$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa File: cef15028-7434-3d03-b64d-cb9105f2f885.roa (raw, json) Hash identifier: yQ7LyHyDceF7gYWgTWumI6h3TiPABfk1HBZ9vrpCyNI= Subject key identifier: 2A:7D:BB:4E:61:AE:08:8F:E1:1C:1D:18:99:08:BA:5E:C8:57:F8:F0 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584AF68694B0E2E35CFD995372F8 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 34119 IP address blocks: 149.143.150.0/23 maxlen: 23 149.143.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:94:b0:e2:e3:5c:fd:99:53:72:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=888743d4-4b6d-4a85-8fe8-d3a2affd8d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:63:59:42:89:38:9d:fa:44:09:18:ca:cd: be:60:84:2c:d9:d7:2d:bc:93:1d:fb:f0:5a:02:ed: 44:4c:cb:aa:97:c4:7b:7d:d7:be:cd:9f:9c:f0:13: 85:8f:61:13:37:20:b7:7d:dd:d3:09:49:50:3b:21: a2:4b:48:25:e5:7b:4d:cb:41:3e:ee:9b:3b:b0:c2: cc:ed:06:c2:73:66:d8:4a:2b:d7:af:58:ab:9d:a0: f2:eb:4e:e6:9a:30:e0:89:8c:eb:7c:a4:3b:bb:c4: 93:3a:e2:98:ee:a2:2c:ad:17:1a:15:ae:0b:69:01: ca:0f:e2:91:f8:99:b4:05:06:a9:3e:49:1c:e6:77: fd:a2:cf:f3:8e:e4:bd:26:3d:3b:78:d5:60:8e:93: 08:6b:3c:60:eb:68:43:04:b3:23:e9:41:54:c4:ad: f3:34:ee:36:f7:5b:dc:4e:62:66:0a:b0:72:9c:87: 81:35:a1:2b:05:70:e1:94:78:aa:a6:6b:6c:45:9d: c9:bb:19:f6:21:87:59:0f:3e:e5:ad:52:3a:de:57: 2e:2b:e2:a3:d9:de:9f:15:49:db:a4:e8:9f:31:3f: cd:76:c4:80:f7:5d:95:22:ce:b0:7b:5c:48:04:e9: f3:84:e5:74:48:fb:41:f7:cc:c3:ca:cc:47:f3:5d: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7D:BB:4E:61:AE:08:8F:E1:1C:1D:18:99:08:BA:5E:C8:57:F8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.150.0/23 149.143.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cd:c6:e7:0e:fc:93:83:b6:f8:71:16:8c:86:c9:13:b8:a2: aa:5b:7a:98:ef:4c:02:3a:5e:52:2b:d2:67:09:1e:cb:8b:72: 89:eb:f5:7f:93:96:d1:74:98:66:7c:45:f5:91:2e:e7:e0:b5: cf:d8:92:23:db:d4:2c:8b:82:ae:46:4e:eb:c2:e1:49:05:81: d2:82:c8:a3:f6:cf:7b:3e:d3:83:48:76:8c:e3:2d:00:00:41: 2e:ec:ea:53:a9:40:42:8c:7d:5f:79:dc:dd:8a:90:25:d2:8f: 49:67:e1:50:de:83:b7:6e:e1:fb:52:b1:28:3c:c6:58:26:6d: 15:02:87:8a:e7:64:1c:a8:b9:b8:74:44:f8:bf:26:b3:a5:cd: 86:02:5f:7d:6e:d6:cd:4e:d0:74:e4:5f:e0:13:f0:b4:37:e5: 06:f6:f8:54:c7:42:68:9f:db:81:9b:f3:f4:cc:5b:56:c3:a3: d7:6a:b9:7d:36:36:8d:9b:d7:5d:23:98:fa:b2:b9:d3:f3:85: cd:42:2f:3a:f1:2e:81:8c:fd:4a:2e:47:fe:8d:b2:da:32:35: ec:02:d6:06:fd:a5:fc:13:0e:cc:d5:14:e4:0a:cf:f1:2a:0b: 24:2c:7b:71:ee:1c:52:bb:90:1e:ec:8c:48:fa:c6:01:68:94: 72:61:5d:83 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr2hpSw4uNc/ZlTcvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ODg4NzQzZDQtNGI2ZC00YTg1LThmZTgtZDNhMmFmZmQ4ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnNjWUKJOJ36RAkYys2+YIQs2dctvJMd+/Ba Au1ETMuql8R7fde+zZ+c8BOFj2ETNyC3fd3TCUlQOyGiS0gl5XtNy0E+7ps7sMLM 7QbCc2bYSivXr1irnaDy607mmjDgiYzrfKQ7u8STOuKY7qIsrRcaFa4LaQHKD+KR +Jm0BQapPkkc5nf9os/zjuS9Jj07eNVgjpMIazxg62hDBLMj6UFUxK3zNO4291vc TmJmCrBynIeBNaErBXDhlHiqpmtsRZ3Juxn2IYdZDz7lrVI63lcuK+Kj2d6fFUnb pOifMT/NdsSA912VIs6we1xIBOnzhOV0SPtB98zDysxH810ljwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCp9u05hrgiP4RwdGJkIul7IV/jwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VmMTUwMjgtNzQzNC0z ZDAzLWI2NGQtY2I5MTA1ZjJmODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+WAwQC lY+oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIHNxucO/JODtvhxFoyGyRO4oqpbepjvTAI6XlIr0mcJHsuL conr9X+TltF0mGZ8RfWRLufgtc/YkiPb1CyLgq5GTuvC4UkFgdKCyKP2z3s+04NI dozjLQAAQS7s6lOpQEKMfV953N2KkCXSj0ln4VDeg7du4ftSsSg8xlgmbRUCh4rn ZByoubh0RPi/JrOlzYYCX31u1s1O0HTkX+AT8LQ35Qb2+FTHQmif24Gb8/TMW1bD o9dquX02No2b110jmPqyudPzhc1CLzrxLoGM/UouR/6NstoyNewC1gb9pfwTDszV FOQKz/EqCyQse3HuHFK7kB7sjEj6xgFolHJhXYM= -----END CERTIFICATE-----Generated at Thu Sep 18 01:35:50 2025 by rpki-client