$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa File: de898606-3a0d-391e-a76b-47d81b014a7d.roa (raw, json) Hash identifier: ehZ1XZMwkOg4DtT2ChZrQut4bwis01N0swVfr8eGHyU= Subject key identifier: 14:8F:D8:AE:C1:7A:72:1F:02:FD:CA:87:B6:37:1D:7C:6B:31:E3:A2 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584965E97572DE83BC125AAAAE40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 396356 IP address blocks: 149.143.162.0/24 maxlen: 24 149.143.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:75:72:de:83:bc:12:5a:aa:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=d9950d10-e011-4662-9127-3a9b2879706d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:a7:a9:04:1a:5d:8e:d6:74:ce:ab:ce:07: 32:e7:eb:f2:8a:32:4c:f0:a9:62:70:e8:ef:89:15: db:ad:c1:b2:0f:73:07:f9:a1:24:f3:67:dd:79:59: 78:dc:23:83:b6:62:fc:59:8c:49:33:28:ac:8e:8a: e6:25:7c:dd:5d:07:bd:e8:c2:42:3d:f2:5c:ce:5d: 0c:8e:e1:08:4f:c6:62:09:38:49:78:4e:a1:1b:7c: 5b:fa:b8:d1:7a:be:d3:48:c2:c5:1f:86:52:c1:6d: 0d:01:df:99:ef:0b:08:9a:0a:a6:a5:d5:39:51:43: 6a:6e:4b:32:12:f1:a2:e2:b3:42:68:de:d0:5a:d4: 42:bd:fe:47:b7:14:53:77:14:06:8c:8f:60:2d:bb: c3:1f:f6:c1:6f:bf:4e:9b:04:e2:aa:e9:01:82:48: 38:72:c9:b1:39:d6:0a:27:1e:6d:16:43:cd:95:e1: f9:73:eb:49:c9:f3:4a:91:f9:08:2b:bb:43:2e:22: 21:d3:8f:c3:2b:4c:3a:b9:2a:32:a5:a6:00:ca:53: 05:f8:88:0e:89:1a:14:a2:c0:7d:44:00:c1:71:f5: de:24:5c:f0:20:f7:7d:27:38:bf:80:8b:d8:80:9e: 53:cb:e1:f7:cc:59:49:ec:30:ce:7f:c3:b4:c7:2c: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8F:D8:AE:C1:7A:72:1F:02:FD:CA:87:B6:37:1D:7C:6B:31:E3:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.162.0/24 149.143.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ec:ea:74:68:cb:ff:74:0d:e6:47:99:d1:13:a9:15:19:02: 07:e7:35:c5:89:fe:85:9c:cf:1a:2c:63:37:86:95:56:75:93: e8:7c:ed:6a:a8:58:db:35:34:83:09:96:43:79:99:e0:78:14: 3e:9d:bc:a4:15:29:45:d0:7d:0b:dc:d5:7a:15:f3:9d:03:a0: d3:bc:95:b9:c4:e0:88:23:99:52:dd:65:74:48:d3:50:54:bf: 3f:0c:aa:2b:d4:8a:85:e5:f7:e4:f9:44:4c:97:6b:c6:f6:73: dd:a5:dc:31:51:cf:62:48:65:34:7b:84:c1:ed:c1:3b:36:7b: 9f:e5:85:c2:b4:8a:5b:7d:ac:e9:46:df:d3:1f:9d:39:d9:e0: 64:2a:d4:b8:d4:eb:8f:46:82:11:4c:06:1f:3e:8d:96:e1:8a: c8:43:01:a3:65:18:b4:4d:41:9d:57:c7:aa:c7:1b:c0:e2:a9: 50:b6:d2:be:04:ce:a7:f9:fa:df:41:29:48:cb:19:97:ac:7a: bd:12:bc:fa:ef:b2:92:2b:bf:0d:b0:9a:14:24:f3:f1:7e:37: 43:69:f3:35:90:fd:c7:68:55:ce:76:26:92:4e:89:e7:96:3d: ae:cb:c9:74:f5:12:2e:04:98:25:a9:0c:d2:d6:c6:b9:0c:6a: 3e:53:8e:c6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEll6XVy3oO8ElqqrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ZDk5NTBkMTAtZTAxMS00NjYyLTkxMjctM2E5YjI4Nzk3MDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKqnqQQaXY7WdM6rzgcy5+vyijJM8KlicOjv iRXbrcGyD3MH+aEk82fdeVl43CODtmL8WYxJMyisjormJXzdXQe96MJCPfJczl0M juEIT8ZiCThJeE6hG3xb+rjRer7TSMLFH4ZSwW0NAd+Z7wsImgqmpdU5UUNqbksy EvGi4rNCaN7QWtRCvf5HtxRTdxQGjI9gLbvDH/bBb79OmwTiqukBgkg4csmxOdYK Jx5tFkPNleH5c+tJyfNKkfkIK7tDLiIh04/DK0w6uSoypaYAylMF+IgOiRoUosB9 RADBcfXeJFzwIPd9Jzi/gIvYgJ5Ty+H3zFlJ7DDOf8O0xywFfQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBSP2K7BenIfAv3Kh7Y3HXxrMeOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZGU4OTg2MDYtM2EwZC0z OTFlLWE3NmItNDdkODFiMDE0YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlY+iAwQA lY+wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADTs6nRoy/90DeZHmdETqRUZAgfnNcWJ/oWczxosYzeGlVZ1 k+h87WqoWNs1NIMJlkN5meB4FD6dvKQVKUXQfQvc1XoV850DoNO8lbnE4IgjmVLd ZXRI01BUvz8MqivUioXl9+T5REyXa8b2c92l3DFRz2JIZTR7hMHtwTs2e5/lhcK0 ilt9rOlG39MfnTnZ4GQq1LjU649GghFMBh8+jZbhishDAaNlGLRNQZ1Xx6rHG8Di qVC20r4Ezqf5+t9BKUjLGZeser0SvPrvspIrvw2wmhQk8/F+N0Np8zWQ/cdoVc52 JpJOieeWPa7LyXT1Ei4EmCWpDNLWxrkMaj5TjsY= -----END CERTIFICATE-----Generated at Mon Apr 7 12:01:06 2025 by rpki-client