$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa File: 38342da4-e45f-3645-a61f-9ff395a6995d.roa (raw, json) Hash identifier: Ok17sDbu2xu6WNocJ3/7hEJRA9f8NUDFOkBzyxex4qE= Subject key identifier: 3E:97:C3:70:FA:44:99:9C:D4:D6:B2:EA:BF:4B:5B:E9:D5:35:A7:FF Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848CC7B9362B12C0107A4714180 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 7018 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:93:62:b1:2c:01:07:a4:71:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=51ae6791-7537-4442-9c54-e2f983db60ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:de:25:1a:96:06:c4:0a:3f:92:0a:96:2b: c6:04:db:63:cb:6f:ec:7c:dc:b7:8b:8e:9f:24:79: 08:4f:47:72:df:8c:a7:7c:af:27:a3:81:af:91:ca: 7e:02:98:50:2e:b8:2b:fb:50:61:01:db:89:29:f6: 09:d0:f5:0b:75:bb:93:67:55:6e:21:99:c3:f7:ea: 8c:12:c5:07:70:6a:41:97:2d:d5:50:a9:92:fd:f0: 0f:41:36:91:84:cc:79:47:f0:61:65:c7:98:de:6c: 2f:be:7d:82:4e:67:55:c5:f7:75:30:83:41:e1:30: 08:9b:7d:1f:d3:cb:87:b5:dd:5a:bf:f4:e1:9a:22: c7:db:37:fe:51:35:8e:3c:37:8a:ee:c2:ef:25:e3: c3:b9:61:5f:f1:71:8c:aa:ad:de:dc:62:64:c5:e8: aa:ef:79:e6:b1:25:43:03:ed:67:65:6f:d3:43:95: 70:98:d7:4a:75:76:31:9d:8c:c0:76:7b:b6:3c:5c: a8:95:94:f1:6a:f9:05:41:f3:96:f1:62:00:54:0b: ba:43:41:7f:74:de:92:8c:9b:29:84:f0:dc:d6:e8: 44:e9:e8:19:df:a3:e4:b9:8c:8d:6a:a7:37:dc:c6: a9:5d:5c:80:19:5d:d2:46:02:a4:29:07:4e:24:47: 79:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:97:C3:70:FA:44:99:9C:D4:D6:B2:EA:BF:4B:5B:E9:D5:35:A7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:af:2d:05:31:81:7d:6c:e2:8c:de:39:fb:f3:4c:57:95:94: 10:3c:11:9e:cd:52:97:b1:36:e4:fd:9f:c8:e7:d3:51:c3:f2: 45:58:dc:bf:b0:56:b6:a9:6c:31:85:eb:99:a7:41:86:3f:00: 62:5a:18:78:bc:86:9b:e4:e7:41:b7:69:f5:67:b9:33:82:85: 79:f7:38:93:39:6b:02:03:59:23:d3:98:70:16:10:f0:ce:08: a4:39:fd:c9:49:9f:f5:b6:9a:21:83:d1:54:40:3d:8c:3c:ac: 8a:da:f1:a5:d4:86:df:3c:11:68:5d:6e:a5:75:84:85:6b:63: 43:bb:2c:d7:eb:5f:2e:50:a5:c0:0d:ff:da:28:eb:e5:2b:ec: 50:ec:69:33:04:f1:3e:05:b0:24:1d:2f:b9:e2:c0:20:3e:f5: ac:4f:47:e7:9f:f7:2e:3f:aa:80:56:d8:4d:af:7e:8f:9d:c6: a6:43:cf:5c:bc:51:fa:b9:32:6a:38:12:a3:de:a1:3b:6b:77: ee:04:7f:78:4b:6f:73:98:21:f7:13:9c:35:78:1c:b9:e0:af: 05:f3:30:fb:a3:be:d3:a2:89:6d:d5:07:81:76:d8:03:d9:dd: 50:57:02:80:ce:bb:9b:cb:9f:95:f0:10:25:df:79:46:f3:76: 0f:66:61:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5NisSwBB6RxQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NTFhZTY3OTEtNzUzNy00NDQyLTljNTQtZTJmOTgzZGI2MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM/eJRqWBsQKP5IKlivGBNtjy2/sfNy3i46f JHkIT0dy34ynfK8no4Gvkcp+AphQLrgr+1BhAduJKfYJ0PULdbuTZ1VuIZnD9+qM EsUHcGpBly3VUKmS/fAPQTaRhMx5R/BhZceY3mwvvn2CTmdVxfd1MINB4TAIm30f 08uHtd1av/ThmiLH2zf+UTWOPDeK7sLvJePDuWFf8XGMqq3e3GJkxeiq73nmsSVD A+1nZW/TQ5VwmNdKdXYxnYzAdnu2PFyolZTxavkFQfOW8WIAVAu6Q0F/dN6SjJsp hPDc1uhE6egZ36PkuYyNaqc33MapXVyAGV3SRgKkKQdOJEd5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6Xw3D6RJmc1Nay6r9LW+nVNaf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzgzNDJkYTQtZTQ1Zi0z NjQ1LWE2MWYtOWZmMzk1YTY5OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqvLQUxgX1s4ozeOfvzTFeVlBA8EZ7NUpexNuT9n8jn01HD8kVY3L+w VrapbDGF65mnQYY/AGJaGHi8hpvk50G3afVnuTOChXn3OJM5awIDWSPTmHAWEPDO CKQ5/clJn/W2miGD0VRAPYw8rIra8aXUht88EWhdbqV1hIVrY0O7LNfrXy5QpcAN /9oo6+Ur7FDsaTME8T4FsCQdL7niwCA+9axPR+ef9y4/qoBW2E2vfo+dxqZDz1y8 Ufq5Mmo4EqPeoTtrd+4Ef3hLb3OYIfcTnDV4HLngrwXzMPujvtOiiW3VB4F22APZ 3VBXAoDOu5vLn5XwECXfeUbzdg9mYSs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:49 2025 by rpki-client