$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa File: 96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa (raw, json) Hash identifier: aG7lxv8ZKY30VWLbIDwUE1kwjTiEHfJbPClb6qlPenY= Subject key identifier: F9:E2:87:1F:58:1C:00:D0:A6:2C:3D:F4:00:EC:EB:ED:EF:7F:6A:FF Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584965E97A9AE781C6236E275F80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 396356 IP address blocks: 149.143.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7a:9a:e7:81:c6:23:6e:27:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=9e74ff87-a55d-4a40-9f50-4ab680cb6296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:ea:a9:e2:31:6a:92:86:85:5b:2e:b1:c5: ae:69:fa:0f:7e:5d:1c:56:bf:ed:19:cc:5c:fa:2b: 97:18:a9:0f:48:10:c4:73:e8:c8:14:64:ef:17:04: 4b:32:10:18:de:12:90:03:92:ee:a2:f0:7b:b6:ce: 6d:06:0f:24:8b:d6:dc:51:e7:ef:90:1d:d3:98:93: 3e:ef:50:9b:78:76:49:1e:35:20:2f:ef:64:bc:21: 13:86:0a:c9:18:b1:e1:b8:bb:92:67:b3:b3:6d:fd: 6f:31:c1:bd:6e:63:b4:3c:35:0a:d0:23:d9:85:aa: e0:87:8f:31:55:8c:b8:d9:85:8c:22:17:29:12:54: 8e:0a:91:d8:ee:51:a9:44:db:48:76:e0:80:c1:ec: df:94:b7:e9:4f:af:80:62:42:7c:f4:82:1c:82:e8: 64:89:68:7d:fe:1a:98:2a:b1:c3:6b:c9:61:65:f2: 5d:08:e2:84:c9:8d:36:f9:ff:a3:62:e2:36:c2:25: 5d:e4:35:c5:38:33:ab:ee:a4:62:25:52:bf:60:c6: eb:38:04:98:8f:3b:d9:bd:e8:23:98:29:98:79:11: 2c:5a:5f:03:4b:4c:5a:b9:9b:b5:ad:66:f4:7f:28: 42:1a:89:5e:92:c6:ba:a3:bd:da:2a:ed:b1:12:e9: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E2:87:1F:58:1C:00:D0:A6:2C:3D:F4:00:EC:EB:ED:EF:7F:6A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4f:c9:50:ba:f3:c7:0b:a1:03:39:54:a1:29:6b:ab:62:cb: 58:58:c2:d8:b5:0c:e2:8f:d7:63:4b:0c:56:79:7d:b4:41:1d: 89:20:e3:a6:5b:13:5b:33:b0:32:79:be:53:a7:c9:93:31:f5: 5d:fc:3f:4f:ab:69:6d:90:5e:22:ef:a7:0b:1e:71:bf:e2:d5: 49:d4:ad:61:05:21:10:8d:68:55:be:2a:44:4b:7e:09:5e:6f: 34:dc:49:70:84:10:c6:99:b4:72:45:a5:40:ba:ed:f2:f4:92: 12:5f:25:75:2b:b5:75:f3:5d:fb:cd:3f:8d:7c:27:0f:b0:d2: 51:fc:2f:26:e1:1c:06:94:47:68:26:de:bd:be:64:00:12:e2: ee:6e:6e:6d:1f:8f:e3:96:3e:cb:5f:14:2a:ab:c5:18:40:b3: 9f:71:09:83:a4:ad:0e:63:30:1f:53:d7:03:59:36:a4:51:e8: 79:0b:e4:8c:56:d4:54:26:5c:3a:17:90:4e:ac:1c:4a:70:1c: d6:ff:79:2b:f4:aa:54:40:f2:40:b0:04:56:9e:c0:d0:ed:d2: 5f:95:36:23:a4:01:16:0e:4f:93:59:5d:12:17:6c:e5:71:b8: 1e:b3:c2:75:9c:1e:a8:50:9d:e1:7a:94:9b:47:48:b8:3e:31: 12:30:f3:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6Xqa54HGI24nX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk OWU3NGZmODctYTU1ZC00YTQwLTlmNTAtNGFiNjgwY2I2Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGHqqeIxapKGhVsuscWuafoPfl0cVr/tGcxc +iuXGKkPSBDEc+jIFGTvFwRLMhAY3hKQA5LuovB7ts5tBg8ki9bcUefvkB3TmJM+ 71CbeHZJHjUgL+9kvCEThgrJGLHhuLuSZ7Ozbf1vMcG9bmO0PDUK0CPZhargh48x VYy42YWMIhcpElSOCpHY7lGpRNtIduCAwezflLfpT6+AYkJ89IIcguhkiWh9/hqY KrHDa8lhZfJdCOKEyY02+f+jYuI2wiVd5DXFODOr7qRiJVK/YMbrOASYjzvZvegj mCmYeREsWl8DS0xauZu1rWb0fyhCGoleksa6o73aKu2xEulfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnihx9YHADQpiw99ADs6+3vf2r/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTZmMmUzZmEtODFjNS0z NWExLTllZTUtYzM4YmVjOTg5NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJPyVC688cLoQM5VKEpa6tiy1hYwti1DOKP12NLDFZ5fbRBHYkg46Zb E1szsDJ5vlOnyZMx9V38P0+raW2QXiLvpwsecb/i1UnUrWEFIRCNaFW+KkRLfgle bzTcSXCEEMaZtHJFpUC67fL0khJfJXUrtXXzXfvNP418Jw+w0lH8LybhHAaUR2gm 3r2+ZAAS4u5ubm0fj+OWPstfFCqrxRhAs59xCYOkrQ5jMB9T1wNZNqRR6HkL5IxW 1FQmXDoXkE6sHEpwHNb/eSv0qlRA8kCwBFaewNDt0l+VNiOkARYOT5NZXRIXbOVx uB6zwnWcHqhQneF6lJtHSLg+MRIw84Y= -----END CERTIFICATE-----Generated at Mon Apr 7 11:50:11 2025 by rpki-client