$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c8cd4c3a-e2b9-3b79-9005-5a2563c0f775.roa File: c8cd4c3a-e2b9-3b79-9005-5a2563c0f775.roa (raw, json) Hash identifier: 9dUXdYyiKMrjoUh7WVCpfmsaMAARFz91r6W34qyhPoI= Subject key identifier: 1E:3E:25:87:BE:05:AD:B4:91:0E:70:9B:CF:C1:73:C2:75:FB:9F:C5 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849648446AAAA31088C875D9300 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c8cd4c3a-e2b9-3b79-9005-5a2563c0f775.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 7018 IP address blocks: 149.143.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:46:aa:aa:31:08:8c:87:5d:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=9a3bb4a7-e975-40dd-879d-ce336cd38b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:c2:42:72:ce:91:8b:0c:04:d9:6f:b8:f4: af:be:d5:85:f4:a3:8e:0c:17:f5:13:a4:3a:ab:16: 21:38:5c:8c:47:83:bb:84:f0:d2:f4:79:92:39:43: 3a:c0:f9:f0:bf:5d:2b:3f:24:d1:93:c1:0c:84:84: e3:0d:0b:61:ec:d7:fb:f9:64:5b:33:9f:10:83:9d: 4c:8b:90:ad:08:51:41:a9:e2:f6:e2:56:be:75:e8: dd:d1:4a:ac:b1:3c:11:4c:ac:e2:f6:21:7d:36:db: 62:b8:ac:49:9b:ab:d9:fd:6b:9a:db:3e:46:33:18: d1:d2:7a:eb:fe:ff:9e:3c:61:87:ef:cb:8f:e3:a5: 6e:3d:25:c6:9a:28:1b:b1:72:8e:c4:d1:cb:60:29: 12:0f:43:46:60:bd:77:9e:94:79:6d:03:d2:4f:8c: ce:e5:80:aa:3a:5c:1f:ab:87:68:22:b4:92:35:bc: ab:19:5d:d5:bd:28:00:ff:8b:a0:e7:a4:1b:d0:15: af:ed:af:9d:dd:ac:2b:43:b6:4a:61:79:eb:72:96: 6a:c0:10:56:0a:81:f8:ed:a8:c6:6c:73:21:0f:98: 55:82:60:d5:09:81:36:50:04:6f:f2:bf:d1:81:40: a1:58:af:3e:49:c9:bc:5d:de:51:89:a7:eb:db:0f: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3E:25:87:BE:05:AD:B4:91:0E:70:9B:CF:C1:73:C2:75:FB:9F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c8cd4c3a-e2b9-3b79-9005-5a2563c0f775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5d:3a:25:19:8a:7c:ec:a2:22:2e:5b:18:42:17:c8:ae:28: 8a:c2:c4:44:9c:80:ab:67:93:48:bd:b5:eb:42:25:3a:9a:27: a7:88:32:1f:4f:6e:60:f2:c4:ea:e6:7d:f1:55:46:78:9a:e2: 55:7b:db:99:89:19:39:bd:43:0e:b4:fd:3d:51:04:3a:04:98: 06:d5:fa:59:57:9a:8d:0b:92:4e:f3:5e:39:4f:dd:65:68:1d: 2b:1c:59:69:54:c8:74:6b:a8:be:99:d4:d5:7f:0f:22:65:a2: c1:b1:8f:ff:b7:0a:9f:f4:b4:37:bf:ab:6e:74:99:c9:1d:9e: 8a:c0:4d:6e:7d:ba:ee:01:55:4a:ac:eb:19:90:ac:cc:fa:a1: 47:69:88:24:67:c3:02:74:b9:7e:5e:09:24:80:5a:c3:1b:c1: 1c:c7:fe:e8:5f:3d:73:74:4f:38:40:b6:80:74:4c:1f:ef:97: 7e:02:27:c9:55:98:b7:4f:40:79:31:d5:0c:0f:93:62:c1:c0: 80:3a:d1:8d:37:0a:30:d8:ff:da:94:10:80:ac:ae:f5:ee:58: 92:89:c2:cd:4a:f3:91:fb:b2:ba:d0:4d:f7:65:6c:c4:05:71: 70:eb:f6:c1:21:04:c1:d3:8a:dc:20:13:01:5e:e0:cd:a0:e3: b0:7a:31:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEaqqjEIjIddkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk OWEzYmI0YTctZTk3NS00MGRkLTg3OWQtY2UzMzZjZDM4YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr/CQnLOkYsMBNlvuPSvvtWF9KOODBf1E6Q6 qxYhOFyMR4O7hPDS9HmSOUM6wPnwv10rPyTRk8EMhITjDQth7Nf7+WRbM58Qg51M i5CtCFFBqeL24la+dejd0UqssTwRTKzi9iF9NttiuKxJm6vZ/Wua2z5GMxjR0nrr /v+ePGGH78uP46VuPSXGmigbsXKOxNHLYCkSD0NGYL13npR5bQPST4zO5YCqOlwf q4doIrSSNbyrGV3VvSgA/4ug56Qb0BWv7a+d3awrQ7ZKYXnrcpZqwBBWCoH47ajG bHMhD5hVgmDVCYE2UARv8r/RgUChWK8+Scm8Xd5Riafr2w9PrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4+JYe+Ba20kQ5wm8/Bc8J1+5/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYzhjZDRjM2EtZTJiOS0z Yjc5LTkwMDUtNWEyNTYzYzBmNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFdOiUZinzsoiIuWxhCF8iuKIrCxEScgKtnk0i9tetCJTqaJ6eIMh9P bmDyxOrmffFVRnia4lV725mJGTm9Qw60/T1RBDoEmAbV+llXmo0Lkk7zXjlP3WVo HSscWWlUyHRrqL6Z1NV/DyJlosGxj/+3Cp/0tDe/q250mckdnorATW59uu4BVUqs 6xmQrMz6oUdpiCRnwwJ0uX5eCSSAWsMbwRzH/uhfPXN0TzhAtoB0TB/vl34CJ8lV mLdPQHkx1QwPk2LBwIA60Y03CjDY/9qUEICsrvXuWJKJws1K85H7srrQTfdlbMQF cXDr9sEhBMHTitwgEwFe4M2g47B6MX8= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:03 2025 by rpki-client