$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa File: 48c11378-660d-3999-a7c5-2245378b1910.roa (raw, json) Hash identifier: eil4cTWJq2iLSmcH0fUU2YSNApWWrJmKB0gbuA0z0CY= Subject key identifier: 86:2B:E9:92:05:B4:B4:C8:B5:A8:FF:EC:53:4F:9E:6E:A9:A9:A1:2A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849C0A4CEE96E726C63E08F7740 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 149.143.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ce:e9:6e:72:6c:63:e0:8f:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=5ea7a292-c0aa-4a16-8632-fb44eadae45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:13:1f:74:6f:b8:7c:9c:1d:df:08:52:e5: 33:49:80:25:93:85:b1:73:d9:2d:80:2c:22:b3:ab: 6f:ce:2e:9a:e4:72:a6:01:01:03:86:c1:5c:e3:dd: 32:aa:75:bb:ce:1e:be:d3:e8:24:43:dd:14:c7:f6: 53:22:32:77:19:e9:50:b7:a1:40:3b:55:02:57:29: 11:49:8c:fe:e1:d8:5a:65:0a:a9:8c:d0:08:d5:c2: 9c:29:cf:88:fd:f6:38:b3:7e:ac:48:d8:ef:12:23: 5f:07:6b:9a:6b:f7:a4:1f:93:43:63:34:c6:b3:e3: 8c:78:c5:07:c1:ac:bf:4e:ff:62:22:dd:50:56:64: b5:fa:21:73:61:51:35:34:ca:7a:0b:55:7d:9e:68: 54:56:f4:68:61:a9:64:29:27:fe:b6:22:49:08:e5: 4b:e9:10:b4:00:5e:55:d3:b8:38:47:e8:cc:e1:77: 6d:99:df:34:66:59:16:2f:f8:07:af:de:ca:fe:59: 52:3d:20:22:f6:45:35:a8:57:a4:0e:2e:e6:e4:ae: f4:2a:11:be:e0:7f:35:4b:84:a5:3f:2e:57:ae:25: d7:82:52:62:68:6f:1f:a7:be:bb:27:7f:f9:5d:20: 98:33:fb:5f:6c:30:74:fa:80:55:98:23:71:ec:48: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:E9:92:05:B4:B4:C8:B5:A8:FF:EC:53:4F:9E:6E:A9:A9:A1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:45:dd:52:9d:b7:64:5e:18:96:8c:a1:57:0a:4e:69:d3:5a: 8f:1e:b7:f9:4c:1e:55:fd:a9:f8:85:fd:64:28:0e:e1:fa:2b: 75:ea:90:75:e5:d0:84:f6:65:69:a1:6b:17:b5:1d:45:fa:1d: 8b:80:e9:00:ed:83:f2:67:13:06:b1:0e:24:ff:22:7f:c0:9c: 42:67:01:e8:a3:4f:40:7c:8c:d4:2e:91:64:57:6e:10:81:cf: 2f:9f:c6:fd:ef:0c:09:3d:49:82:33:dc:49:1b:8f:13:fc:98: 78:59:01:67:fb:67:3f:c5:b1:15:6f:8d:3c:0d:6d:ba:14:eb: 29:20:26:3d:10:56:19:c8:1b:10:c7:6f:cf:2a:a0:a3:69:b7: 54:1e:85:7d:38:82:dc:37:af:cf:61:ff:23:e5:27:35:60:e4: dc:13:d9:7b:70:f3:dc:58:f4:e3:13:f5:c0:39:ef:59:27:d8: ce:09:7c:8c:af:15:6f:a1:81:9b:2d:71:64:f0:d8:c1:17:e3: a1:ae:b3:87:52:3b:f9:ae:45:7a:a2:c5:aa:13:f2:4b:64:49: 1a:ba:46:18:26:13:74:9d:b8:3e:09:5c:9c:42:a4:c7:8b:f6: 37:fc:67:a4:4e:f9:72:81:c2:76:f1:f4:87:a4:81:6a:ad:64: c3:62:30:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApM7pbnJsY+CPd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NWVhN2EyOTItYzBhYS00YTE2LTg2MzItZmI0NGVhZGFlNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdQTH3RvuHycHd8IUuUzSYAlk4Wxc9ktgCwi s6tvzi6a5HKmAQEDhsFc490yqnW7zh6+0+gkQ90Ux/ZTIjJ3GelQt6FAO1UCVykR SYz+4dhaZQqpjNAI1cKcKc+I/fY4s36sSNjvEiNfB2uaa/ekH5NDYzTGs+OMeMUH way/Tv9iIt1QVmS1+iFzYVE1NMp6C1V9nmhUVvRoYalkKSf+tiJJCOVL6RC0AF5V 07g4R+jM4Xdtmd80ZlkWL/gHr97K/llSPSAi9kU1qFekDi7m5K70KhG+4H81S4Sl Py5XriXXglJiaG8fp767J3/5XSCYM/tfbDB0+oBVmCNx7Ei9CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYr6ZIFtLTItaj/7FNPnm6pqaEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDhjMTEzNzgtNjYwZC0z OTk5LWE3YzUtMjI0NTM3OGIxOTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhF3VKdt2ReGJaMoVcKTmnTWo8et/lMHlX9qfiF/WQoDuH6K3XqkHXl 0IT2ZWmhaxe1HUX6HYuA6QDtg/JnEwaxDiT/In/AnEJnAeijT0B8jNQukWRXbhCB zy+fxv3vDAk9SYIz3EkbjxP8mHhZAWf7Zz/FsRVvjTwNbboU6ykgJj0QVhnIGxDH b88qoKNpt1QehX04gtw3r89h/yPlJzVg5NwT2Xtw89xY9OMT9cA571kn2M4JfIyv FW+hgZstcWTw2MEX46Gus4dSO/muRXqixaoT8ktkSRq6RhgmE3SduD4JXJxCpMeL 9jf8Z6RO+XKBwnbx9IekgWqtZMNiMFY= -----END CERTIFICATE-----Generated at Sun May 11 22:40:48 2025 by rpki-client