$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa File: 2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa (raw, json) Hash identifier: csiqmWx2/3jvkgdIkneSGEcJQXqGAwau9G1YRo0LkBY= Subject key identifier: 30:E4:B3:C9:BB:D3:24:94:CA:4D:21:34:F7:FE:D7:23:C2:BC:30:96 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584A050A76EBF37E8E6CF3DC06EC Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 398156 IP address blocks: 168.220.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:76:eb:f3:7e:8e:6c:f3:dc:06:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=5435646d-7a6d-4647-a39c-86eb875b841e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:cf:5c:3d:87:1d:d9:20:40:b2:de:29:c1: 7e:82:82:88:2e:2a:eb:e9:cc:e0:82:72:72:ec:af: df:61:81:03:de:e1:45:27:5d:e4:5c:bb:7d:1a:d1: 0c:18:56:79:9f:86:47:c1:0a:8f:8a:b3:54:ed:66: fc:95:55:21:65:97:d2:59:48:a5:cf:9c:97:d1:db: 59:73:87:01:cf:f9:63:e6:ab:17:13:5b:08:00:61: af:58:49:dc:16:cc:93:8a:73:23:c0:c5:f0:d8:03: f0:9d:4f:31:f8:f8:ce:72:0f:60:31:69:f2:f9:1b: 99:71:36:b7:e8:7c:b0:64:72:ce:53:9a:ed:ac:fd: 2d:ca:ef:d2:94:44:79:c7:24:5e:13:76:67:62:85: af:e1:da:eb:e9:29:62:87:fa:01:62:8c:45:fc:e5: 0b:47:ac:b6:23:a6:1b:8b:f1:9f:ac:fe:27:3c:cb: fd:b5:20:c6:e4:0e:ff:49:06:2a:76:80:b5:2c:1e: 23:b8:a9:5e:56:29:54:dc:e8:1d:42:e9:e0:55:39: 1e:18:98:32:46:90:26:02:7c:19:34:bc:2f:ff:52: 94:f5:a7:de:c2:44:d2:f5:86:da:7c:45:83:5d:ef: cc:8f:5a:78:bc:f3:83:15:8d:31:23:ed:80:42:a1: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E4:B3:C9:BB:D3:24:94:CA:4D:21:34:F7:FE:D7:23:C2:BC:30:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2e491d2f-ec62-3e9c-8a49-18d41e596ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:27:fc:97:41:9d:ce:8f:15:e8:b7:bb:32:4a:47:12:67:74: b9:c5:3e:89:db:e3:76:aa:c3:88:d1:7a:e7:c2:62:7b:97:50: 20:27:f9:2e:23:c9:0b:93:b8:20:28:11:ee:07:fc:7e:0a:aa: c7:94:c1:bf:11:8d:6c:30:98:48:83:74:1f:cf:de:57:e2:42: ac:bb:23:d8:3a:95:6f:04:14:b5:8f:0b:c0:79:b1:e6:71:51: dc:c7:fe:db:d6:56:3c:a8:50:e1:6e:8c:58:89:8b:74:6c:a1: a1:84:1c:e3:b0:c6:a1:19:cd:da:0d:78:40:b5:53:9f:2e:3d: d8:7c:05:76:38:91:6b:98:54:ec:1e:32:36:5e:b8:b1:06:2e: cc:65:4d:9f:90:55:ad:43:48:bc:d6:55:60:c4:40:27:5e:99: fa:d5:e9:16:35:b4:60:9f:14:b7:b6:ae:36:86:da:aa:f3:94: 7d:57:ec:ba:6c:a5:23:18:78:78:e3:b5:19:e4:ec:1d:3f:b3: 42:32:cc:50:51:3f:70:98:28:fd:21:89:6a:86:21:99:65:00: 9f:e8:e9:2e:60:53:a0:e9:c4:ec:bd:4f:71:26:cf:aa:9c:88: 9d:80:8f:62:48:7f:f9:c4:d0:bc:4e:9f:af:13:a2:4f:ab:42: f4:b4:9d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnbr836ObPPcBuwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk NTQzNTY0NmQtN2E2ZC00NjQ3LWEzOWMtODZlYjg3NWI4NDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAHPXD2HHdkgQLLeKcF+goKILirr6czggnJy 7K/fYYED3uFFJ13kXLt9GtEMGFZ5n4ZHwQqPirNU7Wb8lVUhZZfSWUilz5yX0dtZ c4cBz/lj5qsXE1sIAGGvWEncFsyTinMjwMXw2APwnU8x+PjOcg9gMWny+RuZcTa3 6HywZHLOU5rtrP0tyu/SlER5xyReE3ZnYoWv4drr6Slih/oBYoxF/OULR6y2I6Yb i/GfrP4nPMv9tSDG5A7/SQYqdoC1LB4juKleVilU3OgdQungVTkeGJgyRpAmAnwZ NLwv/1KU9afewkTS9YbafEWDXe/Mj1p4vPODFY0xI+2AQqH+dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDks8m70ySUyk0hNPf+1yPCvDCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMmU0OTFkMmYtZWM2Mi0z ZTljLThhNDktMThkNDFlNTk2Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0n/JdBnc6PFei3uzJKRxJndLnFPonb43aqw4jReufCYnuXUCAn+S4j yQuTuCAoEe4H/H4KqseUwb8RjWwwmEiDdB/P3lfiQqy7I9g6lW8EFLWPC8B5seZx UdzH/tvWVjyoUOFujFiJi3RsoaGEHOOwxqEZzdoNeEC1U58uPdh8BXY4kWuYVOwe MjZeuLEGLsxlTZ+QVa1DSLzWVWDEQCdemfrV6RY1tGCfFLe2rjaG2qrzlH1X7Lps pSMYeHjjtRnk7B0/s0IyzFBRP3CYKP0hiWqGIZllAJ/o6S5gU6DpxOy9T3Emz6qc iJ2Aj2JIf/nE0LxOn68Tok+rQvS0nYU= -----END CERTIFICATE-----Generated at Sun Jun 15 21:33:52 2025 by rpki-client