$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa File: 32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa (raw, json) Hash identifier: 2fzKEqp9CQkuzUADTpT+PZQEwvDuroPUpBJQLI8EaS4= Subject key identifier: 00:11:2B:6D:CD:75:5A:A7:AD:24:91:79:6F:F9:32:45:43:D5:E9:66 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858496484468F8BEAC29B17CA1700 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 7018 IP address blocks: 149.143.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:46:8f:8b:ea:c2:9b:17:ca:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=1fd5bd82-be93-40e8-b933-8ea8d8b64321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:57:2b:58:13:0e:29:0a:dc:11:e9:63:72: 4a:61:ab:93:45:9b:7d:ae:90:0f:47:70:f9:7c:43: 2c:d7:39:63:74:2e:54:ee:54:b7:39:a1:72:8b:e0: 6b:e5:8e:eb:06:09:9e:21:e5:e2:3f:b8:6b:8d:3a: 50:58:9c:00:c1:79:00:ee:c9:12:a8:da:55:d5:43: 88:78:24:a6:2e:1e:22:d5:69:bb:ed:50:9e:f1:20: d4:6d:62:d9:54:f8:ea:e1:5f:c6:74:4f:e1:25:f7: f5:0c:46:1c:6b:67:a1:6f:ae:77:27:80:3d:0a:db: 29:d1:96:48:15:26:18:7c:63:d2:e9:b9:65:e2:3e: e6:dc:e1:2e:bf:e8:4f:1b:2c:ea:a1:bd:8c:68:07: 44:01:2b:79:9e:1e:0e:fe:52:72:5c:b1:71:6a:2e: 51:87:28:09:0d:59:12:cc:c0:52:66:ce:55:4c:d0: cc:db:97:2a:01:f2:4a:cd:e9:46:57:32:aa:a6:69: c1:90:21:20:15:f9:ff:66:c1:8a:b5:5c:d9:ff:2d: ce:c3:7d:20:f2:4e:28:d5:5e:a1:69:15:30:30:35: e0:a8:26:02:e2:e0:54:02:70:f4:44:cc:40:a4:d9: d7:75:1a:e2:b5:e9:c2:a9:b3:83:6b:eb:8a:a3:d2: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:2B:6D:CD:75:5A:A7:AD:24:91:79:6F:F9:32:45:43:D5:E9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:06:43:09:ed:a9:ee:3e:30:ef:f7:43:c9:b6:c9:a0:b1:3b: f4:ec:32:a4:95:77:88:78:05:3f:f6:6b:69:b5:71:26:6f:0e: 3f:47:f9:2e:a3:e7:55:2d:48:25:15:c7:08:0e:6d:1d:24:d1: b5:73:b4:cd:8f:48:61:d6:6d:01:3d:13:65:ae:a3:ad:31:f3: 51:a8:7a:e7:17:8e:fe:4b:8a:d4:24:81:e1:5c:e3:36:63:73: 46:ca:58:38:93:36:3c:18:df:6f:7e:c8:2b:43:84:b8:aa:a4: 8c:6c:83:ac:51:c2:3a:b1:7f:d0:a8:75:65:e8:14:d6:d5:b2: 0f:46:06:fc:c9:97:75:35:0d:68:40:5e:6b:4e:c2:0d:34:ec: f4:a7:e6:5d:27:86:16:22:4e:18:d9:4a:5f:b9:fd:3f:0e:22: 7d:84:39:b3:54:f6:50:3b:af:36:78:d5:c5:43:c4:34:f9:c3: 9b:da:08:27:07:9d:c0:7b:7e:f4:d2:fb:26:60:e3:d4:01:05: 79:03:d7:e1:1f:a0:9b:6c:6b:6e:16:fa:a3:ab:d4:ac:ed:c6: fc:01:a0:df:03:e1:71:b7:3a:e4:45:05:a6:24:ee:f4:d0:36: b6:ea:2c:fa:2d:cd:5c:3f:f8:4b:5d:a6:6f:e5:5a:77:3c:46: ef:61:70:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEaPi+rCmxfKFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MWZkNWJkODItYmU5My00MGU4LWI5MzMtOGVhOGQ4YjY0MzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rJXK1gTDikK3BHpY3JKYauTRZt9rpAPR3D5 fEMs1zljdC5U7lS3OaFyi+Br5Y7rBgmeIeXiP7hrjTpQWJwAwXkA7skSqNpV1UOI eCSmLh4i1Wm77VCe8SDUbWLZVPjq4V/GdE/hJff1DEYca2ehb653J4A9Ctsp0ZZI FSYYfGPS6bll4j7m3OEuv+hPGyzqob2MaAdEASt5nh4O/lJyXLFxai5RhygJDVkS zMBSZs5VTNDM25cqAfJKzelGVzKqpmnBkCEgFfn/ZsGKtVzZ/y3Ow30g8k4o1V6h aRUwMDXgqCYC4uBUAnD0RMxApNnXdRritenCqbODa+uKo9JVXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAARK23NdVqnrSSReW/5MkVD1elmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzJlN2FjMjItNGIzYi0z MWMwLWIxODEtOWIwYmU5ZDgwYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkGQwntqe4+MO/3Q8m2yaCxO/TsMqSVd4h4BT/2a2m1cSZvDj9H+S6j 51UtSCUVxwgObR0k0bVztM2PSGHWbQE9E2Wuo60x81GoeucXjv5LitQkgeFc4zZj c0bKWDiTNjwY329+yCtDhLiqpIxsg6xRwjqxf9CodWXoFNbVsg9GBvzJl3U1DWhA XmtOwg007PSn5l0nhhYiThjZSl+5/T8OIn2EObNU9lA7rzZ41cVDxDT5w5vaCCcH ncB7fvTS+yZg49QBBXkD1+EfoJtsa24W+qOr1KztxvwBoN8D4XG3OuRFBaYk7vTQ NrbqLPotzVw/+Etdpm/lWnc8Ru9hcAQ= -----END CERTIFICATE-----Generated at Fri Apr 4 21:48:02 2025 by rpki-client