$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa File: 3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa (raw, json) Hash identifier: Z6OuuUCSBSeVFao55mzE0oDes0AVIycXkT9oRp9G2YU= Subject key identifier: E8:D8:EF:40:F5:15:45:81:70:7B:6C:0F:B3:8D:34:7E:D3:73:D3:07 Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584ADECBDA4FC50A1E433192B308 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:da:4f:c5:0a:1e:43:31:92:b3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=e9b4d3e8-75bc-4d72-9c05-4dff150bcc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:36:f4:d8:bd:dc:dd:22:5e:e7:ea:b9:07: 09:58:15:4e:45:c0:18:ee:14:55:31:0a:bc:d2:a5: c2:b9:2b:43:ec:88:be:ce:72:d2:c6:df:93:84:3e: 32:03:de:de:97:53:bd:e5:2d:de:af:08:64:e4:07: 91:5d:37:9d:b2:fc:a4:06:bf:c3:8a:07:7f:c4:ac: d8:74:ea:7a:61:0d:e7:c6:f7:02:87:09:73:1c:52: 6e:c3:90:0a:03:2b:d1:b4:b9:24:f7:51:01:a1:c6: dc:6e:96:3b:d1:47:78:a8:8b:54:a9:3d:03:5a:11: 2f:91:a8:92:14:67:77:36:7e:a5:b5:a1:4e:7e:43: e2:3f:89:fa:6b:d1:5f:42:6e:d9:23:87:1e:dc:44: 1b:e1:3c:66:a3:11:0b:e9:8c:01:81:ae:39:e8:6f: 0f:22:07:b6:04:80:74:28:66:3f:6f:ea:35:76:09: 02:6c:f3:5b:ed:bb:28:3e:7a:01:74:e3:8a:f7:d3: 75:b2:86:69:b1:66:54:dc:e5:6d:2f:23:26:79:89: f0:26:0c:7c:52:56:0e:5a:c2:47:84:24:38:e0:54: 30:42:41:e6:43:e3:91:90:61:3d:44:b7:b8:e5:b0: 78:1a:c0:24:06:90:0a:da:3b:d2:10:93:ec:d9:7d: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D8:EF:40:F5:15:45:81:70:7B:6C:0F:B3:8D:34:7E:D3:73:D3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ee:8d:81:63:aa:7f:bf:83:66:35:f5:ff:b5:b1:c8:87:41: 8a:42:67:db:8a:5b:6a:a4:84:a2:73:fe:67:da:2c:21:9a:e6: 17:ee:4a:da:73:f6:89:e8:f9:31:83:86:b7:5b:1e:41:69:d4: 93:0b:c5:de:78:d6:13:8a:cc:cf:69:35:10:20:8e:da:92:c8: 25:e8:fd:43:1e:7b:3b:61:c1:53:3a:07:51:e2:cb:be:ee:5a: ed:81:28:03:54:0b:23:6d:07:bc:8d:e6:36:69:49:62:89:20: 45:e3:bd:11:03:64:c1:94:71:b1:47:0d:0f:e1:e3:d1:d2:a8: 47:d2:d5:81:ae:d2:8d:90:2f:16:00:cc:cf:0d:d9:56:89:68: cd:40:fa:7c:33:e7:df:bc:89:f4:ff:37:ab:65:af:bf:6d:7c: 6b:b7:bf:5c:67:4e:7a:ca:41:f6:69:98:93:53:ff:3b:bd:d7: fa:c8:00:2d:6f:ce:b8:dd:84:7a:12:36:76:b5:ad:d2:e5:d5: 68:a3:6a:b9:6b:bc:40:0f:bf:3f:cf:e2:9d:8c:d5:72:fa:c1: 3f:24:e0:a7:f3:bb:32:ef:14:de:e8:2e:35:86:a4:1f:28:e1: 0e:79:49:a1:92:5d:c4:9e:3b:44:5f:38:e9:3a:73:d2:c4:c0: eb:fd:df:af -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErey9pPxQoeQzGSswgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTliNGQzZTgtNzViYy00ZDcyLTljMDUtNGRmZjE1MGJjYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcs29Ni93N0iXufquQcJWBVORcAY7hRVMQq8 0qXCuStD7Ii+znLSxt+ThD4yA97el1O95S3erwhk5AeRXTedsvykBr/Digd/xKzY dOp6YQ3nxvcChwlzHFJuw5AKAyvRtLkk91EBocbcbpY70Ud4qItUqT0DWhEvkaiS FGd3Nn6ltaFOfkPiP4n6a9FfQm7ZI4ce3EQb4TxmoxEL6YwBga456G8PIge2BIB0 KGY/b+o1dgkCbPNb7bsoPnoBdOOK99N1soZpsWZU3OVtLyMmeYnwJgx8UlYOWsJH hCQ44FQwQkHmQ+ORkGE9RLe45bB4GsAkBpAK2jvSEJPs2X3yEQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOjY70D1FUWBcHtsD7ONNH7Tc9MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvM2M4NTkxOGEtMmJhZi0z ZmY5LTg1NmMtNGY3NjY2YzQwZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA7ujYFjqn+/g2Y19f+1sciHQYpCZ9uKW2qkhKJz/mfaLCGa 5hfuStpz9ono+TGDhrdbHkFp1JMLxd541hOKzM9pNRAgjtqSyCXo/UMeezthwVM6 B1Hiy77uWu2BKANUCyNtB7yN5jZpSWKJIEXjvREDZMGUcbFHDQ/h49HSqEfS1YGu 0o2QLxYAzM8N2VaJaM1A+nwz59+8ifT/N6tlr79tfGu3v1xnTnrKQfZpmJNT/zu9 1/rIAC1vzrjdhHoSNna1rdLl1WijarlrvEAPvz/P4p2M1XL6wT8k4KfzuzLvFN7o LjWGpB8o4Q55SaGSXcSeO0RfOOk6c9LEwOv9368= -----END CERTIFICATE-----Generated at Thu Aug 21 18:57:42 2025 by rpki-client