$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa File: f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa (raw, json) Hash identifier: zvCeN5tscq4aNV2u2ag3Ad3s5+BWgzLinN/5LD1/BAo= Subject key identifier: E1:4E:A0:D0:3A:F4:5D:37:CC:7E:72:63:4A:F9:0C:70:42:63:D0:92 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584AE1968B61FC7632AD957F9620 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 174 IP address blocks: 149.143.128.0/22 maxlen: 22 149.143.132.0/22 maxlen: 22 149.143.136.0/22 maxlen: 22 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:8b:61:fc:76:32:ad:95:7f:96:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=f8bee675-82ef-4cd0-a190-6220472c4d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:14:a5:b2:26:13:ab:68:96:26:f1:95:5f: 81:de:ff:12:d0:a3:14:b3:8a:af:05:0b:41:f1:cf: 87:f2:e9:4d:08:a3:0c:44:9e:1a:fb:1c:18:b9:9f: 86:26:6f:2d:90:ad:16:da:34:7f:28:d4:d2:8a:fa: ca:a9:d7:b4:0e:0d:85:84:c7:ff:51:4d:33:d4:a3: 4a:66:59:77:78:41:71:f6:41:04:ca:b9:17:1b:64: b8:9c:f3:d7:39:14:e2:28:a3:29:3c:9b:29:95:eb: f1:c8:64:b5:ee:97:b3:e8:45:f2:67:6e:60:a4:4a: 52:0a:b5:0e:ce:7d:a5:9d:ad:8c:83:02:06:f6:a5: a0:0d:b0:78:fb:0a:0a:df:9b:00:f6:96:e7:28:95: f7:44:f6:dd:44:d6:c0:b8:6b:d5:f8:d4:7b:f0:74: 41:f4:78:b4:d5:34:d3:e1:61:49:bc:cd:35:d4:30: 39:b6:c8:e7:f0:4f:cc:36:50:72:a8:d3:89:91:71: ba:fe:44:bb:de:7e:90:84:bc:45:25:2c:41:41:44: 32:44:d2:ae:8e:0a:b8:d6:30:e8:cc:f0:b1:7f:1c: 0b:63:47:97:a9:c1:9e:d7:ed:b5:d2:ce:9f:b6:d3: 0f:95:d3:41:c1:2a:44:d6:bf:7f:e6:09:2e:33:63: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4E:A0:D0:3A:F4:5D:37:CC:7E:72:63:4A:F9:0C:70:42:63:D0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b2:eb:5f:01:84:a5:37:e6:9b:95:5a:e1:c2:f4:be:bd:91: 5e:05:64:7d:6a:01:fb:5a:db:6e:cd:aa:04:e7:24:5a:00:0f: 9e:f5:df:62:54:ad:a8:bb:14:d6:2f:02:15:74:6b:cf:e9:75: d5:b1:b6:35:55:ba:56:62:55:35:2e:51:a0:bf:2a:90:67:f8: 48:cd:a6:49:d9:d9:7c:2e:56:81:06:71:19:b1:a2:3a:ab:87: 58:99:16:de:3e:cd:45:ec:06:8e:96:0f:db:22:99:43:4b:16: 59:58:52:f3:8a:58:79:38:6c:cc:3a:7e:73:51:91:01:b7:02: 8a:a3:55:4a:45:02:08:44:81:3f:21:af:3b:c3:83:f4:99:4f: eb:d9:ac:28:57:e1:6d:f3:db:67:80:03:71:ff:6c:3b:75:39: 3b:f7:d8:f5:fe:d5:56:0d:05:12:02:ef:40:82:c2:f8:96:82: 2b:5e:f8:e9:34:2b:7d:99:4d:94:e8:a1:27:76:8f:57:2c:77: 8c:4a:96:62:5b:c7:ae:fd:a6:3c:80:fb:db:9e:c8:2b:b4:c3: 5a:37:5f:c2:e9:f3:27:a9:ca:6e:2f:25:42:37:06:a4:4c:f7: 52:2e:c5:d0:7d:51:eb:fd:cb:1b:38:8f:07:a6:ff:a6:2c:54: 0f:85:67:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhloth/HYyrZV/liAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZjhiZWU2NzUtODJlZi00Y2QwLWExOTAtNjIyMDQ3MmM0ZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjcUpbImE6tolibxlV+B3v8S0KMUs4qvBQtB 8c+H8ulNCKMMRJ4a+xwYuZ+GJm8tkK0W2jR/KNTSivrKqde0Dg2FhMf/UU0z1KNK Zll3eEFx9kEEyrkXG2S4nPPXORTiKKMpPJsplevxyGS17pez6EXyZ25gpEpSCrUO zn2lna2MgwIG9qWgDbB4+woK35sA9pbnKJX3RPbdRNbAuGvV+NR78HRB9Hi01TTT 4WFJvM011DA5tsjn8E/MNlByqNOJkXG6/kS73n6QhLxFJSxBQUQyRNKujgq41jDo zPCxfxwLY0eXqcGe1+210s6fttMPldNBwSpE1r9/5gkuM2NXdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFOoNA69F03zH5yY0r5DHBCY9CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjQ0ZTNlY2YtY2E0OS0z NWQyLTgwMzItZjY3ZWQ0MmU0ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECy618BhKU35puVWuHC9L69kV4FZH1qAfta227NqgTnJFoAD57132JU rai7FNYvAhV0a8/pddWxtjVVulZiVTUuUaC/KpBn+EjNpknZ2XwuVoEGcRmxojqr h1iZFt4+zUXsBo6WD9simUNLFllYUvOKWHk4bMw6fnNRkQG3AoqjVUpFAghEgT8h rzvDg/SZT+vZrChX4W3z22eAA3H/bDt1OTv32PX+1VYNBRIC70CCwviWgite+Ok0 K32ZTZTooSd2j1csd4xKlmJbx679pjyA+9ueyCu0w1o3X8Lp8yepym4vJUI3BqRM 91IuxdB9Uev9yxs4jwem/6YsVA+FZzQ= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:49 2025 by rpki-client