$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa File: 38342da4-e45f-3645-a61f-9ff395a6995d.roa (raw, json) Hash identifier: 4pKda5IouiYdNPyWUkr5MCc24pwJbTSdCgMCLRRqgwk= Subject key identifier: B7:C2:8F:DD:2F:D0:23:59:9A:DF:52:57:7F:6A:BC:23:BF:BE:58:9E Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849ABB49EB284169EA2FE0F7580 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7018 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9e:b2:84:16:9e:a2:fe:0f:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=b0e13b94-fb72-401f-a32a-936c1bbac9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:59:96:28:99:cb:f3:eb:52:31:80:33:44:a5: b8:06:f0:8b:76:be:ae:5c:24:bc:64:9d:46:ae:ab: 4d:b3:5b:ea:c1:23:b3:a9:21:90:c9:70:bd:a4:f5: 1b:b1:0f:02:22:6b:02:d3:40:fd:e0:a5:6a:ef:33: e0:41:59:56:4d:b4:80:2e:76:9c:e5:a6:82:3b:ac: 0b:bf:67:a4:17:78:22:d1:20:bb:82:1e:3a:8a:70: 93:77:cc:b0:3b:9f:3b:de:e3:37:c1:92:93:75:e4: aa:04:34:82:e3:45:3f:c6:68:93:9f:13:9e:cc:f7: 97:af:35:57:22:44:b2:40:5d:34:23:f4:f6:64:1c: 2d:20:f6:21:c6:31:1a:76:a4:e6:55:d3:32:11:2e: b2:b6:30:93:fa:76:4d:6a:66:23:1c:6d:14:2a:67: 98:d4:25:d0:0c:dd:95:ef:63:24:06:8b:88:49:99: fc:d8:93:c4:d4:ce:a5:e3:89:02:57:52:92:e0:96: 68:10:c0:18:a3:5c:ff:13:25:0d:97:1f:7e:84:38: 8d:b3:e5:e6:f0:a5:5e:52:af:cf:47:ba:ed:73:9c: 90:91:17:07:79:2c:d6:1b:91:9b:d1:e1:36:f7:d8: 8a:5a:41:17:4f:33:d5:fd:ae:e3:b9:68:b2:6b:59: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C2:8F:DD:2F:D0:23:59:9A:DF:52:57:7F:6A:BC:23:BF:BE:58:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e3:3c:f0:f4:3c:3a:9c:a9:5c:00:0b:83:0f:33:7e:db:4b: aa:cb:0a:ed:48:25:4d:3a:0c:10:e1:8a:0d:73:d0:44:e7:a1: 68:78:54:fe:8f:c9:3f:03:09:66:03:d7:8d:f9:9e:c1:e8:9e: 87:8b:15:56:d3:bd:3d:f0:30:59:7d:dd:57:52:53:74:e0:2d: a1:de:77:62:8d:a3:76:dd:80:9e:47:1a:7f:1a:77:69:db:38: 10:a8:79:43:4c:7c:b1:21:b0:77:25:e5:85:cc:b6:bc:ae:6a: e8:df:3a:8b:9b:ec:a6:44:51:2f:de:e0:fc:72:51:99:d3:22: 65:07:1f:1f:d9:fb:11:aa:58:3a:1f:f3:fc:6e:a9:97:61:c7: dd:2c:25:fd:ab:a7:ec:59:11:9f:70:fc:d7:d1:f5:7e:e1:62: 48:30:74:98:d7:fa:91:31:1d:79:3e:dd:0f:58:83:b0:fb:7a: 23:a0:b4:65:dc:57:de:8f:fc:90:31:65:f2:bb:4a:e7:65:0e: 15:ce:ec:a3:97:70:aa:e9:9c:82:56:ce:cb:a3:cc:41:e1:5e: 47:08:b7:5c:2f:7a:5e:b9:92:4d:92:b3:03:7e:ce:7e:97:75: 2e:67:bc:b5:a5:b1:67:54:a8:20:ae:fd:6a:db:ab:a6:46:dd: 9f:4c:4f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJ6yhBaeov4PdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YjBlMTNiOTQtZmI3Mi00MDFmLWEzMmEtOTM2YzFiYmFjOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFmWKJnL8+tSMYAzRKW4BvCLdr6uXCS8ZJ1G rqtNs1vqwSOzqSGQyXC9pPUbsQ8CImsC00D94KVq7zPgQVlWTbSALnac5aaCO6wL v2ekF3gi0SC7gh46inCTd8ywO5873uM3wZKTdeSqBDSC40U/xmiTnxOezPeXrzVX IkSyQF00I/T2ZBwtIPYhxjEadqTmVdMyES6ytjCT+nZNamYjHG0UKmeY1CXQDN2V 72MkBouISZn82JPE1M6l44kCV1KS4JZoEMAYo1z/EyUNlx9+hDiNs+Xm8KVeUq/P R7rtc5yQkRcHeSzWG5Gb0eE299iKWkEXTzPV/a7juWiya1k9MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfCj90v0CNZmt9SV39qvCO/vlieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzgzNDJkYTQtZTQ1Zi0z NjQ1LWE2MWYtOWZmMzk1YTY5OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPjPPD0PDqcqVwAC4MPM37bS6rLCu1IJU06DBDhig1z0ETnoWh4VP6P yT8DCWYD1435nsHonoeLFVbTvT3wMFl93VdSU3TgLaHed2KNo3bdgJ5HGn8ad2nb OBCoeUNMfLEhsHcl5YXMtryuaujfOoub7KZEUS/e4PxyUZnTImUHHx/Z+xGqWDof 8/xuqZdhx90sJf2rp+xZEZ9w/NfR9X7hYkgwdJjX+pExHXk+3Q9Yg7D7eiOgtGXc V96P/JAxZfK7SudlDhXO7KOXcKrpnIJWzsujzEHhXkcIt1wvel65kk2SswN+zn6X dS5nvLWlsWdUqCCu/Wrbq6ZG3Z9MT08= -----END CERTIFICATE-----Generated at Sun May 11 21:13:55 2025 by rpki-client