$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa File: cef15028-7434-3d03-b64d-cb9105f2f885.roa (raw, json) Hash identifier: bocH2WUWhxQSiY2dBHDypiWJDXj7TePXAJvLnOypGGA= Subject key identifier: 43:A4:19:0E:43:A3:64:3F:C7:B8:CD:6F:A5:3D:95:83:7F:25:97:9C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A16E641E9BA82F02F2ACE7A80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa Signing time: Thu 05 Jun 2025 10:32:29 +0000 ROA not before: Thu 05 Jun 2025 10:32:29 +0000 ROA not after: Wed 03 Sep 2025 10:32:29 +0000 asID: 34119 IP address blocks: 149.143.150.0/23 maxlen: 23 149.143.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:16:e6:41:e9:ba:82:f0:2f:2a:ce:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 5 10:32:29 2025 GMT Not After : Sep 3 10:32:29 2025 GMT Subject: CN=8d43a3d8-76af-4c64-b959-70b2f1fdff63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:a3:a9:bc:7b:d7:53:7e:f2:33:34:aa:f4: b2:be:80:3c:17:0b:9b:f5:a8:a2:b3:40:f5:a6:75: 6a:98:67:fc:04:a8:e9:7e:9c:02:5a:27:f6:18:93: 49:3b:83:7f:b6:ff:3d:99:95:ec:79:24:39:8d:15: dc:2f:96:4e:0c:28:9a:62:d0:cf:0b:1a:22:ed:30: 90:fc:4f:5b:07:fa:ef:d4:0c:12:ce:b6:e4:99:ff: ac:a1:00:64:b3:2e:e9:2a:4b:25:ec:4c:a4:42:1f: f9:77:47:1f:7f:d7:0e:8c:fe:e1:e8:0a:0d:78:3c: 6a:a4:a0:20:c4:3e:ce:99:db:40:7a:a2:0d:56:fe: 20:ad:0d:d0:f8:ce:44:8e:84:fc:87:69:62:eb:3b: 6f:0c:a2:42:0d:f3:24:d1:5a:14:db:5b:ad:b4:c3: 79:8f:0f:cb:2d:89:bc:64:5c:93:b7:25:e5:eb:be: 63:0d:a7:f0:7c:27:7c:16:4b:29:ea:36:f0:c9:87: 8c:74:2e:8b:35:85:5f:a7:be:0f:02:ff:9c:d5:18: 1d:73:bd:53:44:43:36:58:b2:66:68:8a:f6:44:23: df:b0:91:ab:d2:17:1c:50:e4:cc:70:32:6c:c4:32: 97:14:27:c2:c3:2b:26:3d:c2:bb:6f:3f:3d:85:a7: 73:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A4:19:0E:43:A3:64:3F:C7:B8:CD:6F:A5:3D:95:83:7F:25:97:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.150.0/23 149.143.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:58:39:50:90:39:76:cc:dc:e3:41:7b:53:6f:cc:c5:be:25: 8b:84:4d:4c:07:fe:e8:14:3c:d1:bf:ad:06:3b:e3:d9:49:52: ba:69:02:e4:22:a2:54:b3:71:10:1b:36:c7:b9:3c:c3:15:49: 0a:f6:d7:5d:99:80:ba:56:0b:ee:7e:69:38:d3:d6:61:15:0c: 4d:d7:4e:9c:ab:ab:fa:7c:5c:2f:a1:a2:9b:16:5c:64:1b:63: 9d:a3:a2:ec:bb:d5:5c:84:52:39:bb:b6:ea:08:70:46:15:f0: 8d:76:0f:be:d9:d9:bb:e0:76:28:ec:65:f7:96:38:fe:e6:68: 7f:d3:a9:8a:3f:a5:fd:7d:1e:56:83:4b:75:f7:d2:43:2d:d8: b7:a7:26:f6:b6:54:91:b7:b9:aa:43:5d:08:91:f9:65:ca:17: c6:d2:6f:e1:6d:73:f4:3b:ec:6d:bb:c2:f5:86:55:f7:65:96: 64:fd:75:f5:68:f1:81:1d:71:2e:67:8a:67:63:1c:d7:45:82: 99:b0:7d:cd:63:ac:d1:67:b8:24:ae:06:59:d5:ec:03:76:12: 29:65:de:10:7b:4b:ec:b8:ea:60:04:74:26:2e:8e:53:84:5a: 13:0a:23:88:79:d3:3d:ac:99:d7:5c:6c:32:0d:f1:66:18:27: 28:42:19:89 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoW5kHpuoLwLyrOeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYwNTEwMzIyOVoXDTI1MDkwMzEwMzIyOVowLzEtMCsGA1UEAxMk OGQ0M2EzZDgtNzZhZi00YzY0LWI5NTktNzBiMmYxZmRmZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lujqbx711N+8jM0qvSyvoA8Fwub9aiis0D1 pnVqmGf8BKjpfpwCWif2GJNJO4N/tv89mZXseSQ5jRXcL5ZODCiaYtDPCxoi7TCQ /E9bB/rv1AwSzrbkmf+soQBksy7pKksl7EykQh/5d0cff9cOjP7h6AoNeDxqpKAg xD7OmdtAeqINVv4grQ3Q+M5EjoT8h2li6ztvDKJCDfMk0VoU21uttMN5jw/LLYm8 ZFyTtyXl675jDafwfCd8Fksp6jbwyYeMdC6LNYVfp74PAv+c1Rgdc71TREM2WLJm aIr2RCPfsJGr0hccUOTMcDJsxDKXFCfCwysmPcK7bz89hadzPwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEOkGQ5Do2Q/x7jNb6U9lYN/JZecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VmMTUwMjgtNzQzNC0z ZDAzLWI2NGQtY2I5MTA1ZjJmODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+WAwQC lY+oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABFYOVCQOXbM3ONBe1NvzMW+JYuETUwH/ugUPNG/rQY749lJ UrppAuQiolSzcRAbNse5PMMVSQr2112ZgLpWC+5+aTjT1mEVDE3XTpyrq/p8XC+h opsWXGQbY52jouy71VyEUjm7tuoIcEYV8I12D77Z2bvgdijsZfeWOP7maH/TqYo/ pf19HlaDS3X30kMt2LenJva2VJG3uapDXQiR+WXKF8bSb+Ftc/Q77G27wvWGVfdl lmT9dfVo8YEdcS5nimdjHNdFgpmwfc1jrNFnuCSuBlnV7AN2Eill3hB7S+y46mAE dCYujlOEWhMKI4h50z2smddcbDIN8WYYJyhCGYk= -----END CERTIFICATE-----Generated at Sun Jun 8 18:35:46 2025 by rpki-client