$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa File: 63ce919a-8c24-37d5-b6be-92e17635aec9.roa (raw, json) Hash identifier: ALT4YabpJ+hF5ZpTeyi4/fI5YuQknwX6wwrdH1fNaX0= Subject key identifier: 41:BF:D8:F2:F8:27:95:47:41:8D:67:EB:1F:97:19:B2:C6:BB:21:B3 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848A9961735BBCD060DAF167400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 7029 IP address blocks: 141.140.64.0/24 maxlen: 24 141.140.67.0/24 maxlen: 24 141.140.70.0/24 maxlen: 24 141.140.73.0/24 maxlen: 24 141.140.76.0/24 maxlen: 24 141.140.79.0/24 maxlen: 24 141.140.82.0/24 maxlen: 24 141.140.85.0/24 maxlen: 24 141.140.88.0/24 maxlen: 24 141.140.91.0/24 maxlen: 24 141.140.94.0/24 maxlen: 24 149.143.128.0/22 maxlen: 22 149.143.132.0/22 maxlen: 22 149.143.136.0/22 maxlen: 22 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:17:35:bb:cd:06:0d:af:16:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=dec676fb-91d1-480e-9eb1-2d303a55f4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:35:11:20:c4:bb:e6:c3:21:f5:89:46:9f: ea:44:85:38:8d:5c:e4:0f:09:0e:66:31:22:de:cf: 47:65:4e:d1:1e:ed:29:e8:6f:bd:15:d2:05:c6:0c: ea:97:b1:4c:8a:b4:6c:48:75:34:37:93:67:d3:69: a8:3b:46:a8:db:32:c6:ec:1a:6b:1d:52:9b:4c:7d: a2:4d:64:0b:1e:9b:f3:20:24:20:9d:d5:64:d3:c4: 0a:cf:d8:8b:ea:24:ce:80:72:48:70:be:6a:af:0c: cc:92:ac:ac:13:e0:d6:35:44:9f:38:d0:bf:75:6c: b7:ed:cd:3f:1e:85:27:9e:16:6f:38:06:a6:d8:b9: 3f:78:47:08:23:00:88:40:5e:b5:38:68:32:6f:4f: 8b:e2:52:72:0c:9e:26:01:95:b8:53:00:7e:3f:46: 7f:d5:cf:93:cd:6b:99:c7:f6:9a:19:3c:04:1b:de: 63:a8:79:04:fb:9a:84:e5:66:25:a6:60:a1:28:00: 7b:71:76:33:09:23:88:02:bf:9c:8a:f7:6d:c6:6e: d9:af:5b:61:4d:94:5f:be:0d:33:69:ca:c1:c2:52: 3b:1f:44:77:c9:25:ac:38:00:bf:55:6a:6e:9d:c7: a9:c5:5b:10:51:a0:ef:30:a3:e2:52:7f:27:25:dd: e5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BF:D8:F2:F8:27:95:47:41:8D:67:EB:1F:97:19:B2:C6:BB:21:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 141.140.64.0/24 141.140.67.0/24 141.140.70.0/24 141.140.73.0/24 141.140.76.0/24 141.140.79.0/24 141.140.82.0/24 141.140.85.0/24 141.140.88.0/24 141.140.91.0/24 141.140.94.0/24 149.143.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bb:56:6f:33:e3:9b:5f:4b:db:20:0a:ae:52:23:56:23:9e: fc:e5:3b:81:2c:4a:e4:67:17:f3:b5:14:bd:43:28:6e:5f:d0: f0:fb:b0:74:e8:55:66:09:93:a7:9f:a5:32:45:88:8d:c6:8b: e5:5c:31:2d:cd:94:ee:63:e8:4c:b2:c3:2d:42:20:ce:38:66: 34:b5:63:e1:7e:d1:20:8d:4e:18:f0:e2:0e:b4:b7:d2:e7:0c: 5f:f5:1e:93:66:df:d6:71:18:c4:2b:9a:9c:6b:a3:29:ef:48: 92:76:38:17:c7:ad:65:73:39:2f:de:f4:f3:1d:e7:01:09:a4: 90:d6:eb:60:ec:94:61:72:a6:08:52:a5:2e:a1:27:d5:fd:8e: 95:24:32:f6:07:9d:4e:c9:e7:3a:b9:4e:78:9f:b2:24:53:62: 29:a1:8c:16:1f:1e:e1:da:d0:6b:ed:4c:b2:05:46:68:48:31: b4:1b:c1:44:1f:90:02:6d:07:9c:94:ae:af:1b:54:9f:49:48: f6:00:d5:17:df:44:de:0a:48:db:b9:13:dd:95:92:15:46:fc: 82:7d:16:21:cf:cd:ce:70:67:c8:fc:e8:43:25:f5:b8:bd:a6: 0f:ae:fd:f3:ff:71:bc:db:b1:07:49:a2:2b:30:d0:55:7a:65: 15:04:49:2e -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEiplhc1u80GDa8WdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGVjNjc2ZmItOTFkMS00ODBlLTllYjEtMmQzMDNhNTVmNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRk1ESDEu+bDIfWJRp/qRIU4jVzkDwkOZjEi 3s9HZU7RHu0p6G+9FdIFxgzql7FMirRsSHU0N5Nn02moO0ao2zLG7BprHVKbTH2i TWQLHpvzICQgndVk08QKz9iL6iTOgHJIcL5qrwzMkqysE+DWNUSfONC/dWy37c0/ HoUnnhZvOAam2Lk/eEcIIwCIQF61OGgyb0+L4lJyDJ4mAZW4UwB+P0Z/1c+TzWuZ x/aaGTwEG95jqHkE+5qE5WYlpmChKAB7cXYzCSOIAr+civdtxm7Zr1thTZRfvg0z acrBwlI7H0R3ySWsOAC/VWpuncepxVsQUaDvMKPiUn8nJd3lgQIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFEG/2PL4J5VHQY1n6x+XGbLGuyGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjNjZTkxOWEtOGMyNC0z N2Q1LWI2YmUtOTJlMTc2MzVhZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAjYxAAwQA jYxDAwQAjYxGAwQAjYxJAwQAjYxMAwQAjYxPAwQAjYxSAwQAjYxVAwQAjYxYAwQA jYxbAwQAjYxeAwQElY+AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACC7Vm8z45tfS9sgCq5SI1YjnvzlO4Es SuRnF/O1FL1DKG5f0PD7sHToVWYJk6efpTJFiI3Gi+VcMS3NlO5j6Eyywy1CIM44 ZjS1Y+F+0SCNThjw4g60t9LnDF/1HpNm39ZxGMQrmpxroynvSJJ2OBfHrWVzOS/e 9PMd5wEJpJDW62DslGFypghSpS6hJ9X9jpUkMvYHnU7J5zq5TnifsiRTYimhjBYf HuHa0GvtTLIFRmhIMbQbwUQfkAJtB5yUrq8bVJ9JSPYA1RffRN4KSNu5E92VkhVG /IJ9FiHPzc5wZ8j86EMl9bi9pg+u/fP/cbzbsQdJoisw0FV6ZRUESS4= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:46 2025 by rpki-client