$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa File: 48c11378-660d-3999-a7c5-2245378b1910.roa (raw, json) Hash identifier: blC5/1BJi4Nt9UJp6RmveExg9SvdzGVFp4sBrPClNgw= Subject key identifier: 55:5B:6B:C9:6E:42:31:95:DE:D9:0A:AE:6B:1A:C8:27:B1:0B:F7:6A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A9FFB8956ED27B891BB512B80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 9009 IP address blocks: 149.143.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:89:56:ed:27:b8:91:bb:51:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=045c5c78-21e4-4b98-90b3-0d672487977b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5e:0e:cb:df:2a:64:57:d0:45:c4:15:2d:60: c4:64:53:e1:f7:38:36:df:a7:25:6e:37:f0:5a:e0: b1:ae:d2:74:2e:ab:1d:8d:91:cd:26:bd:a6:33:f8: 24:47:a6:f3:f7:ff:d5:31:f8:c3:d0:dd:40:5c:d7: 39:15:26:ef:59:d1:64:6d:da:f3:bf:82:4a:6b:2a: 7d:58:9c:fc:54:46:36:6a:3b:7e:e7:9e:4d:ec:7f: 86:90:ba:d3:e0:24:de:98:9c:69:1f:3c:77:d6:57: bc:01:20:2b:a9:57:1a:8f:e8:ba:e4:8a:0c:cb:93: 39:ef:a9:7f:6d:66:16:f0:f7:48:dc:8b:16:63:1a: 10:47:01:97:00:b2:a9:6e:a4:78:68:f1:95:5e:14: e5:d3:19:b8:c3:41:57:2a:33:52:24:ca:9a:e5:fd: 8b:d0:b6:d4:6c:4d:0b:a5:2f:97:42:c3:19:45:41: e2:75:c1:e7:99:96:0c:5b:fa:cc:9f:45:93:d1:95: 5d:67:67:20:8d:4e:d8:5d:c7:e1:1b:5d:85:25:d2: 7d:4b:bd:86:69:93:7e:fc:91:f8:11:a4:f1:0b:85: b7:cb:61:5c:25:b2:7d:65:45:28:f1:80:8b:34:ac: 0c:85:17:b1:67:21:1e:cb:4e:6d:dc:ac:55:6e:d0: 75:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5B:6B:C9:6E:42:31:95:DE:D9:0A:AE:6B:1A:C8:27:B1:0B:F7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/48c11378-660d-3999-a7c5-2245378b1910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e2:48:e1:53:e3:71:9e:86:83:ed:65:9e:15:b3:f6:29:b6: 58:20:38:1e:87:1a:3c:95:a3:90:86:6b:58:48:3a:dc:27:23: f4:69:7c:8c:cd:f2:ed:e6:82:db:e7:24:fe:f4:a4:e7:02:ef: 18:e5:b0:05:f6:4f:62:97:91:52:a7:a1:01:d0:68:be:de:a6: c4:e9:81:15:6c:c4:c8:c9:a0:e4:12:4d:45:2e:3b:80:dc:e7: 37:28:53:53:34:98:36:61:44:98:ef:50:fa:f5:42:b2:06:46: 57:b1:fb:47:7f:9a:50:85:5e:15:fa:73:15:22:5e:3f:34:fa: 5f:6a:79:36:23:f2:a6:17:99:df:c4:96:5d:1f:07:b8:b9:d6: 04:5c:56:e3:74:f7:22:7c:92:8d:6a:d6:92:69:dd:63:5b:2c: b8:55:19:43:8d:d6:c3:46:79:e7:4a:ef:e5:a3:6a:20:57:71: 85:57:f1:5f:a0:6f:f1:cf:c6:ed:f3:73:8d:9d:34:0e:02:72: 8a:24:e9:49:96:74:7c:1a:97:18:a6:f1:b7:6e:9d:db:14:1d: 64:90:3e:e5:59:0f:a3:ea:1c:4f:d2:c8:3a:99:6b:4d:9e:46: e5:64:f5:4f:dc:ba:42:cf:dd:0a:97:f6:2d:a0:be:48:c5:76: 02:36:67:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+4lW7Se4kbtRK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MDQ1YzVjNzgtMjFlNC00Yjk4LTkwYjMtMGQ2NzI0ODc5NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV4Oy98qZFfQRcQVLWDEZFPh9zg236clbjfw WuCxrtJ0LqsdjZHNJr2mM/gkR6bz9//VMfjD0N1AXNc5FSbvWdFkbdrzv4JKayp9 WJz8VEY2ajt+555N7H+GkLrT4CTemJxpHzx31le8ASArqVcaj+i65IoMy5M576l/ bWYW8PdI3IsWYxoQRwGXALKpbqR4aPGVXhTl0xm4w0FXKjNSJMqa5f2L0LbUbE0L pS+XQsMZRUHidcHnmZYMW/rMn0WT0ZVdZ2cgjU7YXcfhG12FJdJ9S72GaZN+/JH4 EaTxC4W3y2FcJbJ9ZUUo8YCLNKwMhRexZyEey05t3KxVbtB1gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVba8luQjGV3tkKrmsayCexC/dqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDhjMTEzNzgtNjYwZC0z OTk5LWE3YzUtMjI0NTM3OGIxOTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjiSOFT43GehoPtZZ4Vs/YptlggOB6HGjyVo5CGa1hIOtwnI/RpfIzN 8u3mgtvnJP70pOcC7xjlsAX2T2KXkVKnoQHQaL7epsTpgRVsxMjJoOQSTUUuO4Dc 5zcoU1M0mDZhRJjvUPr1QrIGRlex+0d/mlCFXhX6cxUiXj80+l9qeTYj8qYXmd/E ll0fB7i51gRcVuN09yJ8ko1q1pJp3WNbLLhVGUON1sNGeedK7+WjaiBXcYVX8V+g b/HPxu3zc42dNA4Ccook6UmWdHwalxim8bdundsUHWSQPuVZD6PqHE/SyDqZa02e RuVk9U/cukLP3QqX9i2gvkjFdgI2Z8I= -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:20 2025 by rpki-client