$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa File: bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa (raw, json) Hash identifier: ZqeNN/4Rp2dm8MZFwJdTGK3e2KP3TrqnY6NV4j6CSzE= Subject key identifier: AE:EE:A0:7B:77:26:8A:9B:99:B2:BF:7D:E4:86:89:85:00:21:56:5E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B1AD1774C8EECB42CDA656700 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 1239 IP address blocks: 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:77:4c:8e:ec:b4:2c:da:65:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=9e8c7cd7-06c4-4894-84a6-07d9f5dadfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:00:7f:ee:83:72:92:7a:a8:b1:9e:71:ed: 04:43:8e:fb:6d:72:b2:2c:80:e1:88:14:42:28:8b: 89:f4:43:3d:8d:4a:48:1b:70:8f:87:33:97:16:25: 96:13:40:a2:58:6b:49:ab:51:8b:05:44:64:80:b4: 4c:f6:f4:db:26:ab:a5:c2:e0:31:c3:00:72:18:c1: 63:b2:c0:ad:b2:56:42:b2:c8:a1:bc:a5:15:9a:75: b9:34:a2:5f:40:50:36:f2:c1:86:d3:2f:d7:bb:9d: 4b:cc:d2:e0:03:cb:c4:bd:4a:a3:54:6c:01:88:b2: 3a:f5:3a:7c:b8:d6:4c:03:79:9d:13:85:e8:76:73: d1:00:96:44:12:db:f9:1e:f3:42:05:e4:14:45:c7: 96:3a:8c:47:30:dc:6f:5a:7f:2f:ed:45:24:66:c7: ee:05:89:62:39:0c:4d:d5:e3:25:45:16:7f:04:43: d6:a4:52:33:41:03:ff:20:4e:4f:c1:59:1f:2c:62: fc:81:d8:80:2f:ee:92:bc:26:ad:7e:f5:62:47:77: b0:b7:7b:61:3c:b2:34:73:1f:4f:d0:6a:c2:98:dc: e9:7e:b4:ab:7d:87:d6:8d:a9:4c:69:71:cb:d6:38: 50:04:14:fd:18:75:86:17:0d:33:64:57:36:4d:2f: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EE:A0:7B:77:26:8A:9B:99:B2:BF:7D:E4:86:89:85:00:21:56:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:bf:dc:af:c6:32:0c:d2:ea:45:2f:a1:78:2d:32:a7:e2:6e: e4:ce:4a:1c:f3:2f:7b:d8:76:ba:ba:0d:6e:fa:ce:8a:1a:d1: b9:62:1c:3c:6f:35:16:f0:de:98:a7:f7:86:cd:38:6e:7e:73: b1:2d:af:46:19:83:9d:70:0c:8b:93:28:7d:2f:9c:5d:ee:0d: 46:b9:8c:0b:5a:25:5f:7e:25:6f:e9:b1:71:a2:94:bc:ac:93: b3:ce:f5:7d:e3:d0:44:ab:4e:f8:f9:71:d4:70:78:db:1f:25: a4:c4:8d:fa:1d:f9:b6:91:bd:32:46:c9:08:2b:d5:95:24:1b: 85:ff:1b:b4:5b:ff:d5:9a:7b:15:cc:57:8b:be:70:55:cd:9a: 8c:b0:c3:75:bb:68:40:7e:ad:74:de:d0:ab:88:e5:d4:f6:e9: 3d:d9:bf:22:da:bb:d0:82:f4:a1:1b:c3:0f:c1:97:ce:a8:53: 21:39:67:b4:e9:5f:3c:fe:94:20:c7:9d:11:42:fa:99:cb:7d: 35:1e:84:22:8b:0d:25:29:c1:f8:bb:dc:73:cb:2b:47:93:65: f3:85:60:bf:bb:5b:9c:12:2d:79:e1:34:7a:64:b7:41:f1:24: 2a:78:c7:6a:c0:12:d4:14:b0:37:f3:c6:8b:83:71:c5:cf:2a: 1d:f0:77:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XdMjuy0LNplZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OWU4YzdjZDctMDZjNC00ODk0LTg0YTYtMDdkOWY1ZGFkZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudYAf+6DcpJ6qLGece0EQ477bXKyLIDhiBRC KIuJ9EM9jUpIG3CPhzOXFiWWE0CiWGtJq1GLBURkgLRM9vTbJqulwuAxwwByGMFj ssCtslZCssihvKUVmnW5NKJfQFA28sGG0y/Xu51LzNLgA8vEvUqjVGwBiLI69Tp8 uNZMA3mdE4XodnPRAJZEEtv5HvNCBeQURceWOoxHMNxvWn8v7UUkZsfuBYliOQxN 1eMlRRZ/BEPWpFIzQQP/IE5PwVkfLGL8gdiAL+6SvCatfvViR3ewt3thPLI0cx9P 0GrCmNzpfrSrfYfWjalMaXHL1jhQBBT9GHWGFw0zZFc2TS/IdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7uoHt3JoqbmbK/feSGiYUAIVZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmZhNmJhMjUtNjhmZC0z NDkzLThkNDUtNDU1ODNjOGI5N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6/3K/GMgzS6kUvoXgtMqfibuTOShzzL3vYdrq6DW76zooa0bliHDxv NRbw3pin94bNOG5+c7Etr0YZg51wDIuTKH0vnF3uDUa5jAtaJV9+JW/psXGilLys k7PO9X3j0ESrTvj5cdRweNsfJaTEjfod+baRvTJGyQgr1ZUkG4X/G7Rb/9WaexXM V4u+cFXNmoyww3W7aEB+rXTe0KuI5dT26T3ZvyLau9CC9KEbww/Bl86oUyE5Z7Tp Xzz+lCDHnRFC+pnLfTUehCKLDSUpwfi73HPLK0eTZfOFYL+7W5wSLXnhNHpkt0Hx JCp4x2rAEtQUsDfzxouDccXPKh3wdz8= -----END CERTIFICATE-----Generated at Sat Oct 11 18:41:47 2025 by rpki-client