$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa File: 73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa (raw, json) Hash identifier: mggu0b2kQj+ed+OPQSXhvlQp4BnO2/KAE5bC1Rh5mpY= Subject key identifier: B7:7C:87:F4:03:F8:34:32:24:69:DF:80:FF:B3:3D:8F:6E:D7:B6:BE Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A43DB0076025D674B733B5A00 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 7018 IP address blocks: 149.143.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:00:76:02:5d:67:4b:73:3b:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=fa65dcb3-39c3-4649-a391-35d2458c8da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:cb:a3:a6:45:bc:28:21:1b:e8:fb:a5:3f: 5b:8a:05:57:73:35:94:84:bb:09:b3:29:c5:b8:59: 1a:44:cd:7c:fe:50:82:b8:36:8e:e9:91:d4:e6:8c: 1d:1a:c5:6c:0b:c3:53:d8:4a:54:83:87:06:d5:50: 7f:b8:c4:d7:70:3e:f4:dd:55:1f:29:94:16:1f:71: 32:4a:20:dc:3a:2d:3d:92:89:27:77:8d:e1:b0:f8: 95:c9:93:0a:46:25:e2:c7:23:00:79:63:bf:f0:c3: cc:ec:89:37:66:21:18:9d:cc:a3:85:87:c6:c2:83: 96:93:d8:9d:6a:6e:cf:c6:c2:81:f1:41:b1:fd:15: ba:7b:b5:d4:83:d5:ca:39:6f:c8:92:56:67:7a:32: f9:6f:86:12:20:97:ba:54:93:ef:c5:a1:2c:b3:9b: e6:6d:9a:2a:49:c9:2a:3a:dc:81:46:8a:9d:b2:ff: f0:9f:41:76:3f:4c:76:5a:2e:06:e6:2c:b8:c6:52: e3:27:47:7f:29:f3:9e:0b:59:66:2a:06:88:92:d6: 68:f8:56:81:7d:4b:37:5b:4f:21:a1:d8:68:51:0e: 48:fa:c1:dc:fb:e8:21:a5:11:5c:2f:0e:55:37:f3: bb:40:01:ef:e7:f3:b8:f1:1b:44:06:54:94:82:9d: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:87:F4:03:F8:34:32:24:69:DF:80:FF:B3:3D:8F:6E:D7:B6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0d:c7:39:63:00:26:2c:98:18:52:8f:04:aa:54:0a:c4:cc: c6:0c:e6:74:01:19:d8:8c:72:ab:11:9c:a1:a6:30:4d:8e:ba: 75:56:48:4b:84:5b:2b:ae:e1:61:75:23:06:3f:2a:a0:87:c9: 0a:3f:3d:5a:54:07:23:f6:11:10:81:5c:31:a0:82:fe:ee:e1: c9:06:37:43:63:b1:f6:03:6a:ff:99:0d:6e:d1:65:06:33:bf: 2e:cd:a4:0a:81:68:fb:64:26:f5:21:70:fa:d1:bd:23:f6:2b: 68:ac:5f:a1:de:f8:ac:62:f2:28:4e:2e:7a:a5:66:62:53:83: 4e:8b:b0:3f:29:1e:93:5e:55:bb:13:5c:c3:72:b4:b5:5b:fb: 0b:5b:10:02:d1:32:37:f0:5b:ed:8a:1e:27:a5:67:4d:ed:f2: 4d:6d:9a:b3:c4:25:d2:b6:d4:a8:f9:2e:dd:20:0c:62:75:e4: cc:8b:25:47:3b:8f:ea:0c:6b:ac:24:23:be:ac:d0:06:66:13: 64:5c:52:23:05:4a:eb:70:44:32:c0:76:85:cc:9c:4b:cd:f0: 75:9b:20:c6:88:9d:45:68:c1:9c:03:92:15:8c:20:10:32:46: 7c:76:80:af:46:5a:38:2a:a7:75:da:cf:a0:9f:33:86:18:6d: 66:11:9f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wB2Al1nS3M7WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZmE2NWRjYjMtMzljMy00NjQ5LWEzOTEtMzVkMjQ1OGM4ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJnLo6ZFvCghG+j7pT9bigVXczWUhLsJsynF uFkaRM18/lCCuDaO6ZHU5owdGsVsC8NT2EpUg4cG1VB/uMTXcD703VUfKZQWH3Ey SiDcOi09koknd43hsPiVyZMKRiXixyMAeWO/8MPM7Ik3ZiEYncyjhYfGwoOWk9id am7PxsKB8UGx/RW6e7XUg9XKOW/IklZnejL5b4YSIJe6VJPvxaEss5vmbZoqSckq OtyBRoqdsv/wn0F2P0x2Wi4G5iy4xlLjJ0d/KfOeC1lmKgaIktZo+FaBfUs3W08h odhoUQ5I+sHc++ghpRFcLw5VN/O7QAHv5/O48RtEBlSUgp14PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd8h/QD+DQyJGnfgP+zPY9u17a+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzNhMmM4ZGEtN2MyYi0z ZmEwLThjNDQtMzE0NmI2YjlkODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMNxzljACYsmBhSjwSqVArEzMYM5nQBGdiMcqsRnKGmME2OunVWSEuE Wyuu4WF1IwY/KqCHyQo/PVpUByP2ERCBXDGggv7u4ckGN0NjsfYDav+ZDW7RZQYz vy7NpAqBaPtkJvUhcPrRvSP2K2isX6He+Kxi8ihOLnqlZmJTg06LsD8pHpNeVbsT XMNytLVb+wtbEALRMjfwW+2KHielZ03t8k1tmrPEJdK21Kj5Lt0gDGJ15MyLJUc7 j+oMa6wkI76s0AZmE2RcUiMFSutwRDLAdoXMnEvN8HWbIMaInUVowZwDkhWMIBAy Rnx2gK9GWjgqp3Xaz6CfM4YYbWYRn0c= -----END CERTIFICATE-----Generated at Sun Jun 29 17:56:11 2025 by rpki-client