$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa File: 4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa (raw, json) Hash identifier: NtCdMIgdMbH7ktQNqd5xsfinQLsicBF4ByKVAk7THkg= Subject key identifier: E3:99:DC:73:27:B9:DE:95:F8:29:D9:DE:B1:0C:94:E4:9C:05:4A:2A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858487A207DBC81FE28C311FFAB44 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 1239 IP address blocks: 149.143.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:7d:bc:81:fe:28:c3:11:ff:ab:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=a24117c0-cd12-415b-b78d-ca3022b73b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:6f:80:3e:64:fd:55:63:13:1c:a1:c5:5b: fc:aa:eb:0b:84:c9:3c:35:b6:db:fc:8a:df:de:6d: 2f:36:83:09:7e:d7:8f:93:cf:72:e4:8e:3f:fc:dd: d1:b6:22:bb:36:ec:c8:0e:51:25:13:28:23:94:68: 5d:cd:a1:c1:53:4e:59:fc:e5:d8:1c:30:57:cd:78: 6d:f1:61:94:92:64:b9:8e:db:fd:bc:11:14:a8:99: a7:78:08:38:cb:26:2d:2c:db:75:87:47:a3:eb:c2: 62:7b:3a:a2:6c:06:0a:50:d6:ce:51:cc:b4:31:6d: 1e:9a:14:2d:16:44:fe:2c:7b:70:55:eb:54:3e:4f: 8a:4d:17:63:e0:a9:b0:7b:96:b2:3b:7f:be:89:a8: c0:6e:42:51:72:fd:f4:b9:a5:97:33:a4:52:b0:c2: f0:2f:c5:9b:2b:36:fa:c6:02:be:5e:8e:5e:67:07: c3:3a:00:98:78:82:b1:cc:8a:21:a2:c7:7f:99:13: 84:9a:aa:1d:cb:59:02:58:55:09:c0:fa:82:3d:ec: 2c:7a:2b:a5:7f:7b:fe:17:98:0c:65:37:58:d8:9e: 31:ed:cf:3b:42:58:1d:c0:9c:1d:fe:16:a8:d2:5f: bf:65:eb:c4:7b:e0:2a:b4:39:aa:34:40:dc:64:08: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:99:DC:73:27:B9:DE:95:F8:29:D9:DE:B1:0C:94:E4:9C:05:4A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:96:7d:fa:52:4c:88:1f:14:09:a3:58:21:0b:c2:20:26:c1: 0d:ce:f6:9b:ab:00:f5:fc:55:c8:05:4e:28:3c:5c:c8:5f:2d: 02:fb:55:3b:0e:56:ee:47:6d:60:f3:ec:9e:b7:d0:c8:aa:ae: 7b:63:84:ff:c3:79:ce:3d:fa:ef:5b:31:35:ef:64:e7:66:7a: 7f:70:fa:e0:36:ed:37:f7:36:0c:3b:57:80:46:ca:c2:c3:25: 10:42:14:72:14:43:7a:30:12:cb:d8:32:ce:2f:48:5d:99:82: d3:f6:e4:10:e7:fd:72:df:13:8c:67:57:df:0a:3f:76:f1:73: d2:59:4f:c3:87:19:fc:5d:15:39:3b:0a:f2:a5:63:92:08:d0: a1:0c:8c:99:d8:4a:5e:7c:04:91:f3:9d:ed:c1:92:8f:eb:d0: 22:83:d2:e7:15:2f:36:e4:6d:89:f5:5b:6b:c4:94:b0:e7:a4: 88:0e:0e:da:9f:e3:67:1b:57:a1:b8:22:c6:13:ed:eb:3f:e9: 60:fa:d5:1f:a4:4b:b9:7f:09:ef:78:36:aa:ab:d9:6e:a9:74: 79:26:6c:23:be:22:d3:c8:04:0a:cb:b8:6a:42:23:25:87:31: f5:c1:a3:d6:a8:35:d1:cd:6c:aa:14:c8:1b:8e:b9:7f:e9:58: 98:af:00:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IH28gf4owxH/q0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk YTI0MTE3YzAtY2QxMi00MTViLWI3OGQtY2EzMDIyYjczYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD1vgD5k/VVjExyhxVv8qusLhMk8Nbbb/Irf 3m0vNoMJftePk89y5I4//N3RtiK7NuzIDlElEygjlGhdzaHBU05Z/OXYHDBXzXht 8WGUkmS5jtv9vBEUqJmneAg4yyYtLNt1h0ej68JiezqibAYKUNbOUcy0MW0emhQt FkT+LHtwVetUPk+KTRdj4Kmwe5ayO3++iajAbkJRcv30uaWXM6RSsMLwL8WbKzb6 xgK+Xo5eZwfDOgCYeIKxzIohosd/mROEmqody1kCWFUJwPqCPewseiulf3v+F5gM ZTdY2J4x7c87QlgdwJwd/hao0l+/ZevEe+AqtDmqNEDcZAi5swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOZ3HMnud6V+CnZ3rEMlOScBUoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGJkZmE1ZjYtY2Q3My0z YmJiLWIxMGEtYzE1Y2Q0NGZkNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSWffpSTIgfFAmjWCELwiAmwQ3O9purAPX8VcgFTig8XMhfLQL7VTsO Vu5HbWDz7J630MiqrntjhP/Dec49+u9bMTXvZOdmen9w+uA27Tf3Ngw7V4BGysLD JRBCFHIUQ3owEsvYMs4vSF2ZgtP25BDn/XLfE4xnV98KP3bxc9JZT8OHGfxdFTk7 CvKlY5II0KEMjJnYSl58BJHzne3Bko/r0CKD0ucVLzbkbYn1W2vElLDnpIgODtqf 42cbV6G4IsYT7es/6WD61R+kS7l/Ce94Nqqr2W6pdHkmbCO+ItPIBArLuGpCIyWH MfXBo9aoNdHNbKoUyBuOuX/pWJivAKo= -----END CERTIFICATE-----Generated at Fri Mar 14 10:55:35 2025 by rpki-client