$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa File: 4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa (raw, json) Hash identifier: /4YwDLQeS5o5cAST7p/EASjrhAoNYdSl4Q9bwVrde9Q= Subject key identifier: E9:58:0C:02:0E:43:97:E6:B0:24:70:89:B1:9F:B2:38:5C:EA:52:43 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858495ABEBBA4DE16F149FF3F3DE0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 1239 IP address blocks: 149.143.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:bb:a4:de:16:f1:49:ff:3f:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=85b09179-aa13-430f-92fe-09a4f97858b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:2a:9e:b5:01:f1:35:07:d9:de:00:fe:6a: c9:18:a1:a7:40:9c:2f:61:76:01:f4:8c:a8:34:71: 2f:07:54:61:c0:22:0c:a5:29:74:79:2c:da:0b:cf: 48:b6:fa:58:20:3c:d7:52:2b:dc:40:5e:c2:93:45: b5:71:82:09:0e:f4:33:1c:42:b4:b8:a7:72:3e:e4: 68:63:e1:e8:5e:bd:99:ba:fa:f1:87:7a:95:81:95: f7:3c:34:53:aa:87:c9:8f:81:ab:34:b5:c6:a8:2e: 6a:d6:64:21:11:e6:e3:6c:fa:51:ff:c6:a2:fa:0d: 64:28:05:b3:93:06:29:15:99:70:8e:3b:a2:88:2c: 62:e2:ce:76:f8:ae:2a:17:c9:29:81:54:d4:c2:b0: a5:6a:60:c1:d8:8c:ff:b0:d8:41:94:49:01:e7:fb: 41:98:ad:40:4b:b3:c8:2d:97:f9:fd:c9:7c:d0:2e: a5:38:98:05:1d:ea:2f:b5:8a:1d:00:23:d2:32:04: 59:83:24:12:27:b1:a4:eb:8e:cc:9d:48:45:c2:e5: a7:e7:32:0e:85:6e:ad:27:e4:c7:8b:3d:ea:02:d1: fd:b3:8c:eb:30:ac:13:b8:fe:90:24:80:e0:ca:5d: 12:de:e4:5a:39:17:46:90:1b:a8:fc:c2:43:a6:c6: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:58:0C:02:0E:43:97:E6:B0:24:70:89:B1:9F:B2:38:5C:EA:52:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:be:95:fa:44:58:14:61:42:b0:a0:cf:17:6e:ff:42:7c:50: 45:71:f7:9f:f0:35:7f:ad:ea:8a:76:ec:1c:4b:bd:b8:0c:84: aa:ad:8b:78:83:0b:1b:a9:b5:b5:39:b7:24:82:ae:a9:6f:23: c5:e7:38:e3:dc:ac:e5:c4:10:72:83:c2:fc:b8:6e:35:9d:97: 37:c3:a1:39:b4:df:a0:25:b0:ef:8a:fc:43:5a:06:92:72:6f: 58:1c:50:a0:a6:2a:18:af:29:bd:51:f5:f5:51:a0:34:e4:94: ea:84:b7:7c:ee:cd:1c:94:95:66:39:cd:af:d2:15:c2:01:60: 76:b1:21:f4:b4:f7:af:96:95:76:0d:86:8b:90:ee:c0:2a:94: 56:5b:d8:4a:b9:ea:84:7f:eb:5c:a0:11:e9:b0:bf:da:1e:00: e4:39:73:e9:09:89:cd:b0:34:bd:7f:83:9d:00:56:26:68:9a: 5c:38:1c:10:30:d8:85:08:67:19:19:1a:fe:fb:a4:03:94:18: f0:7e:fa:2f:eb:ea:38:6c:8a:50:dc:a2:de:1d:30:31:5a:12: 2d:00:bf:de:af:37:f8:ca:8b:a8:10:0e:46:6c:ab:e8:69:ca: df:b7:36:f9:e8:f3:3a:82:19:8c:4c:bb:b3:45:bc:dc:d4:78: 37:f1:28:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavruk3hbxSf8/PeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ODViMDkxNzktYWExMy00MzBmLTkyZmUtMDlhNGY5Nzg1OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV8qnrUB8TUH2d4A/mrJGKGnQJwvYXYB9Iyo NHEvB1RhwCIMpSl0eSzaC89ItvpYIDzXUivcQF7Ck0W1cYIJDvQzHEK0uKdyPuRo Y+HoXr2Zuvrxh3qVgZX3PDRTqofJj4GrNLXGqC5q1mQhEebjbPpR/8ai+g1kKAWz kwYpFZlwjjuiiCxi4s52+K4qF8kpgVTUwrClamDB2Iz/sNhBlEkB5/tBmK1AS7PI LZf5/cl80C6lOJgFHeovtYodACPSMgRZgyQSJ7Gk647MnUhFwuWn5zIOhW6tJ+TH iz3qAtH9s4zrMKwTuP6QJIDgyl0S3uRaORdGkBuo/MJDpsYUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlYDAIOQ5fmsCRwibGfsjhc6lJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGJkZmE1ZjYtY2Q3My0z YmJiLWIxMGEtYzE1Y2Q0NGZkNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO+lfpEWBRhQrCgzxdu/0J8UEVx95/wNX+t6op27BxLvbgMhKqti3iD CxuptbU5tySCrqlvI8XnOOPcrOXEEHKDwvy4bjWdlzfDoTm036AlsO+K/ENaBpJy b1gcUKCmKhivKb1R9fVRoDTklOqEt3zuzRyUlWY5za/SFcIBYHaxIfS096+WlXYN houQ7sAqlFZb2Eq56oR/61ygEemwv9oeAOQ5c+kJic2wNL1/g50AViZomlw4HBAw 2IUIZxkZGv77pAOUGPB++i/r6jhsilDcot4dMDFaEi0Av96vN/jKi6gQDkZsq+hp yt+3Nvno8zqCGYxMu7NFvNzUeDfxKM4= -----END CERTIFICATE-----Generated at Sat Apr 5 08:42:37 2025 by rpki-client