$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d02a1aa0-9a83-3f09-b1eb-bde3adff1a87.roa File: d02a1aa0-9a83-3f09-b1eb-bde3adff1a87.roa (raw, json) Hash identifier: /DwuNDFQzwcj6obZRHSZ4pZq7IKOqR7PI7mJdkTLU6Y= Subject key identifier: 1D:4D:FC:38:03:7A:E0:B6:36:0E:96:20:3E:D3:04:F4:9B:0D:AF:29 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849350EA0F7625F9FB10061E400 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d02a1aa0-9a83-3f09-b1eb-bde3adff1a87.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 9009 IP address blocks: 149.143.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a0:f7:62:5f:9f:b1:00:61:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=7aecf185-b1d6-4a1a-bbfb-ff2fadbe4f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:91:e1:ae:ca:4e:1f:2b:49:1f:47:fb:a6: ae:47:ab:ef:93:2d:f9:69:c2:af:bc:03:83:6f:d2: bd:e7:16:49:6a:64:c4:56:4a:ac:ab:da:b7:76:8c: b4:6d:75:bb:a4:09:54:9e:d3:d1:12:c5:7e:1f:b9: 4c:0e:27:d6:14:4c:81:1a:6c:9c:9a:b9:0b:1f:82: 33:80:5c:ad:b0:1b:b3:8b:3d:92:d8:37:30:65:47: 09:84:f7:a8:74:5d:62:27:74:97:f9:93:83:e7:5d: 5d:a0:86:eb:f8:38:be:b5:c9:43:0b:ab:fa:da:55: 42:88:0e:48:ba:7b:e5:93:1f:83:52:4b:11:4d:25: af:37:42:a3:2e:79:46:11:03:45:9e:ea:75:b5:09: d3:8b:bf:2e:e7:ed:bc:df:0f:f6:a5:a0:9f:aa:bc: fb:3e:35:21:38:43:f3:ae:9d:96:31:0e:06:73:a3: 42:ac:45:8e:a2:d8:50:6f:e4:d3:55:30:d8:68:0f: 55:7f:86:ca:15:d7:29:08:f0:8d:2d:2f:0c:6e:72: ad:d0:07:58:c7:cb:5e:fb:4d:3f:95:28:7a:8d:fd: 44:bd:d7:7f:2c:d4:99:72:ff:07:76:f6:d6:4f:bd: 55:d4:18:96:ae:3f:d8:22:b4:3f:19:11:be:8a:97: df:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:FC:38:03:7A:E0:B6:36:0E:96:20:3E:D3:04:F4:9B:0D:AF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d02a1aa0-9a83-3f09-b1eb-bde3adff1a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4c:0e:61:7a:27:80:d7:fd:52:53:82:e6:ab:80:c5:e0:b5: ee:cf:1c:c1:8e:d2:f8:19:99:9a:a4:60:09:b5:20:23:44:4f: af:b1:92:b9:b2:b7:95:f8:00:53:96:ac:1b:21:e2:b8:c9:70: 1f:43:13:2e:da:57:46:af:6a:e7:86:3c:1e:9b:53:8d:6c:68: 52:e1:2d:84:68:52:ec:ae:9a:61:92:c5:71:55:43:e4:98:b7: d9:0a:af:ae:05:b5:23:1d:79:43:c4:e2:7a:d2:1d:80:30:e3: ef:4c:61:36:60:22:ea:b7:a3:40:a8:ac:d4:54:8b:0b:74:ab: 09:ca:3a:8f:04:30:4f:16:31:38:ca:24:ab:52:b4:df:de:3c: 25:d3:25:cd:1b:26:e6:59:e9:30:38:af:62:63:1d:6f:a9:3b: 6d:d7:01:af:57:95:47:c7:4f:47:f9:60:9f:49:4a:ea:92:8a: 65:ac:92:95:9a:22:c6:5a:4b:39:14:5b:b3:38:b2:1c:64:d5: fb:2a:a2:1d:ae:1f:e6:ce:bc:10:62:7a:03:e2:92:36:02:64: 8b:40:8b:09:16:2c:82:19:65:16:32:ce:d4:b7:7c:6c:0e:f6: 32:5a:43:5f:33:12:99:7b:57:ce:d4:97:a1:71:13:d4:e4:0f: 7b:f5:aa:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqD3Yl+fsQBh5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk N2FlY2YxODUtYjFkNi00YTFhLWJiZmItZmYyZmFkYmU0ZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0KR4a7KTh8rSR9H+6auR6vvky35acKvvAOD b9K95xZJamTEVkqsq9q3doy0bXW7pAlUntPREsV+H7lMDifWFEyBGmycmrkLH4Iz gFytsBuziz2S2DcwZUcJhPeodF1iJ3SX+ZOD511doIbr+Di+tclDC6v62lVCiA5I unvlkx+DUksRTSWvN0KjLnlGEQNFnup1tQnTi78u5+283w/2paCfqrz7PjUhOEPz rp2WMQ4Gc6NCrEWOothQb+TTVTDYaA9Vf4bKFdcpCPCNLS8MbnKt0AdYx8te+00/ lSh6jf1Evdd/LNSZcv8HdvbWT71V1BiWrj/YIrQ/GRG+ipffAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1N/DgDeuC2Ng6WID7TBPSbDa8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDAyYTFhYTAtOWE4My0z ZjA5LWIxZWItYmRlM2FkZmYxYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhMDmF6J4DX/VJTguargMXgte7PHMGO0vgZmZqkYAm1ICNET6+xkrmy t5X4AFOWrBsh4rjJcB9DEy7aV0avaueGPB6bU41saFLhLYRoUuyummGSxXFVQ+SY t9kKr64FtSMdeUPE4nrSHYAw4+9MYTZgIuq3o0CorNRUiwt0qwnKOo8EME8WMTjK JKtStN/ePCXTJc0bJuZZ6TA4r2JjHW+pO23XAa9XlUfHT0f5YJ9JSuqSimWskpWa IsZaSzkUW7M4shxk1fsqoh2uH+bOvBBiegPikjYCZItAiwkWLIIZZRYyztS3fGwO 9jJaQ18zEpl7V87Ul6FxE9TkD3v1qt4= -----END CERTIFICATE-----Generated at Mon Apr 7 11:47:51 2025 by rpki-client