$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa File: 73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa (raw, json) Hash identifier: RAulCsiFbOYOydKVGb9S6xFhUThpQhnrDrQxxip2DaY= Subject key identifier: 0E:6B:65:C5:D3:A0:DF:47:5B:AA:5C:C4:85:AD:80:61:B2:7C:FD:60 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849648440035FA74B4FB1902100 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 7018 IP address blocks: 149.143.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:40:03:5f:a7:4b:4f:b1:90:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=ba801803-f887-4544-b15f-1a396849d162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:3b:c4:24:91:3c:da:cf:c0:d4:43:07:eb: ee:69:d5:27:fd:64:b6:65:61:81:d6:e6:2a:83:ed: 08:7a:75:bf:30:0d:88:40:b6:ff:be:ca:5b:8a:35: aa:ed:3a:90:b4:71:fd:a3:7b:8f:0f:71:c7:f7:83: df:35:53:f2:3d:b7:97:59:52:d5:8b:7c:00:ca:53: 57:cf:79:ee:3c:7c:0d:bf:06:24:38:45:22:5f:2e: a4:11:bb:1a:42:f7:11:74:ed:e8:99:09:c1:3b:66: 41:ac:3b:f9:f4:17:ec:d0:66:b3:23:14:4f:61:c8: 09:38:b9:a4:a3:e9:2c:7d:20:9d:f6:8a:bb:bf:c7: 99:f4:01:63:71:14:fc:01:1e:c0:ef:b0:e8:d8:a2: 9a:59:05:ea:ba:84:9b:aa:18:40:0e:22:81:fd:d4: bc:99:d6:a0:30:79:0b:19:c4:c4:75:36:d8:86:31: cf:b5:77:2f:84:b6:d5:69:b8:d4:85:e0:8c:15:ad: 8f:fa:bf:51:01:d0:84:9b:0b:89:fa:5a:25:35:1d: 24:8f:dc:9b:b8:e0:e9:c2:16:7c:66:b4:b4:cf:80: 77:99:cf:b0:80:a7:a4:a8:bf:a2:c9:e9:fd:45:38: f7:89:3a:d1:57:a7:68:25:4c:fc:3d:2b:df:8d:1f: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6B:65:C5:D3:A0:DF:47:5B:AA:5C:C4:85:AD:80:61:B2:7C:FD:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:0b:fd:b9:a7:0a:1d:1e:ca:ef:e0:0e:52:b5:6f:64:9f:4d: ce:9a:84:f2:e0:d9:27:64:1a:ef:b6:31:55:b5:b7:77:d7:e5: 5c:85:e1:76:81:fd:f6:e8:21:ef:a6:8d:7e:5e:93:3d:0a:7d: 21:a1:34:c0:69:be:d1:55:01:d9:d0:d3:49:9e:0e:05:96:38: a2:28:01:7a:29:24:d2:7d:d1:b8:02:b4:81:02:06:64:8d:f4: df:19:4a:f9:19:17:d3:1a:a3:4b:5f:4a:78:00:47:a3:f0:65: 3b:e2:66:e4:74:91:3d:67:54:ed:4d:91:6c:a8:a8:00:c6:96: 0e:a8:83:6f:57:e2:72:4e:32:f7:94:db:c6:bd:b7:54:80:ef: 85:46:b1:a6:83:4b:83:34:6e:40:45:61:75:21:59:66:a6:81: c1:5f:b2:36:0a:af:b3:0b:3a:ba:7c:0f:be:5a:72:70:e1:70: 70:2c:c1:5c:51:c9:a5:95:15:f9:2b:17:95:18:ed:d4:5e:29: 5d:2d:0f:26:be:48:13:86:b5:af:f8:64:a2:fe:82:5c:1b:a9: 96:b6:0b:2c:a6:71:15:63:76:5c:f3:fa:89:cc:cd:a3:84:eb: 96:06:a7:5a:cf:63:7b:15:67:ae:fc:e2:16:47:bd:1a:af:3e: 88:4b:13:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEADX6dLT7GQIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk YmE4MDE4MDMtZjg4Ny00NTQ0LWIxNWYtMWEzOTY4NDlkMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEw7xCSRPNrPwNRDB+vuadUn/WS2ZWGB1uYq g+0IenW/MA2IQLb/vspbijWq7TqQtHH9o3uPD3HH94PfNVPyPbeXWVLVi3wAylNX z3nuPHwNvwYkOEUiXy6kEbsaQvcRdO3omQnBO2ZBrDv59Bfs0GazIxRPYcgJOLmk o+ksfSCd9oq7v8eZ9AFjcRT8AR7A77Do2KKaWQXquoSbqhhADiKB/dS8mdagMHkL GcTEdTbYhjHPtXcvhLbVabjUheCMFa2P+r9RAdCEmwuJ+lolNR0kj9ybuODpwhZ8 ZrS0z4B3mc+wgKekqL+iyen9RTj3iTrRV6doJUz8PSvfjR+3PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5rZcXToN9HW6pcxIWtgGGyfP1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzNhMmM4ZGEtN2MyYi0z ZmEwLThjNDQtMzE0NmI2YjlkODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsL/bmnCh0eyu/gDlK1b2SfTc6ahPLg2SdkGu+2MVW1t3fX5VyF4XaB /fboIe+mjX5ekz0KfSGhNMBpvtFVAdnQ00meDgWWOKIoAXopJNJ90bgCtIECBmSN 9N8ZSvkZF9Mao0tfSngAR6PwZTviZuR0kT1nVO1NkWyoqADGlg6og29X4nJOMveU 28a9t1SA74VGsaaDS4M0bkBFYXUhWWamgcFfsjYKr7MLOrp8D75acnDhcHAswVxR yaWVFfkrF5UY7dReKV0tDya+SBOGta/4ZKL+glwbqZa2CyymcRVjdlzz+onMzaOE 65YGp1rPY3sVZ6784hZHvRqvPohLE78= -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:41 2025 by rpki-client