$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa File: c5be28a1-2d7a-39e2-8043-9972f8916840.roa (raw, json) Hash identifier: 5ok8AzwbPEpJ1khQFnCMV7XMoa2N03BOZpf3CzeNw1I= Subject key identifier: A9:00:52:04:94:49:5C:ED:16:C6:3C:66:B2:AD:0F:E7:53:A8:C8:83 Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584B1C36D19BAA61741C84FC7680 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14511 IP address blocks: 66.231.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d1:9b:aa:61:74:1c:84:fc:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b76295af-377a-4a73-98e8-e5ff618de951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:d3:2d:09:03:17:be:9b:65:d6:ad:1d:8f: 9f:6c:c7:dd:f8:11:8c:09:c9:d4:e3:17:8d:7c:b9: e0:f7:0f:00:9b:2d:69:06:b2:dd:5b:b1:96:e4:4d: 50:fd:f9:f2:86:ab:95:50:e7:b3:1e:20:7a:7c:0c: 73:d3:74:c7:43:c4:73:53:af:da:91:57:67:36:19: a6:16:ad:57:97:0e:c1:b7:15:a5:c8:09:33:be:49: 2d:70:fb:08:e0:fd:b0:f0:4a:9d:c5:e5:b5:19:3c: 84:23:68:99:ed:51:51:8b:6d:12:e8:46:8e:c3:6c: f0:b4:0b:f2:81:89:c8:a7:6b:87:c6:ab:70:7a:c8: 9c:7a:e2:1a:c2:a8:5e:d6:a4:96:99:ff:9b:89:b5: 1e:80:6b:7d:14:43:72:ef:67:c7:59:7f:90:89:e8: a2:95:67:b9:ff:c3:c1:b5:9e:c1:d0:13:40:25:ec: bf:2e:62:4a:ad:e0:db:47:56:7e:76:d9:89:1b:ab: 31:2e:25:4e:cf:73:3d:45:7d:95:42:b0:c8:7a:97: ca:f0:e4:88:3e:fb:0d:03:5d:ec:19:15:d7:b0:b0: d4:13:8f:9e:05:f9:d5:c4:e7:59:11:ff:ac:08:8e: 48:c0:25:84:90:5b:63:b3:d9:1c:c6:22:3f:7e:fe: 79:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:00:52:04:94:49:5C:ED:16:C6:3C:66:B2:AD:0F:E7:53:A8:C8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/c5be28a1-2d7a-39e2-8043-9972f8916840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d9:6b:78:24:c7:3b:9d:f4:3b:e4:68:bb:ac:f4:c5:3b:11: a7:4f:f8:18:48:31:0f:1e:1b:c1:79:0f:30:aa:ae:8a:18:b1: e3:71:6a:a8:73:71:34:3c:63:a9:50:ad:f3:71:08:22:07:72: 4f:e0:ee:61:aa:ba:55:a1:9d:a1:42:c0:d8:4b:79:ba:a1:55: 06:ad:34:65:81:7b:94:89:21:b8:59:56:1d:fe:5d:0a:49:5d: 88:7d:8c:e4:32:24:17:7b:2a:c6:03:b8:d4:bc:a7:8d:71:d3: 1b:04:dc:b3:69:0e:94:cb:94:6e:c2:f5:e9:2c:66:6f:f7:86: ff:cb:47:b8:ad:7f:de:e6:9d:87:f1:77:ee:ba:4a:51:e5:be: d2:c0:9f:1b:16:8b:02:c7:3b:97:b7:8f:52:77:43:66:7c:e0: 78:64:24:da:a4:a9:74:2e:d7:02:4b:e5:bf:60:f3:6a:47:cb: 06:3e:a9:03:dc:eb:3c:59:d3:75:b3:16:f6:03:40:e9:d8:ad: 91:d7:38:29:aa:25:cf:7e:a5:49:42:61:92:f3:70:e4:8e:2d: ca:39:7e:40:81:8d:cd:3e:9a:a6:75:7e:21:00:91:fb:66:a4: 7a:35:7a:1d:1d:8f:8f:cf:5c:be:2a:cd:aa:59:e0:d9:3f:31: e1:e0:b5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtGbqmF0HIT8doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Yjc2Mjk1YWYtMzc3YS00YTczLTk4ZTgtZTVmZjYxOGRlOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvULTLQkDF76bZdatHY+fbMfd+BGMCcnU4xeN fLng9w8Amy1pBrLdW7GW5E1Q/fnyhquVUOezHiB6fAxz03THQ8RzU6/akVdnNhmm Fq1Xlw7BtxWlyAkzvkktcPsI4P2w8EqdxeW1GTyEI2iZ7VFRi20S6EaOw2zwtAvy gYnIp2uHxqtwesiceuIawqhe1qSWmf+bibUegGt9FENy72fHWX+QieiilWe5/8PB tZ7B0BNAJey/LmJKreDbR1Z+dtmJG6sxLiVOz3M9RX2VQrDIepfK8OSIPvsNA13s GRXXsLDUE4+eBfnVxOdZEf+sCI5IwCWEkFtjs9kcxiI/fv55UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkAUgSUSVztFsY8ZrKtD+dTqMiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvYzViZTI4YTEtMmQ3YS0z OWUyLTgwNDMtOTk3MmY4OTE2ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQudwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzZa3gkxzud9DvkaLus9MU7EadP+BhIMQ8eG8F5DzCqrooYseNxaqhz cTQ8Y6lQrfNxCCIHck/g7mGqulWhnaFCwNhLebqhVQatNGWBe5SJIbhZVh3+XQpJ XYh9jOQyJBd7KsYDuNS8p41x0xsE3LNpDpTLlG7C9eksZm/3hv/LR7itf97mnYfx d+66SlHlvtLAnxsWiwLHO5e3j1J3Q2Z84HhkJNqkqXQu1wJL5b9g82pHywY+qQPc 6zxZ03WzFvYDQOnYrZHXOCmqJc9+pUlCYZLzcOSOLco5fkCBjc0+mqZ1fiEAkftm pHo1eh0dj4/PXL4qzapZ4Nk/MeHgtaM= -----END CERTIFICATE-----Generated at Sat Sep 20 07:19:29 2025 by rpki-client