$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d563b298-1b3f-3615-bb01-29c0819ee013.roa File: d563b298-1b3f-3615-bb01-29c0819ee013.roa (raw, json) Hash identifier: LbBvVX8jGpzbaE6nQz0jIdJmsos373wNt+9MZIioQso= Subject key identifier: C8:EE:E8:80:96:26:86:17:77:5A:49:24:A2:9C:79:74:60:17:E3:F1 Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Certificate serial: 010D0C9F4328584A6DBB3BC6FE9725C58F29B7E0 Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d563b298-1b3f-3615-bb01-29c0819ee013.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 63141 IP address blocks: 192.35.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3b:c6:fe:97:25:c5:8f:29:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=9b3810bd-3b63-4235-a30d-5fe166b221b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:b6:9c:60:bb:2e:bb:61:0e:41:3d:73:6b: 8f:9a:91:11:ab:c2:b6:9f:f0:9e:1f:f5:ec:cf:19: 73:f4:af:0f:cd:a9:c8:cb:4a:16:f7:20:0b:0a:82: 84:81:f2:66:1e:df:02:d1:16:54:2c:37:64:15:fa: 1f:80:89:95:05:5e:40:a6:6e:a2:63:df:fb:08:af: d6:97:6d:16:70:e5:ad:03:02:a2:71:bc:a5:17:87: d3:3b:bf:c3:54:50:8d:b6:01:53:05:e3:3a:a5:b5: cc:59:34:02:0f:1b:59:20:ba:81:9c:9b:8f:b7:82: a1:17:ef:af:43:57:ee:d6:f8:13:60:06:e8:c7:2e: 44:2b:5d:21:22:7c:61:1a:3f:f7:3c:19:03:a2:50: 2c:75:2b:0b:9f:15:b3:6d:ea:93:c0:f5:54:ed:23: 9f:15:40:63:00:0d:46:1b:9d:e0:f7:9b:69:f4:f8: 0c:b0:5f:35:87:f1:3f:fc:c5:a8:c5:e0:8d:2e:7f: 48:8c:fe:2b:0f:2a:5f:10:47:ab:0b:b0:99:b9:32: 05:ea:54:af:e7:e0:2b:96:99:49:37:3b:4e:26:47: bc:29:4a:15:00:41:27:8f:02:a5:1f:4e:a2:f2:6e: ab:92:3b:3d:50:ef:07:13:a4:18:2d:e1:aa:51:1c: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:E8:80:96:26:86:17:77:5A:49:24:A2:9C:79:74:60:17:E3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/d563b298-1b3f-3615-bb01-29c0819ee013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl X509v3 Authority Key Identifier: keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer sbgp-ipAddrBlock: critical IPv4: 192.35.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:08:f8:ba:d9:a1:9f:a8:6c:38:e6:1d:f4:36:8c:c3:ee:9f: 3c:06:6e:bb:18:16:17:5b:ba:f7:80:45:07:92:a8:43:6f:2b: 68:83:d8:b3:0b:2c:da:01:8b:c9:3a:5c:0d:0e:ab:4c:14:ba: cc:19:d8:06:a2:26:fe:42:3c:a8:d5:31:99:7e:8a:14:49:ca: 4c:cc:9c:b4:24:82:1f:6c:4f:b5:40:19:fa:5f:a2:54:7c:bf: c1:8d:1d:33:24:c7:19:64:04:ed:cc:26:8c:55:cb:7e:c1:56: 58:93:3f:5c:46:b7:11:d2:ee:89:24:20:a8:fa:35:ce:98:b5: e0:fc:19:d7:d8:f1:f4:3b:76:24:2a:f2:0d:90:6c:22:79:cd: f1:bd:6e:fc:48:14:89:6b:ac:7d:25:27:d1:4b:1e:41:4b:e3: b9:cc:f5:51:f3:61:cf:47:8c:6f:ed:84:4e:1e:c7:13:72:2b: f1:4a:e9:b1:af:c5:40:c0:5c:00:d1:39:32:81:d7:9d:83:63: 21:ed:b2:68:6d:e3:7a:ea:ac:d6:e4:51:3f:9e:d8:af:dc:f8: d0:76:e1:0f:0d:52:41:7d:94:ac:7e:cb:47:b8:82:86:d4:5c: 65:89:10:1b:36:4f:a0:ea:c3:29:fb:ec:db:bf:23:8b:35:76: 48:4c:28:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptuzvG/pclxY8pt+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4MTM2ZjAtM2VmYy00ZGZiLWEzZmUtNTk2ZDlhOGRm MDFhMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk OWIzODEwYmQtM2I2My00MjM1LWEzMGQtNWZlMTY2YjIyMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjG2nGC7LrthDkE9c2uPmpERq8K2n/CeH/Xs zxlz9K8PzanIy0oW9yALCoKEgfJmHt8C0RZULDdkFfofgImVBV5Apm6iY9/7CK/W l20WcOWtAwKicbylF4fTO7/DVFCNtgFTBeM6pbXMWTQCDxtZILqBnJuPt4KhF++v Q1fu1vgTYAboxy5EK10hInxhGj/3PBkDolAsdSsLnxWzbeqTwPVU7SOfFUBjAA1G G53g95tp9PgMsF81h/E//MWoxeCNLn9IjP4rDypfEEerC7CZuTIF6lSv5+ArlplJ NztOJke8KUoVAEEnjwKlH06i8m6rkjs9UO8HE6QYLeGqURzZ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMju6ICWJoYXd1pJJKKceXRgF+PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTgx MzZmMC0zZWZjLTRkZmItYTNmZS01OTZkOWE4ZGYwMWEvZDU2M2IyOTgtMWIzZi0z NjE1LWJiMDEtMjljMDgxOWVlMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk4MTM2ZjAtM2VmYy00ZGZiLWEz ZmUtNTk2ZDlhOGRmMDFhL2M5ODEzNmYwLTNlZmMtNGRmYi1hM2ZlLTU5NmQ5YThk ZjAxYS5jcmwwHwYDVR0jBBgwFoAU+aZ1AijUOo0zRp4cvJUONtc7Pn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTgxMzZmMC0zZWZjLTRkZmItYTNmZS01OTZk OWE4ZGYwMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkI+LrZoZ+obDjmHfQ2jMPunzwGbrsYFhdbuveARQeSqENvK2iD2LML LNoBi8k6XA0Oq0wUuswZ2AaiJv5CPKjVMZl+ihRJykzMnLQkgh9sT7VAGfpfolR8 v8GNHTMkxxlkBO3MJoxVy37BVliTP1xGtxHS7okkIKj6Nc6YteD8GdfY8fQ7diQq 8g2QbCJ5zfG9bvxIFIlrrH0lJ9FLHkFL47nM9VHzYc9HjG/thE4exxNyK/FK6bGv xUDAXADROTKB152DYyHtsmht43rqrNbkUT+e2K/c+NB24Q8NUkF9lKx+y0e4gobU XGWJEBs2T6Dqwyn77Nu/I4s1dkhMKGA= -----END CERTIFICATE-----Generated at Fri Jul 11 04:34:10 2025 by rpki-client