$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d02a1aa0-9a83-3f09-b1eb-bde3adff1a87.roa File: d02a1aa0-9a83-3f09-b1eb-bde3adff1a87.roa (raw, json) Hash identifier: VGWRi14uoRZISOUDqJqogQpsDxTGbIr2PSiLKfNFY/4= Subject key identifier: 25:EF:8D:98:25:B5:1F:00:D2:D0:5F:D4:52:EA:0C:C9:F7:35:F2:33 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A14657C0B7CAD96E7BBC17E40 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d02a1aa0-9a83-3f09-b1eb-bde3adff1a87.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 9009 IP address blocks: 149.143.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7c:0b:7c:ad:96:e7:bb:c1:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=116b78df-7689-4765-b890-5b783a725314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:f3:6d:d9:80:48:fd:81:6d:7e:60:93:e6: 17:70:d1:e7:d9:26:c8:13:cb:75:72:9c:48:f6:26: 0a:be:0e:ac:8d:82:2c:5e:ad:45:0d:49:32:3b:e9: 68:65:0a:07:ef:fd:39:b5:1b:4a:0e:f0:b3:33:07: 85:9e:2e:d0:62:99:ad:8a:22:18:61:d2:f0:8e:d8: 35:11:d2:ad:f6:fc:1a:82:ee:1d:49:50:e4:55:0d: a3:35:4b:1f:e2:75:bc:4e:68:a4:a2:a9:7c:cc:3c: b6:cf:fc:7d:82:b1:ad:f5:ef:00:b8:31:f0:0c:0d: 70:b9:f4:5b:d8:a8:f7:60:a7:57:79:1a:f1:2e:a0: 98:4e:86:1c:82:e6:90:92:1f:7b:95:49:87:ef:84: 5d:27:22:54:9a:8e:e7:81:3a:4f:f8:6d:4f:f1:6e: ae:e0:48:5c:66:9c:bf:4c:f1:d1:55:9c:68:25:c0: 7f:44:d0:31:c8:db:62:b1:4e:38:9b:7f:a5:d6:ad: 3e:d6:f7:f6:6b:d4:84:34:da:11:b0:ba:60:db:0a: af:56:4d:1e:dc:4d:9e:be:76:11:3a:d3:e6:8d:80: 97:64:20:51:f9:c4:04:1c:a0:08:50:e0:7a:4a:ae: bc:21:ae:f6:16:e6:5f:7a:31:b1:aa:81:d9:ad:35: 2f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EF:8D:98:25:B5:1F:00:D2:D0:5F:D4:52:EA:0C:C9:F7:35:F2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d02a1aa0-9a83-3f09-b1eb-bde3adff1a87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e7:ea:25:0e:4e:11:bb:17:96:72:53:da:91:cd:0f:58:40: e8:14:51:ff:d0:ca:e7:31:84:ca:8b:67:ad:27:cc:cd:ad:11: 20:17:13:9a:0b:4d:17:f5:15:ea:7e:de:a2:1e:e4:10:2a:86: c6:e5:cd:9e:6e:21:79:21:9c:d1:78:08:70:5c:90:10:9c:ac: c4:9e:73:ab:ba:9e:6c:58:f8:48:3c:0e:4f:8d:3e:e3:e4:10: e6:03:71:77:f0:80:9a:06:59:d6:22:45:35:bb:25:84:5b:22: f1:94:18:e2:56:9d:66:62:dd:ce:c8:86:6f:28:e0:3c:0c:50: 98:eb:02:8b:8a:df:7e:ca:38:bf:e7:c5:85:33:9c:f2:76:6d: 18:ee:d4:74:fc:d7:87:cd:aa:5d:b0:76:42:a6:95:f0:61:d0: 4a:4d:7a:45:f8:68:1b:45:c6:66:93:41:0a:c2:4d:e3:98:b1: 21:b0:47:6f:d0:38:39:09:c2:9d:90:6f:35:0a:98:a9:2b:9a: 38:97:20:d4:70:99:44:af:86:d6:6d:e7:f7:a8:3a:dc:55:57: 64:20:ff:53:bf:ab:25:d4:02:9a:b8:a8:59:e9:2f:69:55:13: 61:a5:3f:3d:15:36:76:0c:94:c5:1b:5d:53:d8:54:f2:c0:6d: 59:04:e3:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXwLfK2W57vBfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MTE2Yjc4ZGYtNzY4OS00NzY1LWI4OTAtNWI3ODNhNzI1MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tXzbdmASP2BbX5gk+YXcNHn2SbIE8t1cpxI 9iYKvg6sjYIsXq1FDUkyO+loZQoH7/05tRtKDvCzMweFni7QYpmtiiIYYdLwjtg1 EdKt9vwagu4dSVDkVQ2jNUsf4nW8Tmikoql8zDy2z/x9grGt9e8AuDHwDA1wufRb 2Kj3YKdXeRrxLqCYToYcguaQkh97lUmH74RdJyJUmo7ngTpP+G1P8W6u4EhcZpy/ TPHRVZxoJcB/RNAxyNtisU44m3+l1q0+1vf2a9SENNoRsLpg2wqvVk0e3E2evnYR OtPmjYCXZCBR+cQEHKAIUOB6Sq68Ia72FuZfejGxqoHZrTUvxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXvjZgltR8A0tBf1FLqDMn3NfIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDAyYTFhYTAtOWE4My0z ZjA5LWIxZWItYmRlM2FkZmYxYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7n6iUOThG7F5ZyU9qRzQ9YQOgUUf/QyucxhMqLZ60nzM2tESAXE5oL TRf1Fep+3qIe5BAqhsblzZ5uIXkhnNF4CHBckBCcrMSec6u6nmxY+Eg8Dk+NPuPk EOYDcXfwgJoGWdYiRTW7JYRbIvGUGOJWnWZi3c7Ihm8o4DwMUJjrAouK337KOL/n xYUznPJ2bRju1HT814fNql2wdkKmlfBh0EpNekX4aBtFxmaTQQrCTeOYsSGwR2/Q ODkJwp2QbzUKmKkrmjiXINRwmUSvhtZt5/eoOtxVV2Qg/1O/qyXUApq4qFnpL2lV E2GlPz0VNnYMlMUbXVPYVPLAbVkE460= -----END CERTIFICATE-----Generated at Sun Jun 15 17:07:37 2025 by rpki-client