$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa File: 1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa (raw, json) Hash identifier: KnBIvTW8uy+PYyldyP4MuqmeCu5RUJqKU9GIK7XccXM= Subject key identifier: 04:07:5C:82:DE:E1:08:6A:4E:3F:F8:71:00:FD:59:B7:4D:06:FF:63 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A03A546A3F2BA0BA298C1B380 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14061 IP address blocks: 143.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:46:a3:f2:ba:0b:a2:98:c1:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=9f6f6725-bee1-4be5-9d29-2c050f0dcf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:55:74:26:af:4c:85:9d:5e:8f:d0:6a:a3: b0:03:ce:da:16:aa:33:7d:ca:28:0b:b7:8b:9f:5d: d8:32:eb:1e:21:ad:04:74:b2:62:a6:36:ad:ef:ea: b8:c9:46:16:56:a4:0f:38:05:aa:ec:4e:c7:41:05: 86:20:d9:01:67:dc:e0:c1:b0:6c:0f:5c:44:88:a6: 30:f1:3e:f3:77:53:2e:ad:78:c1:39:a2:03:0b:a2: 55:c3:76:fc:b4:62:3b:37:21:32:81:31:2a:8d:e2: 60:f9:14:ad:0b:f9:1d:7e:2f:ad:dc:64:0a:13:ba: e7:80:e8:a6:d4:90:07:8b:c6:db:f5:4b:2b:0c:08: 51:09:03:d3:27:b3:48:3b:e5:00:03:cb:36:1e:21: 93:b5:57:4d:69:da:ae:99:23:97:d4:3a:5f:71:d2: 83:40:a0:89:04:0b:f8:7a:11:f2:ee:3d:2a:4c:88: 64:69:02:82:17:b4:03:8b:3e:bd:52:1d:da:18:80: aa:89:d0:78:e7:72:ad:4a:3b:1d:32:6d:2f:c5:06: c2:42:1d:af:0f:23:56:a9:1e:63:4e:96:e5:b5:68: 4b:9d:b2:05:dc:7d:9b:69:67:7f:ef:19:2f:8e:e0: db:f0:f0:6e:82:e6:a2:1a:d9:80:f3:23:84:00:50: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:07:5C:82:DE:E1:08:6A:4E:3F:F8:71:00:FD:59:B7:4D:06:FF:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 143.198.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2b:3e:ce:9d:e2:2e:48:34:12:2f:d8:1e:e4:70:60:46:36: ac:31:dc:b4:4f:ee:e1:bf:2d:ca:ef:aa:4f:a0:8f:ad:77:ac: 3b:2f:8d:5c:8b:27:9b:c7:2a:01:f0:6e:c4:78:28:9a:b6:9e: e3:10:e0:79:c3:b5:aa:f5:cb:7a:5d:97:8f:54:f0:2d:8b:0b: e6:56:b1:43:6c:d2:6f:b1:0e:de:1b:c5:84:d2:0f:0b:ff:4d: f0:46:db:9e:ed:1b:60:15:a9:2a:4e:1b:b1:68:7d:ea:48:03: 67:c6:30:e4:72:58:b3:a4:32:53:12:d4:57:77:4d:4a:1b:87: 97:fa:15:96:a3:7b:71:b9:71:cf:11:7e:89:a4:26:ad:40:75: 60:81:0d:28:c3:99:4b:8a:b9:eb:1f:cc:8e:c9:86:94:a0:c4: 07:da:95:6a:75:b9:bf:01:1f:43:99:d5:2b:54:26:e1:3e:1f: 6b:97:9b:84:50:04:84:36:c3:a2:0c:b9:97:f0:70:76:b8:c5: d3:4f:96:0f:6b:5d:0c:77:b4:f3:7f:e5:ca:1a:98:fd:23:4a: 40:a2:1a:01:ff:b0:fe:dc:e7:b1:df:9e:0a:e0:86:f0:8a:d6: f4:e8:dd:85:f7:06:14:49:40:9f:68:fd:ad:cd:5e:46:9c:bb: 5d:aa:50:3f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoDpUaj8roLopjBs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk OWY2ZjY3MjUtYmVlMS00YmU1LTlkMjktMmMwNTBmMGRjZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLtVdCavTIWdXo/QaqOwA87aFqozfcooC7eL n13YMuseIa0EdLJipjat7+q4yUYWVqQPOAWq7E7HQQWGINkBZ9zgwbBsD1xEiKYw 8T7zd1MurXjBOaIDC6JVw3b8tGI7NyEygTEqjeJg+RStC/kdfi+t3GQKE7rngOim 1JAHi8bb9UsrDAhRCQPTJ7NIO+UAA8s2HiGTtVdNadqumSOX1DpfcdKDQKCJBAv4 ehHy7j0qTIhkaQKCF7QDiz69Uh3aGICqidB453KtSjsdMm0vxQbCQh2vDyNWqR5j TpbltWhLnbIF3H2baWd/7xkvjuDb8PBuguaiGtmA8yOEAFBX7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAQHXILe4QhqTj/4cQD9WbdNBv9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMWY2YTZlNGItZjQyZC0z NGJkLWI1YjYtNTJiNDI0NWM2ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj8YwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATCs+zp3iLkg0Ei/YHuRwYEY2rDHctE/u4b8tyu+qT6CPrXesOy+NXIsn m8cqAfBuxHgomrae4xDgecO1qvXLel2Xj1TwLYsL5laxQ2zSb7EO3hvFhNIPC/9N 8Ebbnu0bYBWpKk4bsWh96kgDZ8Yw5HJYs6QyUxLUV3dNShuHl/oVlqN7cblxzxF+ iaQmrUB1YIENKMOZS4q56x/MjsmGlKDEB9qVanW5vwEfQ5nVK1Qm4T4fa5ebhFAE hDbDogy5l/BwdrjF00+WD2tdDHe083/lyhqY/SNKQKIaAf+w/tznsd+eCuCG8IrW 9OjdhfcGFElAn2j9rc1eRpy7XapQPw== -----END CERTIFICATE-----Generated at Mon Jun 16 11:59:19 2025 by rpki-client