$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa File: 88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa (raw, json) Hash identifier: BJo/pRkASapfZo2zDc0+vfcN7usr+pTfUJvcAUYot4A= Subject key identifier: 17:70:E1:AD:6D:2E:25:2F:10:E8:21:5A:78:C6:A3:B2:7C:19:58:86 Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584ADECBDA62363FDD585FCAE360 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:da:62:36:3f:dd:58:5f:ca:e3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=ab4ac778-2c4a-41c8-99f4-5a0651e844ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:30:3a:8a:8b:ed:50:9d:2f:5e:7a:ca:30: f4:da:cc:c0:50:aa:ad:bf:6c:61:8a:eb:fd:1a:32: c3:b8:5d:4a:d5:58:7c:42:06:13:c0:30:d5:38:ed: 8d:40:52:57:b2:65:34:16:55:17:e0:c3:0b:a9:91: 3e:e4:90:6f:fc:08:5d:3c:32:73:d1:1e:bc:6d:eb: 90:a7:aa:06:1c:6f:1d:b8:4c:8b:e1:38:8d:b1:ce: 9a:70:47:d4:4c:ab:26:59:f4:32:b9:ca:5e:8e:eb: 6b:a2:6d:d0:73:36:18:01:84:0e:c4:bf:61:f7:4a: 42:93:e0:3f:e6:35:8a:d6:86:4c:8e:a4:2d:d9:b1: 13:09:b2:4a:fe:1e:7e:43:52:b6:d2:4a:68:a8:90: 28:b0:69:43:17:9c:03:cb:5e:b5:d7:96:33:14:7d: db:8f:ad:96:29:34:a7:fd:0e:48:30:b6:c5:32:c0: f6:5f:5b:49:7f:91:13:9f:97:73:ac:5e:7f:a9:4f: d8:a1:c9:39:ed:32:82:fd:b5:7d:bc:c3:30:5a:df: 32:cd:60:83:39:2a:f5:3b:8f:8f:41:e0:79:b3:29: 82:49:62:39:ff:d0:ea:7f:60:81:16:c9:eb:c3:4f: 45:ef:65:98:58:c0:bf:3e:dc:69:10:01:04:f5:87: f0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:70:E1:AD:6D:2E:25:2F:10:E8:21:5A:78:C6:A3:B2:7C:19:58:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2b:67:80:03:c1:35:76:99:68:ad:45:37:7d:20:de:78:22: d2:38:eb:07:e0:44:64:c9:bb:ed:cf:34:a3:86:40:66:41:d2: 69:e1:c1:de:b1:11:6d:03:56:31:3a:8e:a9:5a:66:6d:3f:c3: 1c:07:0d:97:84:3c:70:bb:46:d4:cb:2b:f8:8b:1c:9c:38:67: fe:a9:31:22:93:19:12:7d:b2:b1:29:16:17:cd:b4:10:54:eb: 30:02:82:cd:6d:38:f2:a0:d0:fc:f8:5b:f7:dd:f4:41:d2:0c: 3c:64:97:b2:53:f4:8d:dc:1a:47:bd:88:e4:51:2f:cc:97:1d: 4d:20:49:75:da:a9:cf:49:2b:9f:97:b5:d0:54:8b:67:10:d7: 21:aa:eb:55:9c:7f:7a:d1:eb:26:ee:cf:a2:b2:16:7d:11:89: 57:0b:f7:c1:50:4f:69:df:6e:b3:c4:6f:58:4e:3d:a8:ee:9b: 58:72:d6:72:91:fd:e8:c4:cf:eb:39:27:dc:7d:c4:aa:88:c2: 47:1c:6e:de:42:60:b0:23:3a:7d:9e:8f:4a:f8:79:de:74:60: 31:60:50:83:b4:ac:9d:0b:dd:57:9d:71:0a:de:f2:fb:ae:f9: e9:ef:8b:0f:1e:36:be:73:77:66:dc:d3:ca:6a:ed:1d:7a:db: ba:0f:5d:28 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErey9piNj/dWF/K42AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YWI0YWM3NzgtMmM0YS00MWM4LTk5ZjQtNWEwNjUxZTg0NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4IwOoqL7VCdL156yjD02szAUKqtv2xhiuv9 GjLDuF1K1Vh8QgYTwDDVOO2NQFJXsmU0FlUX4MMLqZE+5JBv/AhdPDJz0R68beuQ p6oGHG8duEyL4TiNsc6acEfUTKsmWfQyucpejutrom3QczYYAYQOxL9h90pCk+A/ 5jWK1oZMjqQt2bETCbJK/h5+Q1K20kpoqJAosGlDF5wDy16115YzFH3bj62WKTSn /Q5IMLbFMsD2X1tJf5ETn5dzrF5/qU/Yock57TKC/bV9vMMwWt8yzWCDOSr1O4+P QeB5symCSWI5/9Dqf2CBFsnrw09F72WYWMC/PtxpEAEE9Yfw4wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBdw4a1tLiUvEOghWnjGo7J8GViGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvODhjNWE3YzAtZWM5Yy0z N2E4LTllZTQtYWY0NTBhYTRkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFMrZ4ADwTV2mWitRTd9IN54ItI46wfgRGTJu+3PNKOGQGZB 0mnhwd6xEW0DVjE6jqlaZm0/wxwHDZeEPHC7RtTLK/iLHJw4Z/6pMSKTGRJ9srEp FhfNtBBU6zACgs1tOPKg0Pz4W/fd9EHSDDxkl7JT9I3cGke9iORRL8yXHU0gSXXa qc9JK5+XtdBUi2cQ1yGq61Wcf3rR6ybuz6KyFn0RiVcL98FQT2nfbrPEb1hOPaju m1hy1nKR/ejEz+s5J9x9xKqIwkccbt5CYLAjOn2ej0r4ed50YDFgUIO0rJ0L3Ved cQre8vuu+enviw8eNr5zd2bc08pq7R1627oPXSg= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:04 2025 by rpki-client