$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa File: 96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa (raw, json) Hash identifier: z/tdhoRFqn5PgT6y8a8NyGsiWY95e7J992NV1tJGor4= Subject key identifier: EC:3E:1D:CB:F3:01:06:02:C8:95:DD:33:75:28:22:42:67:6F:95:BC Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584886B0807814127DA7983EDC00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 396356 IP address blocks: 149.143.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:80:78:14:12:7d:a7:98:3e:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=ccba3e0b-78c5-43ff-8ebb-8840f7461377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:07:b8:24:28:2a:e3:fa:4d:36:51:69:fb: 3f:ba:b1:d1:48:14:ca:d4:2a:4d:19:c2:3d:3d:0c: a8:c1:04:d7:e0:4e:fb:29:df:4f:e0:04:d8:74:8f: f4:ea:76:e0:57:c9:b7:16:30:ca:0c:f9:48:30:c7: 32:96:4c:77:1c:ac:f2:ee:18:58:b1:07:80:7f:af: cb:33:5f:0f:de:b0:7a:d1:f3:be:d7:45:07:02:64: 44:40:75:13:8b:7f:23:02:7b:39:a0:42:4a:01:6f: 97:ca:2f:0e:5a:6b:ce:7a:81:c4:ff:02:d9:f9:48: fa:06:c6:11:b7:ca:31:6d:2f:a2:c8:ea:db:74:32: c7:41:56:c2:32:61:46:3a:9e:1f:99:5f:ed:0a:3a: 06:2a:1e:c5:7f:81:ff:ab:84:cc:ac:3f:7f:c4:88: b3:38:02:be:8d:bb:59:26:d2:1c:9e:f8:5e:a7:01: 54:63:cd:40:b9:14:41:b8:7f:45:54:1d:aa:69:f3: 30:b2:7a:d7:db:c5:f3:64:f2:b5:86:59:9c:9c:81: a9:bb:d2:d4:4c:ad:53:6e:c2:f7:6c:aa:b9:29:27: 03:3e:df:fe:63:2f:5d:9b:1d:72:0d:dc:6b:e0:26: ac:c9:5a:3a:fb:f6:c7:17:91:a8:2a:62:84:3a:38: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3E:1D:CB:F3:01:06:02:C8:95:DD:33:75:28:22:42:67:6F:95:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/96f2e3fa-81c5-35a1-9ee5-c38bec989498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4d:c1:a6:bc:29:e5:dc:a9:dc:ec:80:f1:73:70:71:f2:dc: 5e:7a:ef:c5:27:5c:64:dd:7b:8d:d0:3c:6c:3f:e2:80:83:64: 5b:e4:54:41:79:b0:e7:92:ea:01:24:76:2d:55:7c:c7:8f:da: bb:0c:90:80:03:32:a5:be:63:12:37:c9:c2:51:02:22:32:72: 86:5c:78:60:b8:37:be:31:9a:db:9a:bd:67:f0:40:49:c0:03: e7:19:4d:60:9f:5d:0c:4e:ce:76:ab:ee:bf:00:4a:4b:a6:79: 46:c9:9b:db:0a:58:35:de:0b:4b:f5:38:f4:8e:9d:a1:ec:ad: 3b:71:3d:b7:96:b8:6a:85:4c:fd:fb:e6:4f:0e:78:50:83:e4: 40:cc:d4:36:1c:4f:ef:52:10:99:4a:e9:f4:34:a5:00:a5:80: 9d:82:d6:ed:ce:79:52:98:70:3b:28:31:c6:be:6d:8b:97:a9: 1b:ef:f0:78:e2:95:75:04:c7:d4:49:63:d8:b8:17:1b:89:b8: d8:87:ad:a6:b6:d2:94:22:a7:6c:e9:1c:23:f9:1f:4d:65:ce: bf:86:bf:9b:3a:7e:48:f9:b2:e0:a1:6d:15:75:b4:fb:ad:c2: 64:d2:72:ff:31:c7:d4:0f:85:bf:9d:b9:a8:68:23:2e:9f:62: 87:0d:b1:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsIB4FBJ9p5g+3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk Y2NiYTNlMGItNzhjNS00M2ZmLThlYmItODg0MGY3NDYxMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsoHuCQoKuP6TTZRafs/urHRSBTK1CpNGcI9 PQyowQTX4E77Kd9P4ATYdI/06nbgV8m3FjDKDPlIMMcylkx3HKzy7hhYsQeAf6/L M18P3rB60fO+10UHAmREQHUTi38jAns5oEJKAW+Xyi8OWmvOeoHE/wLZ+Uj6BsYR t8oxbS+iyOrbdDLHQVbCMmFGOp4fmV/tCjoGKh7Ff4H/q4TMrD9/xIizOAK+jbtZ JtIcnvhepwFUY81AuRRBuH9FVB2qafMwsnrX28XzZPK1hlmcnIGpu9LUTK1TbsL3 bKq5KScDPt/+Yy9dmx1yDdxr4CasyVo6+/bHF5GoKmKEOjjeXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw+HcvzAQYCyJXdM3UoIkJnb5W8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvOTZmMmUzZmEtODFjNS0z NWExLTllZTUtYzM4YmVjOTg5NDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJNwaa8KeXcqdzsgPFzcHHy3F5678UnXGTde43QPGw/4oCDZFvkVEF5 sOeS6gEkdi1VfMeP2rsMkIADMqW+YxI3ycJRAiIycoZceGC4N74xmtuavWfwQEnA A+cZTWCfXQxOznar7r8ASkumeUbJm9sKWDXeC0v1OPSOnaHsrTtxPbeWuGqFTP37 5k8OeFCD5EDM1DYcT+9SEJlK6fQ0pQClgJ2C1u3OeVKYcDsoMca+bYuXqRvv8Hji lXUEx9RJY9i4FxuJuNiHraa20pQip2zpHCP5H01lzr+Gv5s6fkj5suChbRV1tPut wmTScv8xx9QPhb+duahoIy6fYocNsXw= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:24 2025 by rpki-client