$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/11bd625f-9b51-36e3-99be-fb944381e785.roa File: 11bd625f-9b51-36e3-99be-fb944381e785.roa (raw, json) Hash identifier: vCAlsKZnUomJKfI8l3NhPTKsQs5DsuQuVNphFgLShRM= Subject key identifier: E6:E6:EE:9B:72:2C:87:54:21:87:AD:FE:86:41:03:69:C2:4D:C1:46 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B75C1D1B8C099D587569CA1E0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/11bd625f-9b51-36e3-99be-fb944381e785.roa Signing time: Thu 09 Oct 2025 02:47:48 +0000 ROA not before: Thu 09 Oct 2025 02:47:48 +0000 ROA not after: Wed 07 Jan 2026 03:47:48 +0000 asID: 212238 IP address blocks: 149.143.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:c1:d1:b8:c0:99:d5:87:56:9c:a1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 9 02:47:48 2025 GMT Not After : Jan 7 03:47:48 2026 GMT Subject: CN=fb0cdd7f-5125-4188-bce1-34d439bdaa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:13:37:54:da:c8:7d:33:27:e0:1f:50:c9:9b: bc:bd:f0:b5:01:09:93:95:27:aa:91:06:6d:b2:33: 4e:8a:9e:32:19:d8:af:d7:c8:9b:86:aa:ad:df:f9: 2d:4a:a8:bc:d2:99:f6:5d:66:2e:c2:7d:18:c0:d6: 49:35:e3:70:d3:d8:c3:2a:2e:6a:e2:1f:71:cb:91: 06:b0:69:90:63:5b:5f:55:dc:1d:85:b3:07:3d:23: c8:b2:79:6d:51:0a:0e:2c:2b:86:3b:13:37:ce:c1: 03:f6:be:33:ea:df:1d:a2:8b:da:02:c6:a8:c2:67: 5d:a9:9f:24:d2:35:d6:26:bd:70:b1:ff:24:8c:de: 48:79:92:58:dd:b1:11:24:fd:1b:0a:99:52:0a:49: de:9c:9e:1a:e4:f8:0c:2e:12:3d:2b:b3:d7:84:10: b8:f2:b7:8c:ff:d4:65:04:ed:1d:9f:88:6b:20:51: 07:b5:d8:73:dd:be:f5:b6:fc:2a:c2:a7:a7:92:d0: 2f:d4:71:3d:67:ab:55:a1:24:9e:5f:03:51:85:c5: ba:a7:4e:cc:fb:cf:25:3e:33:fe:60:56:d6:3b:98: a3:45:72:3e:81:19:25:4e:b8:fa:9b:c9:74:fb:37: 8f:f7:f1:dd:c2:e2:b3:20:4f:48:a2:11:93:13:20: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E6:EE:9B:72:2C:87:54:21:87:AD:FE:86:41:03:69:C2:4D:C1:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/11bd625f-9b51-36e3-99be-fb944381e785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4c:1a:3f:6e:3b:76:8b:eb:52:35:4c:7b:6e:be:9a:06:d8: 3d:8a:fb:bc:b6:53:da:84:e9:67:22:e7:d1:e3:ae:2d:26:2e: 80:44:7a:85:c0:3c:50:21:09:73:74:ad:6e:db:81:0e:71:55: 29:7a:e0:56:2a:b4:50:be:32:b2:b1:3e:61:d1:63:77:18:58: 86:37:59:f8:86:de:3e:21:8d:b6:45:b0:6b:31:d9:4b:f7:10: d1:f5:8a:f3:b9:79:7e:98:de:f6:c2:d3:bb:6f:9e:b0:be:bf: 0d:89:d1:b9:d7:63:65:8b:e4:08:73:ef:82:c3:d6:6f:3a:eb: 07:16:be:67:2b:01:6e:9d:96:04:dd:40:b4:15:44:dd:33:0b: fe:d4:a9:a2:49:98:99:79:81:d7:5f:92:4c:27:42:e3:80:0d: a5:7e:de:21:45:02:59:88:1d:79:0a:63:cf:e8:fb:ac:0b:63: bc:d7:e2:d6:ce:a0:b9:9a:52:21:05:8e:31:96:c0:a2:9e:5f: b9:cf:4d:5f:56:2c:b4:9f:9c:b7:d1:c3:0b:ae:12:09:af:8c: 69:41:cd:c2:c1:9d:47:5a:bf:f9:63:7c:c4:cf:da:9e:e2:44: 57:cc:8a:fb:f9:26:da:38:45:23:ac:4f:70:b9:22:3e:9f:3f: 75:55:98:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1wdG4wJnVh1acoeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAwOTAyNDc0OFoXDTI2MDEwNzAzNDc0OFowLzEtMCsGA1UEAxMk ZmIwY2RkN2YtNTEyNS00MTg4LWJjZTEtMzRkNDM5YmRhYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRM3VNrIfTMn4B9QyZu8vfC1AQmTlSeqkQZt sjNOip4yGdiv18ibhqqt3/ktSqi80pn2XWYuwn0YwNZJNeNw09jDKi5q4h9xy5EG sGmQY1tfVdwdhbMHPSPIsnltUQoOLCuGOxM3zsED9r4z6t8doovaAsaowmddqZ8k 0jXWJr1wsf8kjN5IeZJY3bERJP0bCplSCknenJ4a5PgMLhI9K7PXhBC48reM/9Rl BO0dn4hrIFEHtdhz3b71tvwqwqenktAv1HE9Z6tVoSSeXwNRhcW6p07M+88lPjP+ YFbWO5ijRXI+gRklTrj6m8l0+zeP9/HdwuKzIE9IohGTEyBBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObm7ptyLIdUIYet/oZBA2nCTcFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMTFiZDYyNWYtOWI1MS0z NmUzLTk5YmUtZmI5NDQzODFlNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdMGj9uO3aL61I1THtuvpoG2D2K+7y2U9qE6Wci59Hjri0mLoBEeoXA PFAhCXN0rW7bgQ5xVSl64FYqtFC+MrKxPmHRY3cYWIY3WfiG3j4hjbZFsGsx2Uv3 ENH1ivO5eX6Y3vbC07tvnrC+vw2J0bnXY2WL5Ahz74LD1m866wcWvmcrAW6dlgTd QLQVRN0zC/7UqaJJmJl5gddfkkwnQuOADaV+3iFFAlmIHXkKY8/o+6wLY7zX4tbO oLmaUiEFjjGWwKKeX7nPTV9WLLSfnLfRwwuuEgmvjGlBzcLBnUdav/ljfMTP2p7i RFfMivv5Jto4RSOsT3C5Ij6fP3VVmPU= -----END CERTIFICATE-----Generated at Sat Oct 11 18:44:24 2025 by rpki-client