$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5c3b1899-1a77-381f-842f-ca0472ff89f0.roa File: 5c3b1899-1a77-381f-842f-ca0472ff89f0.roa (raw, json) Hash identifier: 8leJOJBIvZahN6XnIv96/uPOHAhMHWFODP7BGLY3+fg= Subject key identifier: F4:00:5D:4F:11:43:88:5F:1E:86:C0:FC:67:18:3F:23:4F:C0:63:44 Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Certificate serial: 010D0C9F4328584AF52156020EFE4A1281C84600 Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5c3b1899-1a77-381f-842f-ca0472ff89f0.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 54994 IP address blocks: 174.35.70.0/24 maxlen: 24 174.35.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:56:02:0e:fe:4a:12:81:c8:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a653c9fa-6eb7-4163-aa36-8a076cddd154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:e9:96:7f:54:7a:6b:98:ef:30:f8:73:14: ce:24:50:2c:be:19:98:f2:61:c1:a5:97:20:c8:0e: 93:85:0c:02:ad:21:4e:78:1c:f7:e8:24:e7:98:f5: 07:67:e9:8a:f6:4e:c8:09:b3:2c:e5:bf:21:f8:05: b3:ef:4d:96:91:be:ee:0f:91:8c:4c:cf:d6:1f:cc: c5:af:a4:8e:c7:86:ed:d9:70:08:43:17:fe:5c:e8: 83:62:51:cd:ba:2c:d5:07:fb:47:4c:0e:db:68:4c: 79:f7:e2:3a:37:4d:17:93:f5:ee:97:55:66:8c:96: 6e:c3:3f:9d:f9:aa:61:ef:2a:15:7a:dc:81:4f:72: 2e:de:43:69:0a:cb:97:39:fa:27:7b:79:ea:8a:8f: a9:5c:0d:18:e2:c4:0b:48:43:63:17:66:b3:66:13: 27:62:c3:01:02:f1:f4:06:01:16:8c:3c:46:9c:2e: 54:44:73:57:0b:b2:51:22:f3:cf:c9:95:d7:26:9f: d5:4b:27:c8:91:96:1c:cb:22:e1:d0:fa:02:7d:4d: d6:98:00:25:db:3d:ef:21:f0:dc:fb:4c:06:c0:2f: f4:15:5f:eb:b0:0c:50:31:df:11:40:ff:6d:aa:47: d5:c9:88:36:45:b8:8f:bc:da:7a:e2:da:6c:00:7d: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:00:5D:4F:11:43:88:5F:1E:86:C0:FC:67:18:3F:23:4F:C0:63:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5c3b1899-1a77-381f-842f-ca0472ff89f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl X509v3 Authority Key Identifier: keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer sbgp-ipAddrBlock: critical IPv4: 174.35.70.0/24 174.35.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:76:b3:7f:5f:58:6b:0a:79:a6:08:6e:30:c0:63:0d:c4:43: e8:06:57:35:05:95:3a:35:1b:20:0e:d8:63:c4:11:b9:71:4b: f6:36:34:70:a0:5c:5f:17:44:74:b0:5f:51:48:ae:a7:12:18: 3c:d5:14:62:1b:69:59:7b:b1:c4:47:74:6e:62:62:97:4d:3e: 88:3b:6d:3e:b6:74:bd:07:2f:3b:6e:60:ab:ea:f8:bd:36:a2: 47:79:b9:d3:eb:4a:00:d1:51:a6:53:c2:b1:d0:f9:ab:65:2b: cc:57:9d:77:99:bf:2c:d2:8e:eb:16:c2:e2:46:ef:39:43:66: 1a:53:a4:ba:13:ef:cd:50:2b:58:ca:f2:f4:ce:90:98:44:dd: 92:30:0d:05:8e:43:e0:26:ba:9a:08:4a:24:cc:d9:80:25:a3: 67:f7:26:90:33:fe:15:5d:df:00:85:60:92:b0:d2:e6:ca:fe: 98:ae:bd:7c:87:e1:e1:77:44:32:b8:54:d0:07:12:03:87:b9: a5:7f:9d:90:be:fe:64:20:55:55:61:c6:9e:49:6a:ce:43:a3: 09:fb:f5:df:51:77:1b:a7:b5:6e:7f:b8:23:88:75:77:4c:b3: 86:d3:d7:39:6d:09:ed:1e:af:66:d7:8a:a6:e8:3b:e3:19:f6: 82:3f:5b:f2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr1IVYCDv5KEoHIRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3 MGE4MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTY1M2M5ZmEtNmViNy00MTYzLWFhMzYtOGEwNzZjZGRkMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzljpln9UemuY7zD4cxTOJFAsvhmY8mHBpZcg yA6ThQwCrSFOeBz36CTnmPUHZ+mK9k7ICbMs5b8h+AWz702Wkb7uD5GMTM/WH8zF r6SOx4bt2XAIQxf+XOiDYlHNuizVB/tHTA7baEx59+I6N00Xk/Xul1VmjJZuwz+d +aph7yoVetyBT3Iu3kNpCsuXOfone3nqio+pXA0Y4sQLSENjF2azZhMnYsMBAvH0 BgEWjDxGnC5URHNXC7JRIvPPyZXXJp/VSyfIkZYcyyLh0PoCfU3WmAAl2z3vIfDc +0wGwC/0FV/rsAxQMd8RQP9tqkfVyYg2RbiPvNp64tpsAH2w2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPQAXU8RQ4hfHobA/GcYPyNPwGNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvNWMzYjE4OTktMWE3Ny0z ODFmLTg0MmYtY2EwNDcyZmY4OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0 NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz YTM5NDcwYTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAriNGAwQA riNTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACp2s39fWGsKeaYIbjDAYw3EQ+gGVzUFlTo1GyAO2GPEEblx S/Y2NHCgXF8XRHSwX1FIrqcSGDzVFGIbaVl7scRHdG5iYpdNPog7bT62dL0HLztu YKvq+L02okd5udPrSgDRUaZTwrHQ+atlK8xXnXeZvyzSjusWwuJG7zlDZhpTpLoT 781QK1jK8vTOkJhE3ZIwDQWOQ+AmupoISiTM2YAlo2f3JpAz/hVd3wCFYJKw0ubK /piuvXyH4eF3RDK4VNAHEgOHuaV/nZC+/mQgVVVhxp5Jas5Down79d9RdxuntW5/ uCOIdXdMs4bT1zltCe0er2bXiqboO+MZ9oI/W/I= -----END CERTIFICATE-----Generated at Wed Sep 10 10:13:19 2025 by rpki-client