$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa File: de898606-3a0d-391e-a76b-47d81b014a7d.roa (raw, json) Hash identifier: ArdPdY72WN/au1pwyv7GPfvG6wKQbAbqSzHotoWkqjc= Subject key identifier: B5:D4:7B:6F:49:7B:AA:73:BE:68:D6:A7:EB:DF:36:AC:BF:7A:33:C1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A45403B55174D29BCB9EA5780 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 396356 IP address blocks: 149.143.162.0/24 maxlen: 24 149.143.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3b:55:17:4d:29:bc:b9:ea:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=ea45511c-31dc-45f0-b888-66092806eb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d6:8d:90:2f:4b:51:3d:19:1e:02:24:71:35: fa:ad:c5:71:27:a6:6e:4c:df:9b:89:f2:99:76:7e: 34:e7:fc:4d:00:11:d9:71:f4:32:b9:79:b1:34:83: 18:38:31:e8:2c:64:d8:59:55:78:43:97:7c:db:03: b9:95:ee:13:af:bc:b9:e1:d7:3f:f9:b1:4a:0f:e9: b5:33:f1:73:67:31:83:cd:79:c3:d8:4b:d4:a8:16: 1a:81:bc:65:00:b9:bc:14:f6:a4:87:fa:7c:01:c4: c5:f7:11:f7:74:61:ad:aa:2f:d1:88:ab:64:9c:44: 7f:e0:18:26:b3:12:2d:09:48:ba:f7:01:bb:e6:dc: e6:8e:dc:80:fe:36:9a:52:52:df:6c:20:43:2a:db: 37:55:7f:9c:68:c0:01:d3:38:18:d0:e5:45:1e:c0: 18:85:87:60:b4:a8:50:92:ac:af:90:71:5f:95:81: 12:33:3c:8c:74:19:fd:09:97:fd:c4:94:b8:53:89: 21:65:ca:40:44:e7:d7:e4:80:5f:d2:2c:d3:ca:44: 02:16:10:fc:c9:94:f2:32:2e:d7:14:c1:86:2d:21: 8f:ac:41:38:62:95:0e:b9:19:cd:fb:c5:29:e1:30: 3a:0a:ef:9a:58:d9:29:c3:10:db:a4:1b:b0:b6:40: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D4:7B:6F:49:7B:AA:73:BE:68:D6:A7:EB:DF:36:AC:BF:7A:33:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/de898606-3a0d-391e-a76b-47d81b014a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.162.0/24 149.143.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e2:44:aa:67:a1:84:64:8b:4d:f1:ba:b7:e0:61:3c:d5:f0: f5:a0:58:4b:e5:2f:26:fb:19:7c:b3:1d:ef:fc:f1:a0:f8:db: 39:14:3f:1b:e1:5c:e4:59:9c:91:6d:3d:46:2c:55:ab:5f:69: c1:1b:96:48:d6:62:14:d8:b4:bd:85:bd:1d:8f:62:a5:f8:7e: e3:a3:63:05:90:57:3d:9d:82:b8:d5:2d:51:6e:e0:46:2a:0f: 73:59:17:d0:14:39:8c:f1:bc:c6:38:91:96:96:81:61:a2:5c: af:61:f8:5d:18:6c:40:04:ee:eb:ed:94:f6:dd:f2:93:0d:0d: 10:e9:78:7c:48:77:97:2d:be:46:cc:41:7c:4b:b0:dd:31:ff: db:d4:96:49:2a:ba:54:18:0f:2e:22:2e:a4:3a:7c:2f:15:8c: d6:6b:94:8e:4a:59:5e:61:c1:c6:62:93:15:9e:4c:4d:5b:5c: 35:5d:65:49:3c:03:b3:59:e5:97:cf:af:7f:a6:6e:46:25:15: d0:b5:d1:b4:a3:4e:b8:2c:2f:92:4b:55:cb:84:14:ec:51:2d: e5:1c:e6:b3:de:d9:89:4e:ee:27:13:09:84:24:81:46:53:25: 7c:a9:26:54:f0:92:b4:81:9a:30:96:e6:a8:74:45:73:1d:c0: 92:ff:21:03 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpFQDtVF00pvLnqV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZWE0NTUxMWMtMzFkYy00NWYwLWI4ODgtNjYwOTI4MDZlYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNaNkC9LUT0ZHgIkcTX6rcVxJ6ZuTN+bifKZ dn405/xNABHZcfQyuXmxNIMYODHoLGTYWVV4Q5d82wO5le4Tr7y54dc/+bFKD+m1 M/FzZzGDzXnD2EvUqBYagbxlALm8FPakh/p8AcTF9xH3dGGtqi/RiKtknER/4Bgm sxItCUi69wG75tzmjtyA/jaaUlLfbCBDKts3VX+caMAB0zgY0OVFHsAYhYdgtKhQ kqyvkHFflYESMzyMdBn9CZf9xJS4U4khZcpAROfX5IBf0izTykQCFhD8yZTyMi7X FMGGLSGPrEE4YpUOuRnN+8Up4TA6Cu+aWNkpwxDbpBuwtkCfoQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLXUe29Je6pzvmjWp+vfNqy/ejPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZGU4OTg2MDYtM2EwZC0z OTFlLWE3NmItNDdkODFiMDE0YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAlY+iAwQA lY+wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADziRKpnoYRki03xurfgYTzV8PWgWEvlLyb7GXyzHe/88aD4 2zkUPxvhXORZnJFtPUYsVatfacEblkjWYhTYtL2FvR2PYqX4fuOjYwWQVz2dgrjV LVFu4EYqD3NZF9AUOYzxvMY4kZaWgWGiXK9h+F0YbEAE7uvtlPbd8pMNDRDpeHxI d5ctvkbMQXxLsN0x/9vUlkkqulQYDy4iLqQ6fC8VjNZrlI5KWV5hwcZikxWeTE1b XDVdZUk8A7NZ5ZfPr3+mbkYlFdC10bSjTrgsL5JLVcuEFOxRLeUc5rPe2YlO7icT CYQkgUZTJXypJlTwkrSBmjCW5qh0RXMdwJL/IQM= -----END CERTIFICATE-----Generated at Mon Jun 30 17:31:15 2025 by rpki-client