$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa File: 33366e57-3c98-34dd-9cde-0f6424040688.roa (raw, json) Hash identifier: 58XJ3lHMUEYa8f5xbvwK8qCJ4drRWSNEkcw+zDIWDeE= Subject key identifier: EB:F1:D9:DE:59:85:70:5A:12:EE:31:8C:85:24:7E:CF:B3:A6:88:A9 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584A050A7647B913159434258A80 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 398156 IP address blocks: 168.220.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:76:47:b9:13:15:94:34:25:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=04939122-e249-4c50-a0ed-aae0f9482c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:8e:9a:7e:79:b8:41:8d:e5:40:9f:bf:d0: ac:bd:39:c8:6e:2e:a7:60:2a:b4:1e:98:b0:69:14: 2b:30:0d:03:d5:91:08:2f:28:5a:d1:65:b3:ec:af: ae:18:88:3c:a8:9a:d2:34:74:87:49:76:df:19:cb: 97:ea:f2:a8:da:21:57:f8:af:d1:ca:da:80:6f:2a: 60:20:10:07:07:3d:d1:c1:b4:0d:b3:bb:26:73:78: cf:4e:c5:b2:51:f6:af:47:07:69:6c:24:ff:50:4e: 60:20:0e:cd:ed:44:40:64:63:b7:cd:bc:6b:05:8c: cb:a5:2b:76:e0:78:94:66:30:41:39:c6:59:e4:d0: 90:11:a5:ac:e2:e9:4f:95:97:e9:ec:38:37:c6:8a: ab:71:f1:92:86:70:78:e7:b0:42:75:34:2d:ed:61: 42:95:06:db:22:38:92:a2:89:ed:46:71:2d:6d:c2: 63:d8:e4:51:1b:60:e8:5a:d8:66:a6:e0:30:4c:c6: b1:f8:ad:42:a7:52:e7:18:4c:1e:f7:0d:84:65:8b: d8:a0:43:bc:71:53:e3:16:c5:85:76:a8:73:99:47: 5e:19:62:88:d4:ac:8e:1c:5f:0e:d5:c7:17:5a:ea: fb:bd:4a:ed:a4:dc:b4:5e:2a:44:1b:34:23:4d:b5: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F1:D9:DE:59:85:70:5A:12:EE:31:8C:85:24:7E:CF:B3:A6:88:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9a:0b:e4:6b:66:22:b3:71:61:de:dc:b6:9e:18:9d:ae:ae: 3a:56:60:0f:3d:76:63:5a:3f:20:15:51:cf:69:b7:21:67:2e: 2a:6b:4c:74:8f:63:6c:2e:84:5f:0c:b1:43:33:65:9a:88:c4: 0b:88:8c:44:d2:31:59:4d:79:bb:20:d6:69:c2:e1:b1:bd:6e: 47:8b:08:c7:86:8a:42:f4:56:3b:ac:7d:80:42:4d:72:60:0c: fd:5d:3d:df:e1:78:b6:53:9e:a1:a1:73:d5:36:de:56:24:b9: bf:1c:7d:a8:94:43:0a:eb:72:9c:07:d3:c8:fd:6f:ac:4e:6e: 05:d5:9f:82:71:28:9c:28:50:1b:f7:fe:ea:1c:cd:ed:26:6c: ba:cb:fb:65:da:8a:17:5e:0e:c9:22:18:4a:6d:9b:31:87:5f: e5:37:83:a5:82:13:92:cc:a1:49:b8:6a:c1:c4:9c:b9:69:00: cd:ba:8f:ae:09:c3:10:ca:0a:b1:3d:a8:4a:34:bc:90:3b:f8: 83:27:70:a8:61:79:62:e4:cd:17:53:9c:72:c7:4b:29:d9:1e: 94:41:af:38:44:6b:78:e7:fd:18:d4:05:b1:94:9e:63:12:75: d5:81:ce:08:c9:a9:0f:5f:e9:a1:83:84:b3:ec:4d:86:6e:e5: 97:32:06:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnZHuRMVlDQlioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MDQ5MzkxMjItZTI0OS00YzUwLWEwZWQtYWFlMGY5NDgyYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusuOmn55uEGN5UCfv9CsvTnIbi6nYCq0Hpiw aRQrMA0D1ZEILyha0WWz7K+uGIg8qJrSNHSHSXbfGcuX6vKo2iFX+K/RytqAbypg IBAHBz3RwbQNs7smc3jPTsWyUfavRwdpbCT/UE5gIA7N7URAZGO3zbxrBYzLpSt2 4HiUZjBBOcZZ5NCQEaWs4ulPlZfp7Dg3xoqrcfGShnB457BCdTQt7WFClQbbIjiS oontRnEtbcJj2ORRG2DoWthmpuAwTMax+K1Cp1LnGEwe9w2EZYvYoEO8cVPjFsWF dqhzmUdeGWKI1KyOHF8O1ccXWur7vUrtpNy0XipEGzQjTbUHvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvx2d5ZhXBaEu4xjIUkfs+zpoipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMzMzNjZlNTctM2M5OC0z NGRkLTljZGUtMGY2NDI0MDQwNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiaC+RrZiKzcWHe3LaeGJ2urjpWYA89dmNaPyAVUc9ptyFnLiprTHSP Y2wuhF8MsUMzZZqIxAuIjETSMVlNebsg1mnC4bG9bkeLCMeGikL0VjusfYBCTXJg DP1dPd/heLZTnqGhc9U23lYkub8cfaiUQwrrcpwH08j9b6xObgXVn4JxKJwoUBv3 /uocze0mbLrL+2XaihdeDskiGEptmzGHX+U3g6WCE5LMoUm4asHEnLlpAM26j64J wxDKCrE9qEo0vJA7+IMncKhheWLkzRdTnHLHSynZHpRBrzhEa3jn/RjUBbGUnmMS ddWBzgjJqQ9f6aGDhLPsTYZu5ZcyBuE= -----END CERTIFICATE-----Generated at Sun Jun 15 18:01:34 2025 by rpki-client