$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa File: f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa (raw, json) Hash identifier: Z71TAEoAG9IOm6r1CBdoHwbpOp7S7S36gmxqDWleb7I= Subject key identifier: 6A:3A:7D:7D:BA:85:BF:D4:11:06:1C:5F:83:F3:71:86:05:82:7D:A5 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584A00DAC65BBE21B92C8D484280 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 174 IP address blocks: 149.143.128.0/22 maxlen: 22 149.143.132.0/22 maxlen: 22 149.143.136.0/22 maxlen: 22 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:c6:5b:be:21:b9:2c:8d:48:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=a1e7e319-1a8a-4ba0-a660-7652d5a19450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:1f:c9:00:2f:cb:57:87:40:73:15:89:a2: 6b:d3:2a:10:22:24:94:82:2c:be:62:56:2f:88:80: 2e:35:7b:65:08:93:8b:e9:2e:d5:d3:fb:be:8a:60: 31:c9:d0:d6:62:f8:77:e7:6d:a5:d8:3c:c4:70:1d: fc:73:66:f9:bb:18:3f:eb:85:af:e0:d2:91:34:68: 52:b2:5f:bf:7c:7a:5c:c0:92:97:94:87:23:43:8b: a3:ff:1b:ca:bc:26:e7:c9:f1:ac:4a:99:91:1a:c6: 09:9a:ca:a1:3d:08:fd:1b:8f:e4:13:a9:2f:71:84: d9:7f:87:3b:87:41:af:61:2a:35:b9:02:b7:46:96: 80:72:0c:1d:42:58:eb:a5:90:ac:27:e8:0f:84:c0: 2f:ca:fd:b8:71:ce:38:a5:51:6d:67:dc:91:a9:6f: da:e6:66:66:cd:1f:5f:03:62:0c:55:a1:9e:fe:d7: 2e:f5:6e:cc:d0:4a:f8:81:5a:21:22:8e:a1:55:3c: 2d:0d:11:ed:6f:7f:56:d0:a4:b1:4d:cc:1d:fe:79: b6:c4:e5:2c:99:dd:1c:74:3f:5b:9c:d2:e6:2f:d1: 01:16:d5:3f:b9:24:87:d1:dc:2f:ce:98:39:76:87: da:f4:5e:2a:cd:9e:2c:00:c2:f9:6f:ed:ff:31:5f: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3A:7D:7D:BA:85:BF:D4:11:06:1C:5F:83:F3:71:86:05:82:7D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f44e3ecf-ca49-35d2-8032-f67ed42e4f27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:be:39:0c:ac:2b:e4:51:a0:8f:3a:e9:0a:0d:3b:44:aa:6b: ec:85:39:a7:bf:8b:4b:8d:6b:a3:a5:b1:2e:ec:6b:51:43:cd: 21:a0:cf:cc:43:af:78:dc:e3:d8:f4:70:65:57:09:ef:ea:15: 7a:2b:8f:fa:2e:a8:bf:70:f4:c9:af:b6:67:1f:ad:0a:5c:97: a6:aa:71:73:89:b6:30:68:9c:84:37:3e:f5:5f:48:dc:9a:bc: 67:07:f0:40:27:a9:cc:17:2d:28:88:e8:93:e8:4f:af:a5:7f: 9c:d8:7b:8d:53:2b:4a:54:2c:f2:e3:ed:53:8f:fa:91:d5:5e: 9b:29:89:ed:a3:87:cc:a6:c0:3b:3f:bf:83:5c:43:5c:41:f2: 12:80:7f:87:37:10:73:6b:fe:9d:d7:35:05:8b:f4:65:b9:29: 0b:60:4a:57:c8:7c:8d:d8:b3:17:82:6e:6b:23:00:36:cd:27: 4c:a6:74:0d:46:ed:3a:b9:b5:17:53:4a:a2:13:95:de:b0:33: 95:50:10:da:0b:5a:d1:69:5f:b6:f7:a3:87:4c:f6:10:05:87: e2:f5:bb:f8:79:68:5f:87:1a:88:42:ea:d9:c5:c3:86:0a:f9: ee:a3:89:f8:aa:15:60:53:7a:aa:a3:3f:43:27:78:32:a6:4a: 97:d4:ba:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sZbviG5LI1IQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YTFlN2UzMTktMWE4YS00YmEwLWE2NjAtNzY1MmQ1YTE5NDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrgfyQAvy1eHQHMViaJr0yoQIiSUgiy+YlYv iIAuNXtlCJOL6S7V0/u+imAxydDWYvh3522l2DzEcB38c2b5uxg/64Wv4NKRNGhS sl+/fHpcwJKXlIcjQ4uj/xvKvCbnyfGsSpmRGsYJmsqhPQj9G4/kE6kvcYTZf4c7 h0GvYSo1uQK3RpaAcgwdQljrpZCsJ+gPhMAvyv24cc44pVFtZ9yRqW/a5mZmzR9f A2IMVaGe/tcu9W7M0Er4gVohIo6hVTwtDRHtb39W0KSxTcwd/nm2xOUsmd0cdD9b nNLmL9EBFtU/uSSH0dwvzpg5dofa9F4qzZ4sAML5b+3/MV+fmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo6fX26hb/UEQYcX4PzcYYFgn2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjQ0ZTNlY2YtY2E0OS0z NWQyLTgwMzItZjY3ZWQ0MmU0ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElY+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK+OQysK+RRoI866QoNO0Sqa+yFOae/i0uNa6OlsS7sa1FDzSGgz8xD r3jc49j0cGVXCe/qFXorj/ouqL9w9MmvtmcfrQpcl6aqcXOJtjBonIQ3PvVfSNya vGcH8EAnqcwXLSiI6JPoT6+lf5zYe41TK0pULPLj7VOP+pHVXpspie2jh8ymwDs/ v4NcQ1xB8hKAf4c3EHNr/p3XNQWL9GW5KQtgSlfIfI3YsxeCbmsjADbNJ0ymdA1G 7Tq5tRdTSqITld6wM5VQENoLWtFpX7b3o4dM9hAFh+L1u/h5aF+HGohC6tnFw4YK +e6jifiqFWBTeqqjP0MneDKmSpfUurg= -----END CERTIFICATE-----Generated at Sun Jun 15 17:10:42 2025 by rpki-client