$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa File: f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa (raw, json) Hash identifier: sKsvM6YubzO5eXQhVCV7slY/QnKWZinXDahVx5MRns0= Subject key identifier: 5A:AA:27:E6:1E:10:34:B9:78:CB:BE:33:90:FE:12:DE:B9:92:A8:97 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584921840C11857C71B1E6D20300 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 174 IP address blocks: 149.143.128.0/22 maxlen: 22 149.143.132.0/22 maxlen: 22 149.143.136.0/22 maxlen: 22 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0c:11:85:7c:71:b1:e6:d2:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=ef4ed6e5-835e-4a99-965e-28205099b392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:7a:74:50:0d:02:d3:02:02:00:87:d1:92: 00:bb:c6:89:08:a2:b2:6a:1a:9b:b9:b3:b2:aa:9e: a5:1d:1b:26:0b:b9:1b:76:30:a7:6a:fe:ef:50:ee: 97:17:ad:02:cf:0a:d6:cf:d9:a5:74:59:9e:bb:40: 86:d7:b7:ba:88:9b:83:e0:60:01:dd:c6:4e:1c:9f: dc:01:81:a0:9e:5c:2e:fc:d0:5f:df:e9:33:f0:20: 28:c3:d5:98:3a:2b:ea:f9:3d:b1:11:b3:29:eb:58: 65:81:da:3c:f7:62:ae:5f:5b:20:d8:27:ef:20:16: e6:bd:66:1e:ca:3b:8b:f7:7f:2f:66:da:18:0a:5e: 6b:a4:9e:5e:18:ce:9b:35:d7:16:fe:da:19:81:a1: c5:8a:11:ba:47:21:f8:e2:56:af:e3:7c:66:89:55: 9a:69:a4:54:e8:8a:c6:52:14:f6:a0:e0:13:3e:55: ec:74:ff:fa:e3:6b:4d:ed:2d:fb:e0:ff:c6:68:a0: 31:1f:dd:fc:c5:c9:f1:c9:ca:a4:7c:71:5a:45:ba: 2c:8b:90:74:18:c6:f8:67:7e:06:dd:e5:0e:6e:67: bf:d6:97:07:cd:7e:6a:1e:9d:5a:ce:9b:e2:c2:13: ec:5d:01:5f:e1:66:b9:8e:7c:c2:8e:98:aa:4f:8a: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AA:27:E6:1E:10:34:B9:78:CB:BE:33:90:FE:12:DE:B9:92:A8:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1e:b8:68:e0:27:5b:c1:c4:56:f8:56:30:86:40:94:e1:9e: 8f:cd:1e:2b:03:c2:50:37:99:5f:00:00:5a:ff:22:ae:f8:8b: 92:fc:c5:33:f8:e9:13:6a:7e:b7:65:2e:11:d3:76:17:4b:dd: 35:e1:89:d3:98:74:b2:74:82:80:0a:20:34:d5:00:80:95:31: 27:f4:b0:9f:bd:0e:2d:51:c3:9c:f4:35:17:5f:f3:1d:d9:d0: 29:e0:4d:9d:02:44:e4:ec:9a:cf:b3:e0:b1:b4:01:4b:84:09: 1a:1f:fd:90:26:d5:62:0d:8a:1b:4c:26:83:4f:0f:4a:19:d4: 2c:bf:83:c8:e8:75:f0:e4:69:71:c1:28:3b:b3:fd:c8:9e:66: 93:67:ce:0c:47:27:a5:49:54:b9:1d:c8:05:b5:86:e6:74:28: 0f:a3:3b:87:e6:98:d7:f9:3b:15:61:71:cc:e6:b3:8d:a1:5a: c9:ee:3b:62:33:01:02:c8:04:d2:fb:6f:fd:57:28:83:6c:2e: b5:b1:5e:f5:79:1f:d9:0b:51:bf:7e:e4:ee:67:d9:d7:13:ea: 9c:16:ca:81:a0:98:df:0a:fe:97:32:d8:b2:d7:96:a1:1c:69: 7f:68:9d:2f:3a:63:8d:f0:c6:65:f1:af:b8:b1:ca:bf:87:e3: c5:ca:38:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAwRhXxxsebSAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZWY0ZWQ2ZTUtODM1ZS00YTk5LTk2NWUtMjgyMDUwOTliMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntl6dFANAtMCAgCH0ZIAu8aJCKKyahqbubOy qp6lHRsmC7kbdjCnav7vUO6XF60CzwrWz9mldFmeu0CG17e6iJuD4GAB3cZOHJ/c AYGgnlwu/NBf3+kz8CAow9WYOivq+T2xEbMp61hlgdo892KuX1sg2CfvIBbmvWYe yjuL938vZtoYCl5rpJ5eGM6bNdcW/toZgaHFihG6RyH44lav43xmiVWaaaRU6IrG UhT2oOATPlXsdP/642tN7S374P/GaKAxH938xcnxycqkfHFaRbosi5B0GMb4Z34G 3eUObme/1pcHzX5qHp1azpviwhPsXQFf4Wa5jnzCjpiqT4rqGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqqJ+YeEDS5eMu+M5D+Et65kqiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjQ0ZTNlY2YtY2E0OS0z NWQyLTgwMzItZjY3ZWQ0MmU0ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0euGjgJ1vBxFb4VjCGQJThno/NHisDwlA3mV8AAFr/Iq74i5L8xTP4 6RNqfrdlLhHTdhdL3TXhidOYdLJ0goAKIDTVAICVMSf0sJ+9Di1Rw5z0NRdf8x3Z 0CngTZ0CROTsms+z4LG0AUuECRof/ZAm1WINihtMJoNPD0oZ1Cy/g8jodfDkaXHB KDuz/cieZpNnzgxHJ6VJVLkdyAW1huZ0KA+jO4fmmNf5OxVhcczms42hWsnuO2Iz AQLIBNL7b/1XKINsLrWxXvV5H9kLUb9+5O5n2dcT6pwWyoGgmN8K/pcy2LLXlqEc aX9onS86Y43wxmXxr7ixyr+H48XKOFY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:30 2025 by rpki-client