a5:c7:15:21:2e:9b: 02:91:02:8f:fc:9f:5e:49:32:fd:db:e9:b8:e5:48:5e:01:36: e2:eb:e0:f8:9d:22:e2:10:14:8b:b2:82:cb:0f:66:c8:a1:36: fc:70:3f:89:98:87:59:ca:08:fa:c2:f9:c6:88:00:25:1c:8f: 55:b1:37:37:bf:ff:58:dc:ea:6a:9e:81:e2:05:54:42:c3:ab: 60:91:1f:cf:75:e7:8b:18:96:9c:63:47:6a:7b:8b:17:57:7b: 33:2b:8e:e2:66:e5:85:2d:0f:e8:d6:3c:c1:6d:76:31:0e:d0: f7:5a:21:6e:fa:4e:20:49:b8:79:07:a6:4f:b4:df:8a:0a:a3: 6c:56:b1:ab:11:4b:ed:18:7c:2f:a6:29:6e:1d:cd:e0:a1:cf: ed:17:ab:b0:65:3d:f6:51:f9:aa:07:e0:05:2b:f3:c8:25:fb: 9c:19:cd:7e:0d:d4:15:f9:59:73:e1:9f:ee:18:20:df:82:3e: 98:a7:43:46:9d:47:fd:58:ae:79:07:d9:05:09:72:d4:4e:dc: 1b:fc:bd:8d:57:b5:a0:18:b2:c8:8c:2b:29:7c:19:52:31:93: 3d:5a:4b:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9eAO4Lu26dFbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDUzMDE5MTE0MloXDTI1MDgyODE5MTE0MlowLzEtMCsGA1UEAxMk YmQxM2JjNjQtYWFjNy00YjA3LTlhODQtM2I4MmVmMjMwYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2cBXcv8xj8RFEa+NGFlVRvshd1bDLoSoU5d k4jeCOyf/89coBJ6aT/grvyBjPmsWFLHR1HgI4JPI+QMErQU+ZEXjNrNU00XUIob 216WrRkE0rVohef9aMOaRBGeLazGlWtEACvr1L8sJD4ruGkdi2dszSaZvLMCwDDR g5vRfTRr0CWBqkXGG9j8+GaWymYWvGlo6AQZz3Pgnm0dgYJliy4bN3EJdBSifuZV F4q/xpAHnqMEWgI8+sGDe8xv1f0gpep/Wh3TqoGsSQSQHHVe4mi7TtuBWtl72sO5 3wT/Vy2qQwkWvCFT115gjfOe6dEXdF8NeRSJ4iPc/CCBayJCOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi31EzTYzItzrAOiKEMqje+K9UPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTM2ZjQzMDctMDMyNC0z NDFjLWI5MGEtYmY1OGQ2OTUwODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFUjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE42QGPf1KpOnzF0jSOJdBo9nvqvdtaAAshBk44VaXHFSEumwKRAo/8 n15JMv3b6bjlSF4BNuLr4PidIuIQFIuygssPZsihNvxwP4mYh1nKCPrC+caIACUc j1WxNze//1jc6mqegeIFVELDq2CRH89154sYlpxjR2p7ixdXezMrjuJm5YUtD+jW PMFtdjEO0PdaIW76TiBJuHkHpk+034oKo2xWsasRS+0YfC+mKW4dzeChz+0Xq7Bl PfZR+aoH4AUr88gl+5wZzX4N1BX5WXPhn+4YIN+CPpinQ0adR/1YrnkH2QUJctRO 3Bv8vY1XtaAYssiMKyl8GVIxkz1aSwc= -----END CERTIFICATE-----Generated at Sat Jun 7 10:48:40 2025 by rpki-client