$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa File: 38342da4-e45f-3645-a61f-9ff395a6995d.roa (raw, json) Hash identifier: cQ+ozwYjYsxvAQVVR9vsvDiOH90staPieYK5CQgea80= Subject key identifier: 55:56:FF:E5:F6:7B:6B:F7:3E:05:BC:23:B2:98:89:00:EC:85:67:0C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A8B0B54A9361187B39E5BEB40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7018 IP address blocks: 149.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:54:a9:36:11:87:b3:9e:5b:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=bea64378-5c58-4ea5-aea9-9da8b6c0297d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5e:2c:6a:95:1a:dc:f4:05:f2:10:e8:ca:62: 2a:a0:ac:2f:a0:09:90:d3:86:e6:38:9b:d9:3b:b3: d6:5a:e0:02:db:0d:44:3a:95:84:e6:fc:97:1f:a9: c7:15:35:c6:4d:32:a0:34:1c:9d:25:2a:75:09:c8: 77:b3:0d:20:10:e2:6d:fb:28:61:91:ed:4c:c6:63: ea:eb:f0:1c:cf:80:5d:fa:f3:78:43:48:93:dc:14: a3:a9:23:c4:4d:d0:45:b0:c4:33:3d:a9:d2:af:4c: ae:5f:4d:e2:06:bc:22:24:c8:dd:33:d6:0d:3b:20: ca:6e:53:13:6a:ad:19:dd:92:cb:0b:cf:22:b4:81: 38:63:ac:18:2e:4f:ef:89:58:2b:20:1a:e0:0a:86: d1:c4:03:1b:4f:9b:69:3e:ae:d9:86:58:63:19:fb: ab:74:3a:7c:dc:bb:1b:b9:e2:d4:28:0d:f4:e2:4b: ff:49:61:e2:b1:9f:e6:cf:55:24:73:26:cf:bb:d3: 50:06:10:2c:b1:6d:6e:de:20:43:37:18:12:2d:4a: 54:7a:fb:27:02:bc:e3:da:17:f1:8c:54:ce:d9:ae: 95:9f:3f:1f:65:c7:f2:4b:af:41:c3:30:56:4a:d8: 6a:b8:c0:97:5a:8d:3d:14:c4:c8:1a:0e:5f:04:54: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:56:FF:E5:F6:7B:6B:F7:3E:05:BC:23:B2:98:89:00:EC:85:67:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d5:ed:a8:4a:11:47:1e:43:fc:2c:df:50:8b:ee:9a:7c:5b: 59:90:95:ce:aa:d3:6b:53:ec:6a:bf:3c:35:65:9c:18:77:58: 6e:93:7a:4b:0a:f2:47:5e:5b:3d:53:a5:0d:e8:d7:6f:15:76: 45:93:72:49:eb:d7:0f:73:a6:85:8c:e3:ef:46:3f:f7:7a:55: 22:06:74:6c:15:0a:c5:6d:ee:64:68:4e:81:51:25:10:1b:a7: 18:f5:1c:79:b5:75:8c:86:b0:e7:43:1b:80:d1:9b:6e:59:93: 53:55:0e:ec:28:99:fe:87:6b:1a:c5:49:60:d4:9b:4c:16:62: a8:79:d8:e7:46:af:a9:3f:d0:53:7c:a4:8f:6c:09:f6:17:d5: b7:e8:e8:0d:3f:79:50:50:7e:82:74:be:38:4e:d2:a1:92:b8: 7f:40:bb:d4:9b:40:ab:ea:37:cc:4e:4e:3a:c7:1a:90:e4:bf: 2a:9e:4c:e9:31:53:f7:d6:c2:c9:33:b9:84:91:7b:79:0b:c1: 68:30:54:f0:25:22:de:3c:a9:86:c7:e3:28:46:5c:02:69:4c: e2:aa:dc:77:2a:d9:15:e1:cf:c8:a6:73:85:f2:6c:7d:65:f5: 01:0b:79:89:bc:72:3c:97:c1:eb:1f:57:61:eb:d4:0c:a2:ff: 3f:51:c8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1SpNhGHs55b60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk YmVhNjQzNzgtNWM1OC00ZWE1LWFlYTktOWRhOGI2YzAyOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh14sapUa3PQF8hDoymIqoKwvoAmQ04bmOJvZ O7PWWuAC2w1EOpWE5vyXH6nHFTXGTTKgNBydJSp1Cch3sw0gEOJt+yhhke1MxmPq 6/Acz4Bd+vN4Q0iT3BSjqSPETdBFsMQzPanSr0yuX03iBrwiJMjdM9YNOyDKblMT aq0Z3ZLLC88itIE4Y6wYLk/viVgrIBrgCobRxAMbT5tpPq7ZhlhjGfurdDp83Lsb ueLUKA304kv/SWHisZ/mz1UkcybPu9NQBhAssW1u3iBDNxgSLUpUevsnArzj2hfx jFTO2a6Vnz8fZcfyS69BwzBWSthquMCXWo09FMTIGg5fBFQM0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVW/+X2e2v3PgW8I7KYiQDshWcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMzgzNDJkYTQtZTQ1Zi0z NjQ1LWE2MWYtOWZmMzk1YTY5OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILV7ahKEUceQ/ws31CL7pp8W1mQlc6q02tT7Gq/PDVlnBh3WG6TeksK 8kdeWz1TpQ3o128VdkWTcknr1w9zpoWM4+9GP/d6VSIGdGwVCsVt7mRoToFRJRAb pxj1HHm1dYyGsOdDG4DRm25Zk1NVDuwomf6HaxrFSWDUm0wWYqh52OdGr6k/0FN8 pI9sCfYX1bfo6A0/eVBQfoJ0vjhO0qGSuH9Au9SbQKvqN8xOTjrHGpDkvyqeTOkx U/fWwskzuYSRe3kLwWgwVPAlIt48qYbH4yhGXAJpTOKq3Hcq2RXhz8imc4XybH1l 9QELeYm8cjyXwesfV2Hr1Ayi/z9RyCU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:30:16 2025 by rpki-client