$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa File: 96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa (raw, json) Hash identifier: PS0kKwGZ1U21p3Q24iI64REsh0cbDJq1j+/t3hZX0zk= Subject key identifier: 8A:5F:70:E7:C1:D9:04:46:FA:68:35:84:5B:56:0A:1C:DD:10:A6:16 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B25FC3D44E163FA47FAF4F3A0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 396356 IP address blocks: 149.143.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3d:44:e1:63:fa:47:fa:f4:f3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=a28cde07-6a06-45fa-ad14-c61c7622792b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:f7:21:d8:4a:b8:42:97:9d:f3:3c:3e:18: ac:b2:80:44:fa:48:e6:3d:fb:04:93:b4:18:a9:46: 3d:8a:96:4a:06:b2:c7:3b:d4:25:07:95:83:67:4a: ef:37:81:1c:b8:85:97:f1:6c:8f:fc:80:fb:67:d3: 36:fc:60:1a:e2:a4:77:17:dd:f4:e6:5d:ba:73:d4: 61:42:b4:c2:b7:76:93:5a:fe:cb:19:44:5a:89:8a: d7:d0:fb:26:a8:ad:7b:61:2f:a6:65:94:6f:45:13: 18:d1:53:64:51:f4:ef:71:5c:0e:97:4d:02:35:8a: df:52:63:62:5f:26:f1:e2:41:61:d2:92:24:cb:56: 78:6f:b3:86:90:18:6c:9d:fa:a3:3d:de:08:5b:f0: 76:b3:91:4f:5c:5e:f1:ad:17:a1:70:2e:30:a0:7f: 2e:77:c4:5f:2d:bc:cc:e0:93:30:fd:a3:3b:23:60: 99:16:ec:83:2a:d9:52:2e:86:26:ce:ea:2d:48:63: 67:b0:30:0c:42:87:d1:5d:93:f7:df:1c:54:19:7d: 4d:83:4e:3d:28:20:a0:92:71:a5:87:15:5c:0b:f3: 6d:52:a0:45:9c:c2:ad:14:52:90:08:2e:ee:d4:55: 20:fd:9e:25:e2:e9:28:49:32:93:f4:72:dd:ef:df: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5F:70:E7:C1:D9:04:46:FA:68:35:84:5B:56:0A:1C:DD:10:A6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a5:e4:3e:73:84:a4:96:01:de:97:df:ba:d2:0e:5a:51:7a: cf:cc:0f:9a:50:9f:e2:a4:cd:66:53:8c:bb:86:9d:7a:d3:e4: 65:ab:aa:57:a8:5b:0b:b0:b7:07:17:40:92:5d:d0:ab:6c:c2: 88:34:c8:47:22:36:17:ca:26:31:d9:51:a1:f0:3c:27:cb:e0: 33:4a:14:9f:53:25:ba:ee:30:63:4e:2e:f3:bd:d2:ea:d0:b1: 13:49:e5:11:7d:8d:ed:ae:77:90:36:b4:d3:6e:b8:95:ac:59: 7f:5b:da:08:50:80:6a:47:4c:24:55:2a:e3:83:1e:4a:4b:6b: 94:c7:66:5d:7e:17:87:ba:e4:2d:13:8b:b1:5b:05:81:00:dd: 79:55:4f:24:80:63:4b:c0:19:5f:6e:51:6f:e2:b9:eb:fc:b0: 8c:6f:1a:a0:43:eb:57:cd:34:46:9b:a7:e7:0f:0a:1b:99:64: bf:59:a8:12:79:e5:8d:32:19:89:d2:e2:13:d8:20:1c:77:4b: d4:46:a3:33:80:76:ef:ee:6e:df:ea:5b:12:68:fa:80:07:93: e5:64:e7:57:5d:0e:5c:64:56:51:60:84:af:e4:4a:0e:4f:75: 82:40:54:56:a6:e4:a3:c5:0c:ad:1d:dd:9f:66:43:48:34:da: 04:b7:d1:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/D1E4WP6R/r086AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YTI4Y2RlMDctNmEwNi00NWZhLWFkMTQtYzYxYzc2MjI3OTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z73IdhKuEKXnfM8PhissoBE+kjmPfsEk7QY qUY9ipZKBrLHO9QlB5WDZ0rvN4EcuIWX8WyP/ID7Z9M2/GAa4qR3F9305l26c9Rh QrTCt3aTWv7LGURaiYrX0PsmqK17YS+mZZRvRRMY0VNkUfTvcVwOl00CNYrfUmNi Xybx4kFh0pIky1Z4b7OGkBhsnfqjPd4IW/B2s5FPXF7xrRehcC4woH8ud8RfLbzM 4JMw/aM7I2CZFuyDKtlSLoYmzuotSGNnsDAMQofRXZP33xxUGX1Ng049KCCgknGl hxVcC/NtUqBFnMKtFFKQCC7u1FUg/Z4l4ukoSTKT9HLd7994vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpfcOfB2QRG+mg1hFtWChzdEKYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTZmMmUzZmEtODFjNS0z NWExLTllZTUtYzM4YmVjOTg5NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWl5D5zhKSWAd6X37rSDlpRes/MD5pQn+KkzWZTjLuGnXrT5GWrqleo WwuwtwcXQJJd0Ktswog0yEciNhfKJjHZUaHwPCfL4DNKFJ9TJbruMGNOLvO90urQ sRNJ5RF9je2ud5A2tNNuuJWsWX9b2ghQgGpHTCRVKuODHkpLa5THZl1+F4e65C0T i7FbBYEA3XlVTySAY0vAGV9uUW/iuev8sIxvGqBD61fNNEabp+cPChuZZL9ZqBJ5 5Y0yGYnS4hPYIBx3S9RGozOAdu/ubt/qWxJo+oAHk+Vk51ddDlxkVlFghK/kSg5P dYJAVFam5KPFDK0d3Z9mQ0g02gS30fw= -----END CERTIFICATE-----Generated at Sat Oct 11 18:38:55 2025 by rpki-client