$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa File: f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa (raw, json) Hash identifier: AUpxXzEYImIYnNaI+ITRKJfBR51+xBV4x9VBivzFaYA= Subject key identifier: CE:07:FC:5A:17:93:F3:FB:0F:18:A1:F3:27:54:1F:2D:43:B8:69:50 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849A784C320BCD23749AE0ED7C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 28920 IP address blocks: 149.143.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c3:20:bc:d2:37:49:ae:0e:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9a5aa932-077b-4702-b1c1-bc09a02e7aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:34:b6:bf:f6:c9:ed:f0:ee:14:c5:24:37: e2:bb:92:07:1a:aa:24:97:f0:83:1e:c8:1d:99:ec: c3:19:60:83:4e:6d:ae:54:16:2e:3a:f9:9c:ab:f9: 15:17:2d:4b:fd:e9:d1:06:e3:bf:f5:fd:38:fe:af: df:ec:af:72:7c:9a:24:2c:63:d5:45:39:2c:10:69: 73:d6:bf:a5:49:83:19:ce:6b:94:c6:49:a2:d2:8f: 11:12:3f:36:c6:61:6f:b7:66:8d:31:7e:7d:c5:71: d6:19:53:05:5b:70:fc:bc:76:41:4d:a5:fd:f8:32: 30:03:22:80:0a:82:22:a2:90:82:b7:51:0b:03:75: 7b:7f:74:6d:86:96:90:30:a4:43:09:65:5d:5c:de: 49:ed:eb:e7:68:22:1e:6d:6d:d0:91:3e:be:41:7e: f0:39:4e:72:0b:25:eb:ac:52:4a:36:88:45:27:14: f4:d7:7d:7c:b5:7a:09:2e:d5:c6:a7:55:25:31:93: 96:49:90:87:20:3f:4d:92:93:5d:e4:53:cc:fd:30: e8:82:f1:07:7a:e0:d8:35:41:19:04:ad:e6:96:27: 7e:60:40:e5:17:af:15:ee:5a:32:70:a2:c9:d7:0a: 97:13:12:f3:ed:05:22:88:c2:26:e3:79:f0:9c:c3: 28:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:07:FC:5A:17:93:F3:FB:0F:18:A1:F3:27:54:1F:2D:43:B8:69:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f5fef6b9-58d9-3d46-a887-b7baf2388d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:79:c9:78:4a:bd:45:67:c9:8f:fd:f2:b1:51:b9:b5:d1:57: 8b:d8:dd:cd:b9:0d:b5:6f:1f:ec:0b:e9:c5:af:20:b9:f4:91: a1:0c:d0:20:d0:67:a1:fa:01:b2:b4:ae:bb:1b:4f:87:11:d5: e7:be:9f:0d:f6:b2:00:ec:6a:31:ac:67:61:d7:da:45:f4:b4: 67:8d:e2:49:c5:ae:4d:ad:4d:d7:0b:15:c3:24:84:58:96:e3: ce:cf:05:68:99:14:79:2b:68:30:c5:43:26:94:d3:f4:e6:49: b2:76:e1:9e:14:de:d2:7a:d4:e2:f4:6f:e0:ad:2d:b0:a9:23: f4:23:19:7f:ac:e5:82:bd:38:95:4d:ec:e2:5c:c4:f4:26:4a: e2:12:d4:f1:cd:ff:13:78:7d:30:d3:64:6d:b4:b0:99:2a:15: 4c:e1:d4:c2:96:2d:17:b7:73:ea:8f:cb:1e:44:aa:f0:82:2b: bf:e5:4f:47:d3:2a:58:2f:51:9e:a7:57:77:ba:f1:b9:f9:07: 6e:bb:29:af:d0:9e:d8:59:b2:bf:2a:fa:98:53:19:c0:9c:e5: 8c:74:7f:a2:33:89:90:ff:ef:ac:57:60:97:7c:ef:8a:51:e9: a9:d0:7c:f1:34:b5:6a:89:91:2c:62:40:34:29:4f:7a:a9:06: d3:91:e0:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMMgvNI3Sa4O18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWE1YWE5MzItMDc3Yi00NzAyLWIxYzEtYmMwOWEwMmU3YWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkQ0tr/2ye3w7hTFJDfiu5IHGqokl/CDHsgd mezDGWCDTm2uVBYuOvmcq/kVFy1L/enRBuO/9f04/q/f7K9yfJokLGPVRTksEGlz 1r+lSYMZzmuUxkmi0o8REj82xmFvt2aNMX59xXHWGVMFW3D8vHZBTaX9+DIwAyKA CoIiopCCt1ELA3V7f3RthpaQMKRDCWVdXN5J7evnaCIebW3QkT6+QX7wOU5yCyXr rFJKNohFJxT01318tXoJLtXGp1UlMZOWSZCHID9NkpNd5FPM/TDogvEHeuDYNUEZ BK3mlid+YEDlF68V7loycKLJ1wqXExLz7QUiiMIm43nwnMMoHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4H/FoXk/P7Dxih8ydUHy1DuGlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjVmZWY2YjktNThkOS0z ZDQ2LWE4ODctYjdiYWYyMzg4ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ5yXhKvUVnyY/98rFRubXRV4vY3c25DbVvH+wL6cWvILn0kaEM0CDQ Z6H6AbK0rrsbT4cR1ee+nw32sgDsajGsZ2HX2kX0tGeN4knFrk2tTdcLFcMkhFiW 487PBWiZFHkraDDFQyaU0/TmSbJ24Z4U3tJ61OL0b+CtLbCpI/QjGX+s5YK9OJVN 7OJcxPQmSuIS1PHN/xN4fTDTZG20sJkqFUzh1MKWLRe3c+qPyx5EqvCCK7/lT0fT KlgvUZ6nV3e68bn5B267Ka/QnthZsr8q+phTGcCc5Yx0f6IziZD/76xXYJd874pR 6anQfPE0tWqJkSxiQDQpT3qpBtOR4BQ= -----END CERTIFICATE-----Generated at Sun Apr 27 16:30:33 2025 by rpki-client