$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa File: 6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa (raw, json) Hash identifier: C0TzjuYUJ+/GyzJ+VdNTsd+e81OChWeUVMvqIqlGKsM= Subject key identifier: 08:69:A1:20:AE:00:64:B8:1A:36:A0:CC:5D:4F:3B:90:C8:92:FC:9F Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858487A20825AE15D4ED0F8776F80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 1239 IP address blocks: 149.143.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:82:5a:e1:5d:4e:d0:f8:77:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=fb3da6a9-74c9-44f7-a303-4a8af28cfa53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:41:63:1f:01:2d:3f:a0:e2:6c:87:1a:07:75: 0b:b2:c9:4b:b6:b0:33:c4:ab:2c:50:d4:0c:1a:74: 74:1f:12:aa:c0:6d:2d:a4:dd:ca:2c:0c:1d:5b:62: ad:89:69:4c:18:03:85:c6:d6:60:ce:cb:dc:f0:01: d2:14:17:1b:71:09:48:79:4b:39:e2:af:25:23:e8: e6:f1:17:8b:2c:60:c1:34:5f:43:e7:fd:89:be:e6: 89:9c:e3:f1:4a:67:62:0d:60:9d:cf:78:23:dc:ca: a9:ce:49:64:88:75:12:ed:36:f1:c1:f7:80:d7:9c: bd:83:ff:76:e6:dc:c4:8c:15:97:89:fc:ad:a4:16: 54:41:01:1a:2d:3f:b1:97:21:22:76:b4:db:d3:c9: 77:ad:3f:2c:db:dc:d7:49:59:23:24:60:91:ed:7b: f3:64:15:86:7c:8a:e9:05:83:f9:61:45:02:7e:d9: 38:29:06:a1:c9:33:68:c1:04:c1:aa:a0:0d:fe:52: bd:5e:23:2a:be:b8:ef:26:8a:ce:6c:ac:65:8b:20: b4:44:d4:00:7d:da:18:88:f0:c5:01:26:60:68:5e: 24:35:fe:ed:cc:4c:8a:34:41:da:d6:86:79:02:94: 4c:93:3d:00:03:af:bc:c2:91:bb:10:d0:21:38:0a: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:69:A1:20:AE:00:64:B8:1A:36:A0:CC:5D:4F:3B:90:C8:92:FC:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a2:4a:f7:03:42:cb:79:72:30:67:aa:e6:ae:0c:b2:a2:71: 9a:7d:0e:d2:1d:cb:1b:a8:57:1b:eb:fd:8b:19:54:8c:4b:73: b8:bc:79:fb:ab:72:84:99:51:5b:15:31:63:19:5b:53:5d:82: e7:1a:ec:57:b5:d4:f6:63:7d:3f:5d:fd:90:b8:38:23:f9:11: 06:57:5b:69:cb:0d:35:fc:36:46:cf:63:db:20:9b:ca:f6:f3: c3:37:45:76:12:ca:fe:c4:83:cf:d4:f7:54:ff:0b:a0:41:02: 42:64:36:29:b2:96:c8:e0:36:39:37:bf:1e:f9:de:ae:cb:47: 2a:90:0f:28:79:4d:76:35:d5:df:c0:3b:28:62:6a:be:8d:12: 6b:b4:58:01:9a:1b:fd:8a:32:02:8e:9b:7b:99:e8:34:a8:17: bb:03:e9:76:34:0e:8c:29:81:1d:ce:e0:ea:95:6d:07:a9:f0: 22:0f:52:83:01:49:c5:16:a0:66:7b:ae:31:ee:cb:cb:b8:47: 44:79:72:d7:3a:59:82:88:bb:89:88:b9:73:52:14:7e:c2:20: 4f:e3:bc:a5:93:6e:af:7d:4b:99:26:77:db:aa:31:ab:17:44: 7e:01:4b:24:9c:87:59:10:b6:fc:ef:ae:57:a0:b7:b9:0c:56: 35:72:e0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IIJa4V1O0Ph3b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk ZmIzZGE2YTktNzRjOS00NGY3LWEzMDMtNGE4YWYyOGNmYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0FjHwEtP6DibIcaB3ULsslLtrAzxKssUNQM GnR0HxKqwG0tpN3KLAwdW2KtiWlMGAOFxtZgzsvc8AHSFBcbcQlIeUs54q8lI+jm 8ReLLGDBNF9D5/2JvuaJnOPxSmdiDWCdz3gj3MqpzklkiHUS7TbxwfeA15y9g/92 5tzEjBWXifytpBZUQQEaLT+xlyEidrTb08l3rT8s29zXSVkjJGCR7XvzZBWGfIrp BYP5YUUCftk4KQahyTNowQTBqqAN/lK9XiMqvrjvJorObKxliyC0RNQAfdoYiPDF ASZgaF4kNf7tzEyKNEHa1oZ5ApRMkz0AA6+8wpG7ENAhOAr5EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhpoSCuAGS4GjagzF1PO5DIkvyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNmQ3YTE4MTgtYjAzZi0z NDRkLWJhNmYtZDJmNDhkNmQ0YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeiSvcDQst5cjBnquauDLKicZp9DtIdyxuoVxvr/YsZVIxLc7i8efur coSZUVsVMWMZW1Ndguca7Fe11PZjfT9d/ZC4OCP5EQZXW2nLDTX8NkbPY9sgm8r2 88M3RXYSyv7Eg8/U91T/C6BBAkJkNimylsjgNjk3vx753q7LRyqQDyh5TXY11d/A Oyhiar6NEmu0WAGaG/2KMgKOm3uZ6DSoF7sD6XY0DowpgR3O4OqVbQep8CIPUoMB ScUWoGZ7rjHuy8u4R0R5ctc6WYKIu4mIuXNSFH7CIE/jvKWTbq99S5kmd9uqMasX RH4BSySch1kQtvzvrlegt7kMVjVy4NA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:37 2025 by rpki-client