$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c8cd4c3a-e2b9-3b79-9005-5a2563c0f775.roa File: c8cd4c3a-e2b9-3b79-9005-5a2563c0f775.roa (raw, json) Hash identifier: QJKssV6ySbcva+YCyi2UG4XOy967+fxY8EShdO7+oKM= Subject key identifier: 7A:AD:37:43:62:5D:2D:06:5A:40:8D:72:8E:E4:E2:29:FD:B6:B9:37 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A43DB06E3D0E87AA326915410 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c8cd4c3a-e2b9-3b79-9005-5a2563c0f775.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 7018 IP address blocks: 149.143.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:06:e3:d0:e8:7a:a3:26:91:54:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=e16a1373-6196-40e8-8d3a-dfb4e0b37f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:67:e5:14:74:21:a0:03:31:45:80:a8:ad: 8c:38:f1:0a:48:56:1d:69:09:5a:9a:13:a0:39:a1: af:26:28:5e:29:f5:85:b0:0f:84:14:28:9d:9c:ea: 26:58:62:ed:30:b2:b7:f9:fa:59:b4:c6:39:4d:95: f2:cc:fc:9b:cf:b3:f1:3e:70:9f:7f:86:f7:77:be: 02:61:0c:5d:9f:d4:91:2e:2e:7d:6d:f0:b0:40:7a: 07:c7:23:96:54:6a:b4:c6:12:a2:5a:14:bb:d3:6a: bd:76:66:2c:a4:fd:5e:e3:8b:3e:23:d8:a9:a1:2c: ec:b9:02:df:97:9a:f9:37:d1:28:83:90:a7:b2:17: 92:a8:1d:b7:c4:c7:97:82:d5:27:38:53:b5:4c:85: f8:b4:e2:b7:7a:5f:f0:9c:93:8f:00:1c:ba:88:e6: 1f:f4:e8:56:f9:34:bc:16:b1:23:6f:17:c3:45:56: 9d:1f:ad:20:0b:61:21:3f:eb:20:ef:0a:d4:07:5f: 0a:df:d4:d5:7c:1f:51:06:3b:53:16:61:20:dc:c8: b4:6e:de:63:1c:34:42:ed:4c:45:f8:76:4d:8a:a3: d9:a1:04:85:bc:9d:63:c3:86:da:81:56:7a:40:38: 41:c2:5a:3e:ec:97:de:ef:f0:cb:47:5c:4d:71:67: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AD:37:43:62:5D:2D:06:5A:40:8D:72:8E:E4:E2:29:FD:B6:B9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c8cd4c3a-e2b9-3b79-9005-5a2563c0f775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:97:b8:2d:34:fe:93:28:7c:2c:fa:76:c6:5a:04:62:51:2c: 9e:e3:71:00:87:1e:31:90:58:f8:6f:fe:33:57:46:b3:c1:95: 25:33:b4:72:fe:8b:0a:83:7f:2d:cd:9a:c0:0e:05:e9:ff:e2: 3d:56:aa:4a:02:95:d0:42:12:8a:70:08:8e:2c:a4:07:2f:99: ea:b9:09:e2:ba:73:70:be:8f:08:76:d8:2e:6d:32:35:d1:01: dc:9a:cc:b4:32:b7:e1:01:62:60:84:97:96:6e:ff:b4:12:bb: 67:1f:9d:6f:20:70:a1:c9:13:88:4f:df:e5:f5:fb:2b:26:8e: 49:66:f8:60:52:a8:c7:2c:86:fe:6a:e9:41:36:e9:8c:0f:33: 57:42:e5:7b:24:7b:e8:c1:ad:70:e5:cd:34:33:ef:d8:9c:94: 58:40:e3:f5:85:5c:85:67:a4:1c:bf:ca:bd:4e:fb:4a:d8:53: ba:c1:d1:5f:d0:c1:13:db:cc:b8:7f:5e:65:e0:bc:0d:c7:5a: 2b:8b:e9:8c:7c:b7:56:b7:1a:f5:4c:aa:30:be:1d:f4:cf:a1: 44:d4:d4:2a:85:36:45:cb:a9:b9:66:4b:eb:31:0b:de:3e:30: 84:47:73:8e:e5:39:0a:99:88:7e:32:e6:3c:17:25:d0:09:cb: 0e:28:2c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wbj0Oh6oyaRVBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZTE2YTEzNzMtNjE5Ni00MGU4LThkM2EtZGZiNGUwYjM3ZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfVn5RR0IaADMUWAqK2MOPEKSFYdaQlamhOg OaGvJiheKfWFsA+EFCidnOomWGLtMLK3+fpZtMY5TZXyzPybz7PxPnCff4b3d74C YQxdn9SRLi59bfCwQHoHxyOWVGq0xhKiWhS702q9dmYspP1e44s+I9ipoSzsuQLf l5r5N9Eog5CnsheSqB23xMeXgtUnOFO1TIX4tOK3el/wnJOPABy6iOYf9OhW+TS8 FrEjbxfDRVadH60gC2EhP+sg7wrUB18K39TVfB9RBjtTFmEg3Mi0bt5jHDRC7UxF +HZNiqPZoQSFvJ1jw4bagVZ6QDhBwlo+7Jfe7/DLR1xNcWcqZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqtN0NiXS0GWkCNco7k4in9trk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYzhjZDRjM2EtZTJiOS0z Yjc5LTkwMDUtNWEyNTYzYzBmNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyXuC00/pMofCz6dsZaBGJRLJ7jcQCHHjGQWPhv/jNXRrPBlSUztHL+ iwqDfy3NmsAOBen/4j1WqkoCldBCEopwCI4spAcvmeq5CeK6c3C+jwh22C5tMjXR AdyazLQyt+EBYmCEl5Zu/7QSu2cfnW8gcKHJE4hP3+X1+ysmjklm+GBSqMcshv5q 6UE26YwPM1dC5Xske+jBrXDlzTQz79iclFhA4/WFXIVnpBy/yr1O+0rYU7rB0V/Q wRPbzLh/XmXgvA3HWiuL6Yx8t1a3GvVMqjC+HfTPoUTU1CqFNkXLqblmS+sxC94+ MIRHc47lOQqZiH4y5jwXJdAJyw4oLNQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:33:47 2025 by rpki-client