$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa File: 32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa (raw, json) Hash identifier: qCZGynu7NYGNn1hYpPx25BziHeFHqhXesnvyqO0mHtQ= Subject key identifier: 97:EC:5E:EE:D0:8B:3F:EC:9B:9E:91:CF:4C:B0:67:6B:46:A2:AE:49 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A43DB06BCCEA08900862B6380 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 7018 IP address blocks: 149.143.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:06:bc:ce:a0:89:00:86:2b:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=8c6222fa-edd7-4bc9-b2fb-f5c65b996acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:6b:f4:25:c4:fc:a6:27:c3:13:c2:9c:ee: df:15:36:67:6c:51:1c:2c:2d:c9:68:cb:0a:8c:13: 40:64:d7:92:29:d3:d2:ab:d3:ec:ec:70:fe:e2:51: d5:0a:69:63:a7:ff:4e:b8:8d:13:ce:28:06:03:8b: aa:d0:8e:74:f6:b0:ac:fd:6f:94:3f:77:a3:5d:f2: e6:26:b0:b9:49:55:02:ff:12:bf:04:2c:59:a6:fe: df:2f:fa:d7:43:e2:17:39:aa:81:f0:b4:54:4d:67: 0b:07:40:21:72:8a:ea:5b:5d:da:a4:e7:94:2f:ce: d5:38:3d:a9:f7:ca:3c:41:86:7d:29:06:c1:8b:e7: 6d:4b:f3:4c:4b:a6:36:a5:a7:cb:fe:fd:12:24:84: 36:23:bf:1c:95:83:32:7c:84:08:1f:d5:3d:6b:58: 88:e0:6f:2a:79:2d:0a:68:56:66:84:2b:7c:a6:0d: b0:b0:ad:fc:15:9b:85:97:43:f3:5c:cc:61:40:8d: 38:44:7d:bd:37:66:39:ae:2b:b5:32:9f:7e:2f:09: 6e:fb:3b:a3:49:38:8b:57:03:a5:a8:d4:03:35:0a: a7:7c:96:7b:7c:b4:d6:6e:3a:28:fd:c3:a9:24:c1: 0d:03:0a:8b:bc:46:96:03:27:1b:69:f7:ad:96:de: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EC:5E:EE:D0:8B:3F:EC:9B:9E:91:CF:4C:B0:67:6B:46:A2:AE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/32e7ac22-4b3b-31c0-b181-9b0be9d80a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8a:8d:54:ec:eb:43:ab:02:94:0c:76:4e:ea:5e:e2:f1:13: 3d:c3:6a:c1:9c:c7:9a:3c:12:b9:b1:17:f1:da:a9:b5:a4:77: 6c:c9:0c:d0:e3:83:1a:e7:7f:a4:6a:9b:49:a9:37:0d:30:88: a8:ca:c4:56:e1:7d:6c:eb:fc:fa:b1:be:fd:d0:82:d2:12:6e: cb:7c:fb:b3:5e:64:f6:95:dc:e0:d5:c8:5c:e8:8b:d6:a7:9d: 6a:92:7b:3a:84:d1:bf:06:c6:da:f4:dd:6d:c0:62:aa:e2:b8: 30:e1:72:e1:ec:af:f8:71:7f:38:64:99:db:58:fc:28:1b:a9: 0f:f7:38:cd:b9:35:b5:ef:79:e0:48:10:0a:b1:dc:28:61:01: 2a:63:ea:5c:4e:63:59:60:e1:4c:5c:c6:d0:e3:d7:19:4a:56: bf:79:65:6a:b9:3e:54:9b:8c:a3:c4:be:c4:bf:74:03:6d:c2: 72:d4:d8:9b:05:5a:6d:27:7a:04:dd:55:1e:78:f0:8f:db:84: 84:d5:4d:51:56:24:f9:2f:03:e3:d1:66:b0:bf:23:96:e8:48: 38:7f:a5:39:70:1a:da:fa:92:54:7c:b0:2f:16:70:b2:3e:b3: 77:b6:7b:d1:57:9e:c1:d0:83:fb:5f:a9:7f:70:de:8b:ff:80: 21:2d:fd:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wa8zqCJAIYrY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk OGM2MjIyZmEtZWRkNy00YmM5LWIyZmItZjVjNjViOTk2YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSNr9CXE/KYnwxPCnO7fFTZnbFEcLC3JaMsK jBNAZNeSKdPSq9Ps7HD+4lHVCmljp/9OuI0TzigGA4uq0I509rCs/W+UP3ejXfLm JrC5SVUC/xK/BCxZpv7fL/rXQ+IXOaqB8LRUTWcLB0AhcorqW13apOeUL87VOD2p 98o8QYZ9KQbBi+dtS/NMS6Y2pafL/v0SJIQ2I78clYMyfIQIH9U9a1iI4G8qeS0K aFZmhCt8pg2wsK38FZuFl0PzXMxhQI04RH29N2Y5riu1Mp9+Lwlu+zujSTiLVwOl qNQDNQqnfJZ7fLTWbjoo/cOpJMENAwqLvEaWAycbafetlt6LWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfsXu7Qiz/sm56Rz0ywZ2tGoq5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzJlN2FjMjItNGIzYi0z MWMwLWIxODEtOWIwYmU5ZDgwYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiKjVTs60OrApQMdk7qXuLxEz3DasGcx5o8ErmxF/HaqbWkd2zJDNDj gxrnf6Rqm0mpNw0wiKjKxFbhfWzr/Pqxvv3QgtISbst8+7NeZPaV3ODVyFzoi9an nWqSezqE0b8Gxtr03W3AYqriuDDhcuHsr/hxfzhkmdtY/CgbqQ/3OM25NbXveeBI EAqx3ChhASpj6lxOY1lg4UxcxtDj1xlKVr95ZWq5PlSbjKPEvsS/dANtwnLU2JsF Wm0negTdVR548I/bhITVTVFWJPkvA+PRZrC/I5boSDh/pTlwGtr6klR8sC8WcLI+ s3e2e9FXnsHQg/tfqX9w3ov/gCEt/Y0= -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:51 2025 by rpki-client