$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/06b13455-bec4-392b-b3ed-99b6e2e48afd.roa File: 06b13455-bec4-392b-b3ed-99b6e2e48afd.roa (raw, json) Hash identifier: sjweAJ2iwNaKIoDcYg/VM1Ym62N8QJaFfiXvlcLhyDg= Subject key identifier: A2:C4:AC:77:65:6C:55:24:87:34:4C:D9:E1:5E:E4:64:B0:4B:33:D1 Certificate issuer: /CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Certificate serial: 010D0C9F43285849EEB4FDC665FC7F78B4EA9B20 Authority key identifier: 76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/06b13455-bec4-392b-b3ed-99b6e2e48afd.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 32867 IP address blocks: 143.223.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b4:fd:c6:65:fc:7f:78:b4:ea:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=47aa95c9-0dd7-4ab9-895f-ff14d6764757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:e8:32:ff:d5:ab:e3:3f:2a:ce:94:f8:df: b6:73:30:86:df:69:68:10:b2:54:e7:e8:cb:cc:96: 22:e0:17:42:ee:bd:e1:3c:aa:cf:b7:16:b4:73:e2: d4:5b:16:67:b8:fe:7a:57:2d:1f:b0:50:ef:12:33: 25:2b:54:77:bb:7c:b6:b1:65:bf:d8:7a:15:18:94: 50:e6:99:89:52:3c:7c:55:9a:55:a2:5f:6b:42:87: f9:70:07:99:d2:4e:c8:4e:a5:fd:44:c2:9f:b1:c5: 82:db:01:e6:68:a1:04:9e:5b:71:0a:df:7b:d7:29: 40:07:b8:ad:35:31:9a:e0:f2:17:90:10:d7:b6:e2: 6e:f4:a7:c6:ac:35:c3:90:a3:2f:b9:1e:6c:13:cb: 8f:84:5a:be:ad:3a:49:43:c6:f7:c6:b0:98:38:cd: 22:c0:13:17:52:46:a0:bc:2b:b7:6a:13:0c:bb:86: 85:f5:38:77:ff:95:62:94:dc:93:5a:54:72:fe:5d: 25:de:fb:17:7d:c6:23:0d:ed:f0:c5:74:20:b8:17: 2f:4c:c1:87:8c:24:5f:67:53:ec:a3:77:e4:a4:5a: e7:70:8a:a4:f8:3e:63:b3:4a:f9:3b:13:9d:39:b9: bf:23:a1:0c:6f:fe:bf:7a:cb:6d:e9:1a:9b:1d:9c: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C4:AC:77:65:6C:55:24:87:34:4C:D9:E1:5E:E4:64:B0:4B:33:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/06b13455-bec4-392b-b3ed-99b6e2e48afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl X509v3 Authority Key Identifier: keyid:76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer sbgp-ipAddrBlock: critical IPv4: 143.223.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4c:4d:6e:a3:fc:e8:17:49:45:90:06:b4:66:d2:d4:c8:29: a2:48:f7:4c:9e:be:bb:87:c5:ef:f4:5a:f1:da:30:8f:99:a8: 82:6b:50:e5:48:37:ad:f7:81:9b:80:3e:a3:c1:9c:92:06:ca: 92:78:22:82:e9:3f:84:5f:af:f9:ef:6f:7e:17:e7:a9:a6:33: 86:c6:81:9d:3f:26:b0:3b:5c:94:8c:48:ba:83:81:0d:19:53: 53:76:f6:5a:1e:49:81:93:98:54:cf:27:6d:9c:03:8d:13:76: 99:2a:2c:dd:59:19:cf:cd:38:c3:ff:22:1d:49:3c:85:96:8c: 38:2c:99:3e:40:ff:2d:c1:e0:f0:69:b7:bf:4d:3f:be:eb:64: 1c:c3:2c:39:3f:62:d5:61:5e:85:c9:4c:03:46:21:f7:44:b4: d1:dd:ea:40:ab:58:df:a5:76:a6:fc:c0:8e:50:94:37:06:b4: ac:5a:57:32:8b:4b:d1:76:cc:3b:f3:31:1e:6c:a2:76:2d:a4: ea:3d:f3:0f:b5:de:eb:6c:90:82:74:be:c6:15:3a:9f:2d:1c: 3d:1c:c6:82:71:17:62:0f:84:0e:64:86:ec:17:53:7d:84:78: f5:c2:a4:e2:c8:b5:af:4d:7b:a2:35:be:42:58:5f:1a:e2:a2: 0b:ad:d4:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutP3GZfx/eLTqmyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EyYzBlNzMtZjdmNy00MDcwLTk4YWEtYzc4ZWYxNzUy ODQ5MB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk NDdhYTk1YzktMGRkNy00YWI5LTg5NWYtZmYxNGQ2NzY0NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbnoMv/Vq+M/Ks6U+N+2czCG32loELJU5+jL zJYi4BdC7r3hPKrPtxa0c+LUWxZnuP56Vy0fsFDvEjMlK1R3u3y2sWW/2HoVGJRQ 5pmJUjx8VZpVol9rQof5cAeZ0k7ITqX9RMKfscWC2wHmaKEEnltxCt971ylAB7it NTGa4PIXkBDXtuJu9KfGrDXDkKMvuR5sE8uPhFq+rTpJQ8b3xrCYOM0iwBMXUkag vCu3ahMMu4aF9Th3/5VilNyTWlRy/l0l3vsXfcYjDe3wxXQguBcvTMGHjCRfZ1Ps o3fkpFrncIqk+D5js0r5OxOdObm/I6EMb/6/estt6RqbHZzgyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLErHdlbFUkhzRM2eFe5GSwSzPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJj MGU3My1mN2Y3LTQwNzAtOThhYS1jNzhlZjE3NTI4NDkvMDZiMTM0NTUtYmVjNC0z OTJiLWIzZWQtOTliNmUyZTQ4YWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2EyYzBlNzMtZjdmNy00MDcwLTk4 YWEtYzc4ZWYxNzUyODQ5L2NhMmMwZTczLWY3ZjctNDA3MC05OGFhLWM3OGVmMTc1 Mjg0OS5jcmwwHwYDVR0jBBgwFoAUds6Q8pqYDL3BWHTiHFhZt1MKTmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJjMGU3My1mN2Y3LTQwNzAtOThhYS1jNzhl ZjE3NTI4NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj9+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJMTW6j/OgXSUWQBrRm0tTIKaJI90yevruHxe/0WvHaMI+ZqIJrUOVI N633gZuAPqPBnJIGypJ4IoLpP4Rfr/nvb34X56mmM4bGgZ0/JrA7XJSMSLqDgQ0Z U1N29loeSYGTmFTPJ22cA40TdpkqLN1ZGc/NOMP/Ih1JPIWWjDgsmT5A/y3B4PBp t79NP77rZBzDLDk/YtVhXoXJTANGIfdEtNHd6kCrWN+ldqb8wI5QlDcGtKxaVzKL S9F2zDvzMR5sonYtpOo98w+13utskIJ0vsYVOp8tHD0cxoJxF2IPhA5khuwXU32E ePXCpOLIta9Ne6I1vkJYXxriogut1Fs= -----END CERTIFICATE-----Generated at Thu Jun 19 04:04:13 2025 by rpki-client