$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa File: d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa (raw, json) Hash identifier: WQuiUay2wz54xvsEdETLHJtpY0p2PDoc6PYHPga5SvQ= Subject key identifier: 6F:F1:16:B2:97:F7:86:8E:99:5D:E3:02:49:FB:AA:E0:0F:8F:1E:AF Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F4328584B1C36D18AD7ED027D0516EF60 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14511 IP address blocks: 66.231.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d1:8a:d7:ed:02:7d:05:16:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=2757af01-92a5-4e68-8dd2-79bb2e1071c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:b4:64:d5:cb:5e:4c:64:4d:51:0e:e0:8e: 03:14:f5:07:67:7d:1d:25:d4:15:92:05:cd:d2:80: a1:46:97:37:bf:97:ed:23:a5:09:25:d2:04:a0:6b: 8c:4b:9e:ba:1d:2b:3a:a6:c1:87:80:5e:ec:0c:79: 23:cb:8c:b9:97:7b:af:6f:3d:11:9e:c3:3e:c8:c1: 43:c0:0f:6f:59:d4:de:1e:38:17:ef:1d:b3:b0:ed: 2e:e0:6b:fd:35:8a:24:a8:6b:59:b8:91:55:1f:21: 3c:e6:55:81:cd:90:d8:b6:58:ce:74:4c:cb:4c:9f: bd:57:a3:78:e7:2f:50:fc:49:b6:7b:f4:36:e9:9d: c3:76:d8:2f:15:a9:08:8d:0a:31:9c:8c:f4:0d:38: 26:af:61:c9:a1:00:66:b8:5d:9d:2a:7b:74:82:c2: 09:f6:5c:bd:df:88:e1:c5:2c:0e:b3:d1:1f:5d:3f: 68:2c:6d:97:37:ab:c3:0c:6b:07:ff:1b:e4:b5:99: 5b:ed:b7:33:83:46:f7:3a:5e:8d:a5:bb:1b:b4:b8: e7:42:a8:17:e2:42:38:70:25:89:cf:da:e1:1e:e4: c6:3c:d4:71:fd:7e:ef:b9:77:8e:6d:8d:bb:03:cc: 97:24:2b:8c:71:7b:7a:3c:64:2c:e6:b5:61:63:ec: ee:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F1:16:B2:97:F7:86:8E:99:5D:E3:02:49:FB:AA:E0:0F:8F:1E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/d2380e1c-4584-3fbe-9ac7-c00fc51996f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 66.231.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:79:21:a5:46:0b:1b:b2:0e:49:c1:e3:fd:55:dd:71:59:70: c1:44:e9:12:8a:e7:04:da:15:57:21:62:12:5d:8a:58:cd:51: 54:23:ee:ef:92:61:10:8c:d5:7f:68:02:33:5e:7d:6d:c1:97: 8a:91:db:94:eb:bc:c9:45:9d:89:69:93:cf:d9:eb:25:ad:54: d1:cd:be:99:4e:c0:51:cc:42:fa:45:e6:ce:c9:15:d2:c6:40: e3:74:c5:2c:94:fa:b9:d0:2f:bc:e0:73:43:11:08:d7:31:32: 9b:4c:be:f3:d5:dd:6f:2f:88:8c:78:f5:46:7a:06:94:bf:44: 3f:22:58:ac:70:88:61:2e:32:e0:c8:d4:22:73:24:b6:92:80: fd:2b:09:0f:d2:f4:0b:32:0e:78:c6:55:ac:3b:4c:78:06:71: a8:4e:fa:34:a7:34:6f:25:1d:f1:7d:9d:a0:98:de:77:90:d1: 37:a4:17:81:ce:48:ce:93:5f:22:51:f2:9e:15:b1:22:9b:aa: 7e:8c:f6:c0:39:5e:cc:53:fa:32:cd:6a:19:da:c4:c0:11:63: ee:51:61:da:e9:8d:05:98:18:cf:8a:df:8a:39:22:6f:72:fb: e2:d6:b0:24:e6:e1:c9:5d:bf:bf:8b:73:f8:d8:f2:c4:65:ef: 1f:62:18:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtGK1+0CfQUW72AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Mjc1N2FmMDEtOTJhNS00ZTY4LThkZDItNzliYjJlMTA3MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1C0ZNXLXkxkTVEO4I4DFPUHZ30dJdQVkgXN 0oChRpc3v5ftI6UJJdIEoGuMS566HSs6psGHgF7sDHkjy4y5l3uvbz0RnsM+yMFD wA9vWdTeHjgX7x2zsO0u4Gv9NYokqGtZuJFVHyE85lWBzZDYtljOdEzLTJ+9V6N4 5y9Q/Em2e/Q26Z3DdtgvFakIjQoxnIz0DTgmr2HJoQBmuF2dKnt0gsIJ9ly934jh xSwOs9EfXT9oLG2XN6vDDGsH/xvktZlb7bczg0b3Ol6NpbsbtLjnQqgX4kI4cCWJ z9rhHuTGPNRx/X7vuXeObY27A8yXJCuMcXt6PGQs5rVhY+zubQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/xFrKX94aOmV3jAkn7quAPjx6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvZDIzODBlMWMtNDU4NC0z ZmJlLTlhYzctYzAwZmM1MTk5NmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQudgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV5IaVGCxuyDknB4/1V3XFZcMFE6RKK5wTaFVchYhJdiljNUVQj7u+S YRCM1X9oAjNefW3Bl4qR25TrvMlFnYlpk8/Z6yWtVNHNvplOwFHMQvpF5s7JFdLG QON0xSyU+rnQL7zgc0MRCNcxMptMvvPV3W8viIx49UZ6BpS/RD8iWKxwiGEuMuDI 1CJzJLaSgP0rCQ/S9AsyDnjGVaw7THgGcahO+jSnNG8lHfF9naCY3neQ0TekF4HO SM6TXyJR8p4VsSKbqn6M9sA5XsxT+jLNahnaxMARY+5RYdrpjQWYGM+K34o5Im9y ++LWsCTm4cldv7+Lc/jY8sRl7x9iGBM= -----END CERTIFICATE-----Generated at Sat Sep 20 07:18:57 2025 by rpki-client