$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: MqCSceF2A4hqLC7HG1lAcUrMBzC40FSHhZtKrkBDX3c= Subject key identifier: 77:9B:E0:E7:74:8D:57:4C:61:FF:BE:B6:5A:81:5E:FD:31:C7:89:E9 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A3A1578459960C774A95BAA00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:78:45:99:60:c7:74:a9:5b:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=f35d6c5b-0b21-4dcc-a6d0-b57297dfa67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:3e:57:3d:68:81:4c:c9:4c:7d:82:c6:c7: 1a:2c:24:7d:4e:b9:53:1f:c5:ce:1f:ca:fa:f3:68: fe:08:98:c2:e3:bd:c0:f9:2e:5d:25:b6:ff:4d:f1: 8a:7b:32:50:41:18:0a:22:87:4a:23:dd:4a:65:5f: 98:cb:21:13:6f:84:bc:8b:34:46:b9:e0:7e:47:f6: 97:91:38:7c:1e:ce:78:22:16:a0:23:9c:f2:03:e7: 2f:e0:8b:3f:39:1e:80:14:26:c0:81:79:5b:09:53: 0a:3c:71:77:4f:b9:fc:08:5a:c0:3d:e9:50:36:08: 6f:81:91:38:9e:b4:b2:c3:13:d0:b2:22:d9:3a:09: 1d:d1:11:f2:d8:d4:47:c0:c5:c7:66:3f:76:b8:82: 0b:ca:60:1b:30:8f:c3:1b:60:58:78:be:20:c9:83: c6:3b:88:d4:a2:8e:f5:f0:67:45:62:41:58:16:ca: 40:63:f7:b5:ba:46:11:21:f0:63:2f:91:a4:dd:44: 99:91:87:33:12:67:f1:0b:f1:4b:89:3b:15:7c:f5: d2:7c:bf:35:a2:d9:59:7c:a4:e7:9a:9d:e1:c2:24: 13:8e:42:43:0a:ba:fc:b8:98:15:31:34:55:87:9b: d4:02:c4:00:94:91:8c:2d:85:dc:06:d2:eb:9c:12: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9B:E0:E7:74:8D:57:4C:61:FF:BE:B6:5A:81:5E:FD:31:C7:89:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c4:99:14:c5:e5:a6:dd:0f:c1:9c:f9:f2:b5:85:1f:04:0e: 18:6a:53:a5:1a:c9:a4:f6:cd:c7:f5:08:27:33:22:af:ba:be: 5a:96:7c:01:28:c7:ba:49:f7:38:14:73:30:da:a8:7e:1f:fd: c4:3e:4a:eb:ee:0a:30:ef:70:66:66:5f:f0:61:bb:65:81:00: cc:fb:ef:d4:5e:da:74:f4:f8:6a:8a:36:60:1f:ed:d5:6e:ce: ed:f4:3c:9d:47:f8:9c:6a:84:81:2a:00:b0:2f:1e:b6:fc:72: f7:52:82:9b:8f:e1:61:6e:8c:d3:6c:86:bd:34:0b:89:86:6a: 1e:d0:01:21:75:7f:bc:51:e0:46:47:42:c4:9b:f0:a4:1e:64: b8:89:de:55:e7:1b:a3:69:fb:56:46:89:6c:05:f9:40:c0:c0: dd:01:ed:06:13:1c:f7:c3:21:6f:36:cf:8d:56:03:a0:ad:a7: 3e:b1:fe:eb:d4:e5:ac:6f:18:ba:03:10:26:fb:4e:3b:31:e8: 44:ba:88:1f:67:9b:10:20:95:b1:cf:56:5e:a0:ca:bb:2e:bd: 3a:05:4c:15:15:ba:ab:d9:cc:a8:c8:ec:86:87:f4:c9:d7:12: a7:47:4d:c1:d3:b1:2f:94:e8:70:23:e4:aa:d5:b1:a4:05:db: c8:4a:ba:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXhFmWDHdKlbqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZjM1ZDZjNWItMGIyMS00ZGNjLWE2ZDAtYjU3Mjk3ZGZhNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYs+Vz1ogUzJTH2CxscaLCR9TrlTH8XOH8r6 82j+CJjC473A+S5dJbb/TfGKezJQQRgKIodKI91KZV+YyyETb4S8izRGueB+R/aX kTh8Hs54IhagI5zyA+cv4Is/OR6AFCbAgXlbCVMKPHF3T7n8CFrAPelQNghvgZE4 nrSywxPQsiLZOgkd0RHy2NRHwMXHZj92uIILymAbMI/DG2BYeL4gyYPGO4jUoo71 8GdFYkFYFspAY/e1ukYRIfBjL5Gk3USZkYczEmfxC/FLiTsVfPXSfL81otlZfKTn mp3hwiQTjkJDCrr8uJgVMTRVh5vUAsQAlJGMLYXcBtLrnBJLYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeb4Od0jVdMYf++tlqBXv0xx4npMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArEmRTF5abdD8Gc+fK1hR8EDhhqU6UayaT2zcf1CCczIq+6vlqWfAEo x7pJ9zgUczDaqH4f/cQ+SuvuCjDvcGZmX/Bhu2WBAMz779Re2nT0+GqKNmAf7dVu zu30PJ1H+JxqhIEqALAvHrb8cvdSgpuP4WFujNNshr00C4mGah7QASF1f7xR4EZH QsSb8KQeZLiJ3lXnG6Np+1ZGiWwF+UDAwN0B7QYTHPfDIW82z41WA6Ctpz6x/uvU 5axvGLoDECb7Tjsx6ES6iB9nmxAglbHPVl6gyrsuvToFTBUVuqvZzKjI7IaH9MnX EqdHTcHTsS+U6HAj5KrVsaQF28hKukQ= -----END CERTIFICATE-----Generated at Sun Jun 29 16:56:37 2025 by rpki-client