$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa File: 1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa (raw, json) Hash identifier: 6/qmrI+VbSJVPkjZvXgFbfdg5kMkB+Ft9UeSrGiOYU0= Subject key identifier: F6:56:93:59:18:AF:67:FF:15:9A:23:72:B8:58:99:47:13:72:E8:61 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584B1C36D1FB13E28DF2E51ADD00 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 29744 IP address blocks: 216.196.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d1:fb:13:e2:8d:f2:e5:1a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=0f04a918-5867-4d1f-aa49-94a2a859da77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:bc:1c:7f:02:7b:cf:7b:ef:f6:23:46:d9: 43:45:93:49:6a:52:32:48:ee:5c:df:15:3a:91:37: 9c:e2:ff:28:67:4f:1d:6e:e8:8e:a2:37:7b:97:48: ea:23:43:3f:3f:4d:79:23:23:eb:a5:ec:fd:60:59: db:31:a3:1d:3a:14:f0:0c:6f:2f:79:7b:4f:da:e4: 3c:de:c1:21:dd:b8:ef:58:0a:7f:96:ae:45:8e:58: 25:a3:67:c9:5a:56:ba:77:6f:9f:27:db:7c:4d:36: 6b:c5:fa:0d:fa:1d:11:5a:25:d3:c9:45:a1:f2:71: fb:7f:fb:89:d0:91:60:d8:58:eb:62:58:ce:a0:8d: 4e:46:a6:2e:96:e5:b4:69:2e:9b:ab:5e:87:0d:54: 94:1f:78:c1:47:15:69:72:dd:a6:b1:1d:58:e5:5b: 55:55:93:45:31:eb:23:8b:90:74:00:fa:4b:44:51: e1:13:02:f2:e3:8a:92:66:ba:97:e8:8c:6f:30:82: 35:de:23:75:d6:da:a7:f8:60:f5:c7:48:b9:d2:16: db:7e:d9:d0:2d:f7:45:af:e3:e0:f3:a8:e8:0e:27: 0a:6c:c2:91:b1:bd:00:5a:a8:1a:ca:c0:96:f7:f1: 52:79:2e:3e:91:55:12:90:b9:1a:7d:8d:29:e0:80: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:56:93:59:18:AF:67:FF:15:9A:23:72:B8:58:99:47:13:72:E8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:09:85:24:84:25:f9:cb:c6:08:55:6c:16:de:39:56:6d:8c: 03:dd:11:f8:d6:ab:a9:bb:97:f2:d8:2a:7b:47:1b:d3:b5:b0: 87:99:86:33:44:7d:7a:49:ea:26:a6:d8:09:32:77:7c:24:53: b7:24:75:6a:ea:1d:a6:a8:b7:4b:c3:84:98:a4:a2:34:03:76: b9:ce:56:be:e1:d9:2f:15:17:7a:66:99:58:9a:7e:31:76:8c: 83:7d:34:ac:da:c2:33:7d:90:2d:73:e9:4f:0d:cd:40:28:7b: 08:bd:e1:a3:c4:96:49:69:99:15:d7:da:8c:5a:af:1f:ed:5d: b9:f3:98:9e:b4:4a:9c:47:83:77:e1:26:c4:b0:ef:de:f9:6c: a7:48:cc:fa:39:0f:07:94:1b:a7:7d:84:93:62:59:3e:82:75: ca:8d:5c:c4:95:bd:4a:d9:62:a1:e7:04:8e:bb:1e:b0:79:da: 80:b3:a3:f3:3a:2b:48:ac:ce:32:3b:a6:32:7d:72:e5:08:b8: c3:7a:48:bf:3a:fc:37:55:b3:eb:ce:02:66:bd:11:dc:89:ff: 54:ad:0b:97:1a:0f:e3:4a:8f:03:60:c4:ac:1f:80:0f:4c:3e: 84:54:0b:63:bc:78:ab:80:b7:4b:f9:ca:0a:68:6e:94:03:cf: 51:ac:1a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtH7E+KN8uUa3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MGYwNGE5MTgtNTg2Ny00ZDFmLWFhNDktOTRhMmE4NTlkYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8u8HH8Ce8977/YjRtlDRZNJalIySO5c3xU6 kTec4v8oZ08dbuiOojd7l0jqI0M/P015IyPrpez9YFnbMaMdOhTwDG8veXtP2uQ8 3sEh3bjvWAp/lq5Fjlglo2fJWla6d2+fJ9t8TTZrxfoN+h0RWiXTyUWh8nH7f/uJ 0JFg2FjrYljOoI1ORqYuluW0aS6bq16HDVSUH3jBRxVpct2msR1Y5VtVVZNFMesj i5B0APpLRFHhEwLy44qSZrqX6IxvMII13iN11tqn+GD1x0i50hbbftnQLfdFr+Pg 86joDicKbMKRsb0AWqgaysCW9/FSeS4+kVUSkLkafY0p4IAoUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZWk1kYr2f/FZojcrhYmUcTcuhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvMTkyMmFmZTItM2JhYi0z ZTEzLWE3YzAtYzFhODhlNmJlYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2MRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0JhSSEJfnLxghVbBbeOVZtjAPdEfjWq6m7l/LYKntHG9O1sIeZhjNE fXpJ6iam2Akyd3wkU7ckdWrqHaaot0vDhJikojQDdrnOVr7h2S8VF3pmmViafjF2 jIN9NKzawjN9kC1z6U8NzUAoewi94aPElklpmRXX2oxarx/tXbnzmJ60SpxHg3fh JsSw7975bKdIzPo5DweUG6d9hJNiWT6CdcqNXMSVvUrZYqHnBI67HrB52oCzo/M6 K0iszjI7pjJ9cuUIuMN6SL86/DdVs+vOAma9EdyJ/1StC5caD+NKjwNgxKwfgA9M PoRUC2O8eKuAt0v5ygpobpQDz1GsGrw= -----END CERTIFICATE-----Generated at Sat Sep 20 04:08:31 2025 by rpki-client