$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa File: 3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa (raw, json) Hash identifier: I9Tb/GXUEjfiKTgdbj4ntnxdPHm/tGgF0azt+6PQAZk= Subject key identifier: 6C:34:62:44:54:F2:15:6E:CB:C0:AF:B0:A0:57:E3:9F:4D:E8:2B:C6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B238533F67C4DA56DBC531CC0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa Signing time: Tue 09 Sep 2025 15:49:23 +0000 ROA not before: Tue 09 Sep 2025 15:49:23 +0000 ROA not after: Mon 08 Dec 2025 16:49:23 +0000 asID: 64200 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:85:33:f6:7c:4d:a5:6d:bc:53:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 9 15:49:23 2025 GMT Not After : Dec 8 16:49:23 2025 GMT Subject: CN=dd19d321-b499-4433-9918-927cbccc7ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:e5:bb:4f:5e:61:18:42:d8:79:3e:3c:85: 7f:31:20:4f:d3:d4:ef:2a:4a:f2:f5:2b:9d:c0:be: ef:5e:d6:3b:2a:c3:1b:66:57:bf:fa:4c:59:b1:19: 3c:cc:e9:9c:53:fa:4f:4f:44:88:56:5a:3e:ba:7f: 81:e3:07:00:59:d7:38:4a:c4:3e:81:c4:38:eb:9f: d4:5a:31:d5:9d:0f:46:21:1b:9b:42:94:0c:74:29: 19:22:cd:30:04:7a:d3:10:74:8d:06:e1:e5:2d:12: d2:88:35:06:a0:c1:e6:97:b0:2c:3f:2d:93:27:29: 9e:23:af:2d:70:36:d8:2f:9f:60:4b:05:cf:6c:00: b0:85:07:86:bd:9d:ca:fb:1e:b8:1a:4c:b2:94:b3: 9e:b5:a7:e4:79:50:f3:93:d6:08:c3:6c:bd:da:96: b8:48:65:c2:f0:f6:81:c2:f8:a1:cd:7f:db:42:cf: 8b:74:8d:df:c1:19:1a:d0:45:38:11:22:50:af:70: cd:3f:3e:d4:92:c7:4a:bf:6e:ef:bf:f7:ae:87:78: 07:1a:24:78:f4:c7:c2:a7:e3:a3:dd:17:a2:5c:56: 70:8e:55:dd:2d:12:9b:46:8c:06:fa:ee:9f:50:92: 5c:56:57:35:8a:b0:15:5f:05:65:9e:2b:a8:5f:70: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:34:62:44:54:F2:15:6E:CB:C0:AF:B0:A0:57:E3:9F:4D:E8:2B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3e16f2f0-a1b5-371b-a917-dbd040e9c180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:93:55:f7:66:b4:2b:25:d9:06:f8:b4:46:f6:55:a8:a5:62: 68:ae:f9:ed:b4:d7:be:45:5a:32:65:98:bc:35:ff:bb:2f:d9: 36:fd:f6:ba:31:15:3f:12:45:82:05:da:98:c3:25:f9:a2:6c: cc:21:05:bc:92:6e:da:7d:a0:85:0e:3f:13:5d:2c:54:eb:4f: 66:21:99:b5:08:82:17:26:2b:99:37:ff:3c:1d:fb:fd:a5:dd: 34:f1:73:1f:65:d6:6f:83:a6:a3:31:e5:5f:af:2e:c1:25:65: e5:b7:87:e7:fa:b4:b4:6c:38:21:a7:f4:7b:d7:fc:c8:1f:48: 34:a3:45:49:87:5b:13:51:af:36:61:68:c1:54:86:06:8b:6c: 43:66:11:c7:3e:78:34:67:34:02:e8:69:d5:7c:d4:ca:fc:1e: 55:af:c0:20:43:d5:a8:c7:52:af:a5:8a:1a:0b:bc:02:b3:77: 9e:34:18:fc:c3:b2:01:5e:35:df:ec:d1:b7:2d:c5:bf:36:18: 1d:b9:75:9c:00:45:47:4a:d0:37:c3:f5:8c:c7:c5:a8:c6:5d: 8e:9a:7a:e8:03:85:e2:5b:33:91:09:d5:78:81:d5:bf:7d:ab: c8:9a:1e:3a:47:35:37:b6:7b:a2:ee:1b:0b:35:f0:87:64:cd: 34:67:eb:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjhTP2fE2lbbxTHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkwOTE1NDkyM1oXDTI1MTIwODE2NDkyM1owLzEtMCsGA1UEAxMk ZGQxOWQzMjEtYjQ5OS00NDMzLTk5MTgtOTI3Y2JjY2M3ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eDlu09eYRhC2Hk+PIV/MSBP09TvKkry9Sud wL7vXtY7KsMbZle/+kxZsRk8zOmcU/pPT0SIVlo+un+B4wcAWdc4SsQ+gcQ465/U WjHVnQ9GIRubQpQMdCkZIs0wBHrTEHSNBuHlLRLSiDUGoMHml7AsPy2TJymeI68t cDbYL59gSwXPbACwhQeGvZ3K+x64GkyylLOetafkeVDzk9YIw2y92pa4SGXC8PaB wvihzX/bQs+LdI3fwRka0EU4ESJQr3DNPz7UksdKv27vv/euh3gHGiR49MfCp+Oj 3ReiXFZwjlXdLRKbRowG+u6fUJJcVlc1irAVXwVlniuoX3DpSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw0YkRU8hVuy8CvsKBX459N6CvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvM2UxNmYyZjAtYTFiNS0z NzFiLWE5MTctZGJkMDQwZTljMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOTVfdmtCsl2Qb4tEb2VailYmiu+e20175FWjJlmLw1/7sv2Tb99rox FT8SRYIF2pjDJfmibMwhBbySbtp9oIUOPxNdLFTrT2YhmbUIghcmK5k3/zwd+/2l 3TTxcx9l1m+DpqMx5V+vLsElZeW3h+f6tLRsOCGn9HvX/MgfSDSjRUmHWxNRrzZh aMFUhgaLbENmEcc+eDRnNALoadV81Mr8HlWvwCBD1ajHUq+lihoLvAKzd540GPzD sgFeNd/s0bctxb82GB25dZwARUdK0DfD9YzHxajGXY6aeugDheJbM5EJ1XiB1b99 q8iaHjpHNTe2e6LuGws18IdkzTRn6wk= -----END CERTIFICATE-----Generated at Tue Sep 16 18:48:45 2025 by rpki-client