$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa File: f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa (raw, json) Hash identifier: URbDy4qguzVmkRROU5RPwIJu1fh+UiU7iFrsx/x+0PI= Subject key identifier: 10:EE:FC:86:82:75:24:BB:AF:8C:27:02:EB:53:EE:DC:40:9E:3B:88 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848C84B9A2020E02FC1985F58C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 28920 IP address blocks: 149.143.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:9a:20:20:e0:2f:c1:98:5f:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=89f35c84-c930-4596-8404-28bad206c72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:fc:fd:67:e8:20:cf:7b:36:0c:7a:21:e6: f0:01:1c:11:87:e1:0c:9b:36:17:5f:dc:ce:74:e6: 01:39:4e:19:15:b5:99:12:1f:0d:41:c9:b5:c7:59: 0f:40:76:3c:fe:66:cf:ec:7e:11:7c:ca:13:e9:bd: 24:ef:55:8d:e9:05:48:e1:f7:0c:fc:a0:b4:12:34: ee:4c:52:16:7f:ef:66:dd:17:b8:60:a5:22:af:68: 0e:8e:45:33:1c:be:57:c6:35:78:a4:c6:68:e1:35: bb:70:2f:b9:80:66:71:21:8e:ce:8a:4b:78:5d:a0: 3b:04:5f:16:c7:23:0a:05:3e:4a:34:de:68:c6:1c: de:c9:0f:61:69:44:44:18:73:46:9d:9b:c5:94:79: 71:2c:ec:29:f9:10:89:98:5e:06:d3:00:a7:25:77: 81:9d:f7:08:ee:68:2e:26:44:5d:66:ce:d4:6f:c0: 37:25:77:0f:cc:1b:06:d4:da:24:a9:50:35:7d:68: 0a:f4:60:8f:6c:77:6c:0c:9e:85:51:3c:7a:2f:32: 30:b2:10:04:48:48:d9:ea:c6:a9:0a:3c:52:03:dd: cb:7d:68:a5:82:c1:33:8c:25:9d:50:e4:4e:dc:cb: 8a:5b:b7:ff:ce:2a:94:0a:ec:47:d2:e3:cf:dd:75: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EE:FC:86:82:75:24:BB:AF:8C:27:02:EB:53:EE:DC:40:9E:3B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:08:5a:f5:f0:b9:8a:52:12:cd:b7:32:ec:64:3b:4a:35:47: 79:a0:c6:e2:fc:74:4b:59:d1:1f:d7:01:a0:8b:6c:66:2a:62: 57:05:f2:59:2d:ac:3f:b3:68:03:1c:bd:fd:52:bc:80:a4:c6: 0d:38:c9:1b:b7:0e:78:8c:b9:d5:8a:ea:a1:68:d0:99:80:9e: f5:56:dc:fc:2d:03:34:13:8e:b7:62:8a:c8:00:b6:60:43:8f: ca:65:7b:ec:4f:80:1c:43:7f:87:67:a2:ec:22:33:7d:64:47: 63:8c:c3:b0:d1:fd:f9:26:34:28:f7:b2:e8:36:2e:58:48:8c: 7f:92:e1:71:cd:36:61:39:55:50:a5:26:19:78:4d:0e:ed:31: 55:9a:29:d5:b0:a9:96:6e:9f:b7:39:6f:69:cf:09:3c:72:ac: a2:51:ec:59:89:5a:a8:4a:3b:31:f4:41:7f:e4:b9:15:c7:d8: 5a:87:fd:c3:9e:1d:ee:e4:8a:0a:a7:e0:c9:96:dc:66:8e:a8: d6:44:b8:b7:21:9d:f5:c5:73:5d:b3:74:57:18:1d:b5:51:45: 80:89:36:15:1b:bd:79:ce:10:54:99:e6:29:33:6b:5f:ac:10: 1f:fc:cd:7f:b1:37:4b:b8:e7:60:2a:a6:93:5c:14:bc:6e:6a: 5f:05:3f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS5ogIOAvwZhfWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODlmMzVjODQtYzkzMC00NTk2LTg0MDQtMjhiYWQyMDZjNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcj8/WfoIM97Ngx6IebwARwRh+EMmzYXX9zO dOYBOU4ZFbWZEh8NQcm1x1kPQHY8/mbP7H4RfMoT6b0k71WN6QVI4fcM/KC0EjTu TFIWf+9m3Re4YKUir2gOjkUzHL5XxjV4pMZo4TW7cC+5gGZxIY7Oikt4XaA7BF8W xyMKBT5KNN5oxhzeyQ9haUREGHNGnZvFlHlxLOwp+RCJmF4G0wCnJXeBnfcI7mgu JkRdZs7Ub8A3JXcPzBsG1NokqVA1fWgK9GCPbHdsDJ6FUTx6LzIwshAESEjZ6sap CjxSA93LfWilgsEzjCWdUORO3MuKW7f/ziqUCuxH0uPP3XWOmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDu/IaCdSS7r4wnAutT7txAnjuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjVmZWY2YjktNThkOS0z ZDQ2LWE4ODctYjdiYWYyMzg4ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQIWvXwuYpSEs23MuxkO0o1R3mgxuL8dEtZ0R/XAaCLbGYqYlcF8lkt rD+zaAMcvf1SvICkxg04yRu3DniMudWK6qFo0JmAnvVW3PwtAzQTjrdiisgAtmBD j8ple+xPgBxDf4dnouwiM31kR2OMw7DR/fkmNCj3sug2LlhIjH+S4XHNNmE5VVCl Jhl4TQ7tMVWaKdWwqZZun7c5b2nPCTxyrKJR7FmJWqhKOzH0QX/kuRXH2FqH/cOe He7kigqn4MmW3GaOqNZEuLchnfXFc12zdFcYHbVRRYCJNhUbvXnOEFSZ5ikza1+s EB/8zX+xN0u452AqppNcFLxual8FP0A= -----END CERTIFICATE-----Generated at Sun Apr 6 03:31:18 2025 by rpki-client