$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa File: 6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa (raw, json) Hash identifier: 9N+CZ3Xq9ynYMkaVPtw0IdK5eLstAKgySlbu2XOIhUM= Subject key identifier: 92:FA:56:76:B0:15:43:3B:C7:7C:D8:BA:5D:4D:C5:95:7D:74:7E:31 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A3A157C988FDE4A8BCA31BCC0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 1239 IP address blocks: 149.143.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7c:98:8f:de:4a:8b:ca:31:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=95b85bc8-3564-4c7a-ade9-16f31df00744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:91:2b:07:96:b4:50:49:c3:e8:8c:83:5a: e1:c8:85:0f:2b:40:54:63:ba:ee:28:61:13:1e:d7: f5:42:fb:5c:dd:bd:15:9b:c7:1c:a6:08:61:a6:83: 90:49:fa:18:7b:00:9c:6a:42:b8:df:b7:18:7f:4e: 42:2c:bb:d7:1c:77:a1:ff:ba:0a:11:d0:cb:50:59: a0:a9:6a:62:63:ef:8b:b6:e5:7c:6d:03:43:e7:fb: 80:2b:3c:76:0d:52:bd:99:52:25:a6:75:36:d6:44: 3b:80:d3:4f:1a:8f:ba:21:48:de:b8:49:4f:4e:49: e8:26:6b:a5:2d:04:7b:3e:90:db:97:29:8d:f3:60: 87:75:dd:94:07:6a:fe:75:b9:a9:92:9a:f2:2d:f0: ed:fe:dc:07:a3:47:19:a6:5b:c6:ba:df:05:ac:60: 1b:88:d8:cb:96:19:1b:c5:7e:73:5b:8b:84:3b:bc: 4f:ec:3c:7a:69:a0:78:58:84:8c:03:25:bd:ef:9f: 99:91:b9:ae:7e:05:e6:31:92:c6:e3:cd:90:eb:93: 04:cf:b0:7b:0f:62:0a:f0:8f:46:39:47:45:ed:1f: 3f:74:49:2c:49:52:3d:f0:1d:e3:d1:31:73:d2:e3: e6:d6:1f:6e:4a:05:f5:6a:ce:ce:33:d7:ad:a5:55: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FA:56:76:B0:15:43:3B:C7:7C:D8:BA:5D:4D:C5:95:7D:74:7E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6d7a1818-b03f-344d-ba6f-d2f48d6d4b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:06:c8:3d:25:1d:71:66:ad:77:5b:98:07:d0:e9:d5:ef:dd: dd:bc:c2:ed:83:45:2f:23:91:d5:64:3f:43:1e:84:64:f7:f2: 1e:5b:1b:f3:5c:12:b0:a3:de:7b:89:62:2b:80:c9:c9:d8:86: 04:fd:37:90:af:10:e3:9b:30:f4:58:9e:b7:e6:59:f8:bd:ac: ab:1c:15:d4:4a:08:bc:3f:00:fa:fc:b7:aa:aa:91:fa:eb:32: 2c:45:3a:6b:b6:d0:8c:e6:60:ed:cb:98:91:b9:3f:09:b1:c5: c4:74:77:a8:2d:54:6d:6a:35:40:cd:4c:84:49:5f:41:0d:40: 13:ba:fb:ee:18:6e:3c:f8:f4:31:4c:96:7f:aa:d3:1e:95:dd: 4d:bc:97:a1:7a:a6:ba:32:69:41:e4:0f:b0:b6:83:43:b4:56: 17:58:7a:6c:8e:f2:38:64:ca:01:e0:3f:d1:17:e6:ea:31:e3: 05:e5:24:01:5b:61:a1:cc:c3:34:67:21:8b:bd:98:f0:9c:88: bd:28:0d:4d:89:d1:bd:46:81:03:57:b3:99:59:69:fc:d1:43: 52:1e:fa:a1:81:41:2d:78:3e:30:38:f2:a7:76:a5:a3:0f:46: d0:fe:92:60:47:a6:c7:0f:40:6d:0a:90:cb:9d:e0:58:02:bd: 2b:ea:af:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXyYj95Ki8oxvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk OTViODViYzgtMzU2NC00YzdhLWFkZTktMTZmMzFkZjAwNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVCRKweWtFBJw+iMg1rhyIUPK0BUY7ruKGET Htf1Qvtc3b0Vm8ccpghhpoOQSfoYewCcakK437cYf05CLLvXHHeh/7oKEdDLUFmg qWpiY++LtuV8bQND5/uAKzx2DVK9mVIlpnU21kQ7gNNPGo+6IUjeuElPTknoJmul LQR7PpDblymN82CHdd2UB2r+dbmpkpryLfDt/twHo0cZplvGut8FrGAbiNjLlhkb xX5zW4uEO7xP7Dx6aaB4WISMAyW975+ZkbmufgXmMZLG482Q65MEz7B7D2IK8I9G OUdF7R8/dEksSVI98B3j0TFz0uPm1h9uSgX1as7OM9etpVWdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL6VnawFUM7x3zYul1NxZV9dH4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNmQ3YTE4MTgtYjAzZi0z NDRkLWJhNmYtZDJmNDhkNmQ0YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsGyD0lHXFmrXdbmAfQ6dXv3d28wu2DRS8jkdVkP0MehGT38h5bG/Nc ErCj3nuJYiuAycnYhgT9N5CvEOObMPRYnrfmWfi9rKscFdRKCLw/APr8t6qqkfrr MixFOmu20IzmYO3LmJG5PwmxxcR0d6gtVG1qNUDNTIRJX0ENQBO6++4Ybjz49DFM ln+q0x6V3U28l6F6proyaUHkD7C2g0O0VhdYemyO8jhkygHgP9EX5uox4wXlJAFb YaHMwzRnIYu9mPCciL0oDU2J0b1GgQNXs5lZafzRQ1Ie+qGBQS14PjA48qd2paMP RtD+kmBHpscPQG0KkMud4FgCvSvqr/c= -----END CERTIFICATE-----Generated at Sun Jun 29 17:08:14 2025 by rpki-client