$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa File: 00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa (raw, json) Hash identifier: X3Cs2R9D93T/gywMqGeuN+O13GBSriiucElRNU6KFT0= Subject key identifier: 11:5A:30:A3:92:92:41:59:D2:03:71:03:E1:75:B9:D4:90:C0:65:99 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B2496D4DD04EE0951D925A180 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 7018 IP address blocks: 149.143.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d4:dd:04:ee:09:51:d9:25:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=ece96b58-2093-492e-a7f7-d6b272a516a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:22:5c:91:c1:d5:b9:3a:99:c2:c7:f2:c7: 49:aa:98:34:19:16:96:ca:1f:46:fe:13:8b:12:92: 18:2b:c8:be:83:0a:f3:3d:e1:95:07:27:95:cb:30: e4:80:ba:c5:75:bc:36:6a:9e:5f:74:01:3e:69:22: 50:e5:bd:5d:9b:7c:c9:0d:b4:e2:85:4b:05:6d:10: fc:10:49:11:c1:2f:9f:ae:5f:8b:6f:54:f5:0c:b3: 09:08:bd:ad:f4:43:c8:41:0d:08:cd:08:35:1b:b3: ce:df:45:e5:f9:ca:71:64:60:d6:16:31:cd:79:a3: 2e:db:d1:06:9c:e3:d5:0f:33:fa:11:ff:af:3a:c4: 0f:d1:b1:b1:07:fd:89:c1:dd:fc:b5:5d:af:9e:cc: 15:2c:63:e1:fe:e1:4c:ec:cd:e3:ac:cf:0b:f4:2e: a1:a3:43:fc:ae:0e:90:30:4b:84:01:4a:4e:20:40: cf:32:f7:8b:35:02:ee:e6:07:86:00:42:b8:75:56: 43:6a:9c:5c:aa:d5:31:96:c9:0b:78:75:e2:a6:03: 24:c0:17:4c:6a:61:d7:f4:82:38:ce:29:0c:34:b7: 32:96:88:93:5e:27:90:37:e4:38:ac:4e:16:25:01: 9f:29:53:e1:b1:0f:86:a4:47:63:c5:a6:5c:ae:c1: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:30:A3:92:92:41:59:D2:03:71:03:E1:75:B9:D4:90:C0:65:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/00388c53-1a59-3c2e-bd60-e5f97e2953ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d3:4d:08:8a:a9:ec:19:28:42:6b:86:cf:b5:ab:1e:46:44: 8d:39:9b:3d:e6:4f:0f:e1:c8:ec:36:0c:d5:eb:73:33:43:00: 91:db:49:a5:84:f7:b7:c0:27:4a:98:d7:29:5f:72:a4:90:58: 66:7f:d6:73:01:f2:d4:60:d0:fa:2d:12:42:cb:73:e5:88:4c: f4:8b:11:4d:e6:6d:45:28:da:d0:1b:9f:95:68:4e:44:1e:5a: 22:7e:1a:4d:52:67:3b:ec:16:de:fb:b2:7c:e1:28:46:ab:64: d0:bb:6e:12:93:c8:38:4a:9e:0b:c4:ab:8c:dd:a5:17:47:bd: f8:ce:68:7b:7d:34:cc:0f:be:14:48:7c:67:0c:3e:8d:98:f5: 8b:55:1a:d1:53:58:66:f0:46:43:2a:04:0e:65:58:f4:d4:d7: 83:38:48:d3:f8:4a:4c:90:a2:e7:7f:f1:51:e5:1f:12:d8:b2: 3f:61:9e:91:dc:d0:9d:e2:11:e1:3b:45:8d:3d:70:76:ee:df: fb:ec:7c:41:fb:2a:91:f2:d3:91:fc:82:82:1c:47:7f:81:0f: b0:c2:e6:77:ed:be:51:cd:35:9b:47:c5:58:7d:dc:be:9b:04: db:7c:98:ba:c3:2a:41:b3:a8:b4:eb:07:cd:78:0a:43:e5:1c: db:d0:26:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltTdBO4JUdkloYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWNlOTZiNTgtMjA5My00OTJlLWE3ZjctZDZiMjcyYTUxNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAickiXJHB1bk6mcLH8sdJqpg0GRaWyh9G/hOL EpIYK8i+gwrzPeGVByeVyzDkgLrFdbw2ap5fdAE+aSJQ5b1dm3zJDbTihUsFbRD8 EEkRwS+frl+Lb1T1DLMJCL2t9EPIQQ0IzQg1G7PO30Xl+cpxZGDWFjHNeaMu29EG nOPVDzP6Ef+vOsQP0bGxB/2Jwd38tV2vnswVLGPh/uFM7M3jrM8L9C6ho0P8rg6Q MEuEAUpOIEDPMveLNQLu5geGAEK4dVZDapxcqtUxlskLeHXipgMkwBdMamHX9II4 zikMNLcyloiTXieQN+Q4rE4WJQGfKVPhsQ+GpEdjxaZcrsEwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFaMKOSkkFZ0gNxA+F1udSQwGWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDAzODhjNTMtMWE1OS0z YzJlLWJkNjAtZTVmOTdlMjk1M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzTTQiKqewZKEJrhs+1qx5GRI05mz3mTw/hyOw2DNXrczNDAJHbSaWE 97fAJ0qY1ylfcqSQWGZ/1nMB8tRg0PotEkLLc+WITPSLEU3mbUUo2tAbn5VoTkQe WiJ+Gk1SZzvsFt77snzhKEarZNC7bhKTyDhKngvEq4zdpRdHvfjOaHt9NMwPvhRI fGcMPo2Y9YtVGtFTWGbwRkMqBA5lWPTU14M4SNP4SkyQoud/8VHlHxLYsj9hnpHc 0J3iEeE7RY09cHbu3/vsfEH7KpHy05H8goIcR3+BD7DC5nftvlHNNZtHxVh93L6b BNt8mLrDKkGzqLTrB814CkPlHNvQJgU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:59:09 2025 by rpki-client