$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa File: 63ce919a-8c24-37d5-b6be-92e17635aec9.roa (raw, json) Hash identifier: 6CUcG90Qw1LP/BwUIDBtWc2rpGhoCC2oYfUKEfIDWf0= Subject key identifier: D9:0A:AF:AD:C3:EA:7B:D5:4C:34:74:B4:76:EF:75:4F:9B:3D:99:6A Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584988CF33ABFFA96EF4E4C5D180 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 141.140.64.0/24 maxlen: 24 141.140.67.0/24 maxlen: 24 141.140.70.0/24 maxlen: 24 141.140.73.0/24 maxlen: 24 141.140.76.0/24 maxlen: 24 141.140.79.0/24 maxlen: 24 141.140.82.0/24 maxlen: 24 141.140.85.0/24 maxlen: 24 141.140.88.0/24 maxlen: 24 141.140.91.0/24 maxlen: 24 141.140.94.0/24 maxlen: 24 149.143.128.0/22 maxlen: 22 149.143.132.0/22 maxlen: 22 149.143.136.0/22 maxlen: 22 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:33:ab:ff:a9:6e:f4:e4:c5:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=2412b43d-d27d-4689-a048-f733a9d3b190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:54:98:83:c6:5d:63:9a:52:d1:6b:55:cb:0f: 39:ee:14:39:a6:f6:1a:a4:d1:42:5f:6c:42:54:3e: 6a:ec:72:7f:43:24:5d:b3:b3:c4:85:14:de:72:18: 89:2e:d7:90:33:2e:17:62:5e:d2:05:6e:8a:e7:02: 57:50:e6:96:72:e9:eb:d3:82:05:92:80:5d:50:4d: cd:9a:d8:b6:bd:52:b0:43:f7:05:88:85:61:10:99: 64:39:b4:fa:41:7b:17:d2:ae:5f:4a:1b:c0:e4:b5: 85:b5:7c:82:d8:ec:0f:4c:0a:05:24:30:ae:c9:d8: 57:13:0d:5b:e8:8e:93:d1:11:87:44:33:84:24:e3: fd:00:25:88:64:36:de:0c:0a:23:2a:f9:5d:d5:b7: df:28:02:90:fc:f4:ce:26:da:47:d9:2f:02:fc:b7: 89:ef:d3:0f:0a:c8:25:92:97:97:79:4c:0d:3e:f8: 4a:13:cd:29:71:13:f0:aa:f7:58:24:46:0b:97:88: 35:74:c0:2a:1c:b9:8b:67:9d:bc:07:19:cc:43:b1: 82:ca:23:29:e4:8e:f3:b9:4d:c9:16:37:cc:b1:8c: b7:50:4d:87:e4:dd:5b:92:34:d7:22:f4:a0:18:22: 8f:a7:d9:b9:cf:1f:75:07:40:b7:0d:a0:92:01:89: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0A:AF:AD:C3:EA:7B:D5:4C:34:74:B4:76:EF:75:4F:9B:3D:99:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/63ce919a-8c24-37d5-b6be-92e17635aec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 141.140.64.0/24 141.140.67.0/24 141.140.70.0/24 141.140.73.0/24 141.140.76.0/24 141.140.79.0/24 141.140.82.0/24 141.140.85.0/24 141.140.88.0/24 141.140.91.0/24 141.140.94.0/24 149.143.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b3:b0:2e:d2:8e:fc:8f:04:64:ec:ad:4b:1a:38:47:74:65: 72:b8:76:5b:29:65:0e:b7:34:8a:e1:57:56:cd:99:46:64:83: 39:a4:6f:bd:b3:37:91:83:0b:80:85:98:52:88:ba:ef:29:8f: 13:0d:ed:6a:9b:1f:b6:ac:4b:af:5b:3c:89:d2:98:ef:d8:d7: a4:ff:e0:fb:13:f7:5c:a5:a5:eb:91:d2:63:3c:ae:71:bc:0a: a5:99:41:17:9a:68:13:06:5f:2b:a6:85:a8:30:bc:76:10:71: ea:91:f1:41:5b:8f:0f:35:83:4c:94:68:46:41:10:9b:f2:c3: bb:10:9e:09:e4:39:e1:98:96:73:50:6a:04:50:49:89:11:69: 7e:60:bd:db:73:a5:67:36:30:9e:b2:b2:96:60:86:22:bf:ff: 39:39:29:5b:db:f0:03:5a:e0:20:6b:aa:ba:f8:a5:ab:12:49: f2:14:dc:f9:50:ac:12:84:17:53:c2:78:c6:d6:f0:16:e4:85: 70:6f:cd:ca:c3:42:65:2b:18:5e:a9:21:c0:e0:35:b4:20:0b: 43:e6:fa:eb:21:73:ba:1f:d7:13:56:3c:c1:80:7b:59:9a:dd: 37:d7:f2:8b:cc:3c:5e:f0:c4:22:df:1e:63:9a:ab:c7:76:88: 31:c9:6e:be -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEmIzzOr/6lu9OTF0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjQxMmI0M2QtZDI3ZC00Njg5LWEwNDgtZjczM2E5ZDNiMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFSYg8ZdY5pS0WtVyw857hQ5pvYapNFCX2xC VD5q7HJ/QyRds7PEhRTechiJLteQMy4XYl7SBW6K5wJXUOaWcunr04IFkoBdUE3N mti2vVKwQ/cFiIVhEJlkObT6QXsX0q5fShvA5LWFtXyC2OwPTAoFJDCuydhXEw1b 6I6T0RGHRDOEJOP9ACWIZDbeDAojKvld1bffKAKQ/PTOJtpH2S8C/LeJ79MPCsgl kpeXeUwNPvhKE80pcRPwqvdYJEYLl4g1dMAqHLmLZ528BxnMQ7GCyiMp5I7zuU3J FjfMsYy3UE2H5N1bkjTXIvSgGCKPp9m5zx91B0C3DaCSAYng2wIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFNkKr63D6nvVTDR0tHbvdU+bPZlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjNjZTkxOWEtOGMyNC0z N2Q1LWI2YmUtOTJlMTc2MzVhZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAjYxAAwQA jYxDAwQAjYxGAwQAjYxJAwQAjYxMAwQAjYxPAwQAjYxSAwQAjYxVAwQAjYxYAwQA jYxbAwQAjYxeAwQElY+AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACizsC7SjvyPBGTsrUsaOEd0ZXK4dlsp ZQ63NIrhV1bNmUZkgzmkb72zN5GDC4CFmFKIuu8pjxMN7WqbH7asS69bPInSmO/Y 16T/4PsT91ylpeuR0mM8rnG8CqWZQReaaBMGXyumhagwvHYQceqR8UFbjw81g0yU aEZBEJvyw7sQngnkOeGYlnNQagRQSYkRaX5gvdtzpWc2MJ6yspZghiK//zk5KVvb 8ANa4CBrqrr4pasSSfIU3PlQrBKEF1PCeMbW8BbkhXBvzcrDQmUrGF6pIcDgNbQg C0Pm+ushc7of1xNWPMGAe1ma3TfX8ovMPF7wxCLfHmOaq8d2iDHJbr4= -----END CERTIFICATE-----Generated at Mon Apr 28 07:13:44 2025 by rpki-client