$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa File: 4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa (raw, json) Hash identifier: VAlJ4G3VidY6aDMIidsu0FfB30aUwalhsmZ7+7d9LJY= Subject key identifier: 74:E5:1E:36:84:07:15:F6:A7:A4:F0:FA:88:E8:61:08:73:1C:3D:B9 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B1AD17722CA46F7969EA92160 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 1239 IP address blocks: 149.143.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:77:22:ca:46:f7:96:9e:a9:21:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b2aa474f-c7e2-40c4-9986-2428abc6d655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:10:dc:18:c8:16:7b:fe:35:f4:1c:de:e2:bc: 61:2b:fc:c5:ba:85:7a:4b:90:d7:62:8b:95:ad:6a: 3e:5b:ce:e5:bf:79:dd:e8:62:1f:28:88:7f:e3:8b: e5:60:31:c0:86:63:fe:77:49:4c:40:e1:d7:bb:ff: d9:20:c8:9f:79:70:a6:e7:4c:46:34:e7:5a:87:50: 18:cb:6e:da:ed:07:1d:f4:89:e2:42:ab:3c:96:70: da:12:91:68:7c:d7:8a:38:4c:0a:2d:f2:64:c7:4a: 05:c4:e7:7a:6b:92:ad:87:6b:f6:87:dc:32:68:27: 6b:e0:d7:4a:39:a9:b0:c4:fa:65:28:d2:8a:ac:e1: 64:dd:2d:97:3c:87:ac:24:36:56:24:99:f7:d7:06: 1f:3b:c3:5d:c8:42:8a:c4:45:8f:b2:b9:55:7b:fc: 32:3b:c6:a3:22:1a:0a:b0:b1:a2:64:99:0f:d6:c5: cb:9f:de:22:20:34:73:5f:f9:2d:96:a5:1d:b7:29: d2:2e:03:dd:f1:33:a0:1b:f4:ae:9a:9b:c0:8c:16: 7e:08:a7:98:20:bf:d6:02:59:82:36:b7:5c:ed:0a: fe:f9:cc:dc:b6:ab:25:b0:b4:7f:71:0f:a3:f1:ec: ac:3e:f6:84:45:32:a8:c8:5f:7e:a4:30:22:2e:e5: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:1E:36:84:07:15:F6:A7:A4:F0:FA:88:E8:61:08:73:1C:3D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ae:84:f1:91:e6:96:fa:72:e3:56:a5:bd:0a:41:2f:64:bc: 8b:d2:01:bb:85:64:8e:c8:b4:56:96:17:66:b4:78:88:65:cb: 05:a3:4f:fd:a4:6d:ec:af:4e:52:c4:d1:c7:cd:ea:d8:31:14: be:d0:3d:e7:54:07:04:6a:ce:a2:61:b2:81:31:92:d6:9b:a5: a9:af:97:cc:28:f9:dc:91:a1:4a:69:81:73:05:72:1e:cd:9b: 78:0d:48:3b:19:a4:c7:c9:cb:1c:14:0e:1e:1a:3a:e4:27:b5: af:2c:ef:db:db:2f:c4:e8:62:f3:ab:65:0f:02:7b:a7:37:85: 81:7b:b4:37:c9:a1:96:0d:4b:df:97:ee:9d:67:d3:80:a7:a2: 58:e3:d4:70:1e:04:a6:a4:23:95:bd:3e:d4:72:c9:cc:a5:65: c3:88:d1:ee:1b:f0:8c:56:a4:f7:2c:36:71:b0:ba:99:71:03: 8a:2c:be:31:d9:ba:30:b5:d8:4b:e7:ca:69:93:1f:3d:ca:26: bd:6d:5a:db:0d:3e:26:04:10:a3:fc:52:c7:66:ea:08:c5:99: 4d:2a:5d:a4:9f:03:76:3e:2d:bb:ba:3a:16:3d:3c:e8:c7:d1: 87:23:8e:5d:aa:24:9f:06:6d:ef:2a:58:e6:82:55:8a:11:63: 91:d8:2a:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Xciykb3lp6pIWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjJhYTQ3NGYtYzdlMi00MGM0LTk5ODYtMjQyOGFiYzZkNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xDcGMgWe/419Bze4rxhK/zFuoV6S5DXYouV rWo+W87lv3nd6GIfKIh/44vlYDHAhmP+d0lMQOHXu//ZIMifeXCm50xGNOdah1AY y27a7Qcd9IniQqs8lnDaEpFofNeKOEwKLfJkx0oFxOd6a5Kth2v2h9wyaCdr4NdK OamwxPplKNKKrOFk3S2XPIesJDZWJJn31wYfO8NdyEKKxEWPsrlVe/wyO8ajIhoK sLGiZJkP1sXLn94iIDRzX/ktlqUdtynSLgPd8TOgG/SumpvAjBZ+CKeYIL/WAlmC Nrdc7Qr++czctqslsLR/cQ+j8eysPvaERTKoyF9+pDAiLuXDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTlHjaEBxX2p6Tw+ojoYQhzHD25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGJkZmE1ZjYtY2Q3My0z YmJiLWIxMGEtYzE1Y2Q0NGZkNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSuhPGR5pb6cuNWpb0KQS9kvIvSAbuFZI7ItFaWF2a0eIhlywWjT/2k beyvTlLE0cfN6tgxFL7QPedUBwRqzqJhsoExktabpamvl8wo+dyRoUppgXMFch7N m3gNSDsZpMfJyxwUDh4aOuQnta8s79vbL8ToYvOrZQ8Ce6c3hYF7tDfJoZYNS9+X 7p1n04Cnoljj1HAeBKakI5W9PtRyycylZcOI0e4b8IxWpPcsNnGwuplxA4osvjHZ ujC12EvnymmTHz3KJr1tWtsNPiYEEKP8Usdm6gjFmU0qXaSfA3Y+Lbu6OhY9POjH 0Ycjjl2qJJ8Gbe8qWOaCVYoRY5HYKoE= -----END CERTIFICATE-----Generated at Tue Sep 16 11:19:55 2025 by rpki-client