$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa File: 00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa (raw, json) Hash identifier: EvmLkTWRxQveExOWc6hhou/D6GujhoQyaqUtr/RhBHA= Subject key identifier: 41:FA:91:39:D5:9B:28:20:66:2E:73:59:B3:98:31:A5:4F:A4:43:49 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848854B4EE5578817EADC971000 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 7018 IP address blocks: 149.143.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:4e:e5:57:88:17:ea:dc:97:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=232aeb14-7c40-4ae5-a6c9-b7df871b764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7a:bf:58:ef:b3:af:a7:22:b4:df:c2:64:55: 90:ab:3e:a3:42:5e:c5:20:bd:b4:b0:a9:f9:f3:fa: 0a:bd:44:67:d0:ed:c4:3a:f5:47:05:bb:1f:74:53: 69:c4:da:82:27:08:ed:9e:ba:62:2c:bb:5b:78:75: 72:e8:71:02:95:65:8b:de:56:ad:70:30:5c:ca:34: f1:91:d9:4c:a8:34:5b:ec:d5:82:aa:3d:28:1d:57: ab:62:cd:83:cc:70:36:1e:99:e1:97:16:68:04:e9: fe:fc:14:84:b9:70:d1:05:e7:23:45:be:d4:80:94: 09:58:31:2d:58:50:8a:95:b2:7a:eb:3d:24:17:a9: ba:96:0d:a7:96:a4:b6:08:6e:94:36:ad:0a:dc:c0: dc:b5:11:40:1f:17:3b:a8:aa:3a:eb:2e:e1:1e:55: 3b:e9:43:39:e8:0e:c8:4f:55:4e:61:41:78:e1:80: 62:d7:fe:bf:56:26:c7:b4:76:3c:96:37:84:c2:20: 8e:ef:f8:46:22:ab:d0:14:d1:65:00:3c:d2:c3:52: 91:02:79:dc:b8:12:62:46:37:0e:71:83:e0:81:36: 09:21:7e:14:5d:86:96:a0:f0:d4:81:ef:70:35:67: a7:62:4b:5a:aa:b4:af:38:5f:e8:8b:db:60:70:c9: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FA:91:39:D5:9B:28:20:66:2E:73:59:B3:98:31:A5:4F:A4:43:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a8:1f:7d:a0:5b:76:4f:fe:f3:0c:07:6d:de:4f:ca:a7:ce: a2:45:c9:68:6a:7a:3e:d0:c7:64:ea:3b:80:eb:1a:a6:68:45: 8a:fc:2d:83:e3:45:21:1f:5d:84:bb:2e:6b:18:15:fc:bd:e2: c7:78:29:ec:a3:bb:a1:a3:75:83:6c:1f:36:b4:32:a8:6a:63: cf:4c:e3:35:49:6f:6a:3d:5c:eb:b8:4e:7c:65:78:b8:7e:90: ff:9b:15:6f:7a:eb:07:a5:59:d0:ca:c7:11:b8:6c:b8:32:6d: 79:7a:46:7e:76:c2:d0:26:6c:2c:ae:ed:6a:78:86:88:c5:20: fa:ef:70:40:8b:62:44:80:c2:2c:82:59:4c:08:ed:1e:c1:fc: e7:86:b4:88:e7:92:2e:fe:f3:41:17:d7:41:9f:ab:4f:53:1a: dd:ea:23:3d:d7:db:c8:a4:ab:4a:23:00:c6:87:d3:e8:bc:2d: 3d:70:bc:b0:a7:7a:1b:5c:28:c2:da:cb:af:70:57:3c:18:71: 18:ee:de:81:9d:1b:38:a8:56:e2:25:be:54:bc:e2:56:8c:fc: dd:55:a7:5e:1f:02:32:ea:36:3b:fb:e0:14:4f:35:79:f1:ff: 17:ec:ca:d6:4e:8c:27:95:c7:c3:14:fc:7b:3e:69:a5:4d:cf: 2b:71:32:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS07lV4gX6tyXEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk MjMyYWViMTQtN2M0MC00YWU1LWE2YzktYjdkZjg3MWI3NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHq/WO+zr6citN/CZFWQqz6jQl7FIL20sKn5 8/oKvURn0O3EOvVHBbsfdFNpxNqCJwjtnrpiLLtbeHVy6HEClWWL3latcDBcyjTx kdlMqDRb7NWCqj0oHVerYs2DzHA2HpnhlxZoBOn+/BSEuXDRBecjRb7UgJQJWDEt WFCKlbJ66z0kF6m6lg2nlqS2CG6UNq0K3MDctRFAHxc7qKo66y7hHlU76UM56A7I T1VOYUF44YBi1/6/VibHtHY8ljeEwiCO7/hGIqvQFNFlADzSw1KRAnncuBJiRjcO cYPggTYJIX4UXYaWoPDUge9wNWenYktaqrSvOF/oi9tgcMkUrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH6kTnVmyggZi5zWbOYMaVPpENJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDAzODhjNTMtMWE1OS0z YzJlLWJkNjAtZTVmOTdlMjk1M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2oH32gW3ZP/vMMB23eT8qnzqJFyWhqej7Qx2TqO4DrGqZoRYr8LYPj RSEfXYS7LmsYFfy94sd4Keyju6GjdYNsHza0MqhqY89M4zVJb2o9XOu4TnxleLh+ kP+bFW966welWdDKxxG4bLgybXl6Rn52wtAmbCyu7Wp4hojFIPrvcECLYkSAwiyC WUwI7R7B/OeGtIjnki7+80EX10Gfq09TGt3qIz3X28ikq0ojAMaH0+i8LT1wvLCn ehtcKMLay69wVzwYcRju3oGdGzioVuIlvlS84laM/N1Vp14fAjLqNjv74BRPNXnx /xfsytZOjCeVx8MU/Hs+aaVNzytxMtY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:25 2025 by rpki-client