$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa File: b596de48-c39a-3bef-8e7f-6c5138de76a0.roa (raw, json) Hash identifier: NRU9Ek1cGPO0tfHboS+FgmJVyiqkSCcMfATetsCRcco= Subject key identifier: 02:38:2A:71:42:40:3A:F5:DE:CF:39:41:6B:A8:94:22:27:A0:D5:85 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584A050A76B5C21D5E7BDEC34A00 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 398156 IP address blocks: 168.220.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:76:b5:c2:1d:5e:7b:de:c3:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=163fda1d-6604-4d00-978c-b961b47c00e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:be:76:77:33:e4:73:80:c1:5f:ae:90:9e: 34:c9:4d:70:0d:88:00:93:1a:f1:7a:3f:6a:25:31: 32:7f:ae:d9:69:dc:c0:1b:62:21:61:70:fe:df:5f: d8:77:75:21:79:7c:e3:dc:aa:e2:0e:5d:4d:b7:81: 80:10:00:33:48:04:be:02:b9:ab:ee:53:c0:46:4f: ee:bb:07:1a:7c:5b:34:e2:cf:01:a7:4c:86:9e:45: 28:9f:20:6b:91:c5:91:61:8c:8c:95:40:02:d7:79: 1d:7a:0e:bd:79:19:9b:ff:ca:f8:a5:ed:07:ac:90: 1c:ba:b6:a8:a3:a2:2b:86:b2:95:f7:a3:e1:c9:f1: 6c:5e:62:c5:0d:e4:4b:b1:b6:14:df:72:07:5e:c1: f2:4c:84:e2:8a:39:a6:f7:37:35:bc:e3:ee:c7:f5: 04:fa:3e:97:0c:fa:d8:a2:12:47:cb:bb:b7:ec:2f: 6b:03:7a:49:10:ca:19:e6:2c:85:86:69:17:e2:83: 6b:54:4f:12:52:44:c1:d5:11:f1:78:b7:1f:f2:ab: 9e:d7:1f:c5:8e:c7:2c:bd:f7:2d:e5:1f:bd:d0:77: 8c:77:29:5c:b7:da:aa:a5:c2:9a:b4:a0:cc:0d:a3: e6:d2:27:b9:2a:a7:d6:2e:9a:e1:e2:97:71:db:69: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:38:2A:71:42:40:3A:F5:DE:CF:39:41:6B:A8:94:22:27:A0:D5:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4e:84:79:c2:45:a6:f3:60:76:06:14:6e:c0:7d:c8:8d:f6: f3:93:8c:1f:c7:7d:6f:36:63:64:2f:35:2e:88:f5:3a:9d:72: b1:c4:04:42:8f:7b:63:a5:51:f2:d8:b2:75:27:32:4b:41:16: fb:9f:5c:29:be:06:73:7c:d7:65:fd:00:61:30:19:fb:ba:d7: a3:f3:66:29:a7:c9:e5:4a:96:48:53:2f:1b:61:1b:cf:14:bf: cf:28:a7:63:54:dd:68:10:cc:93:1f:48:3f:0c:e9:b0:de:4e: 79:57:77:73:5a:70:6f:8f:75:08:d7:3d:2d:dc:51:04:bc:80: 4a:06:97:e9:9a:95:59:f1:d0:cf:1d:bd:38:64:9c:06:a2:ee: 14:83:0f:23:d9:c8:84:b1:bf:81:b0:8b:7f:c3:72:c7:ff:46: fd:86:10:7b:d1:b0:f8:5b:7c:ae:70:58:1c:f3:10:f3:0e:78: 44:b3:11:5e:c5:7b:8b:5e:47:33:1f:9f:1f:aa:ae:b5:79:a1: 51:17:50:e8:71:d4:a8:15:2d:6a:73:e1:16:45:d0:3e:9f:c2: 78:63:40:9c:37:26:d9:1a:c0:87:7e:6f:90:ce:cd:4e:45:7a: d1:92:0c:17:c3:71:67:11:c5:bc:37:b3:95:91:d5:05:a9:45: 39:ab:32:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCna1wh1ee97DSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk MTYzZmRhMWQtNjYwNC00ZDAwLTk3OGMtYjk2MWI0N2MwMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYe+dncz5HOAwV+ukJ40yU1wDYgAkxrxej9q JTEyf67ZadzAG2IhYXD+31/Yd3UheXzj3KriDl1Nt4GAEAAzSAS+Armr7lPARk/u uwcafFs04s8Bp0yGnkUonyBrkcWRYYyMlUAC13kdeg69eRmb/8r4pe0HrJAcurao o6IrhrKV96PhyfFsXmLFDeRLsbYU33IHXsHyTITiijmm9zc1vOPux/UE+j6XDPrY ohJHy7u37C9rA3pJEMoZ5iyFhmkX4oNrVE8SUkTB1RHxeLcf8que1x/Fjscsvfct 5R+90HeMdylct9qqpcKatKDMDaPm0ie5KqfWLprh4pdx22kOJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI4KnFCQDr13s85QWuolCInoNWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYjU5NmRlNDgtYzM5YS0z YmVmLThlN2YtNmM1MTM4ZGU3NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClOhHnCRabzYHYGFG7AfciN9vOTjB/HfW82Y2QvNS6I9TqdcrHEBEKP e2OlUfLYsnUnMktBFvufXCm+BnN812X9AGEwGfu616PzZimnyeVKlkhTLxthG88U v88op2NU3WgQzJMfSD8M6bDeTnlXd3NacG+PdQjXPS3cUQS8gEoGl+malVnx0M8d vThknAai7hSDDyPZyISxv4Gwi3/Dcsf/Rv2GEHvRsPhbfK5wWBzzEPMOeESzEV7F e4teRzMfnx+qrrV5oVEXUOhx1KgVLWpz4RZF0D6fwnhjQJw3JtkawId+b5DOzU5F etGSDBfDcWcRxbw3s5WR1QWpRTmrMsM= -----END CERTIFICATE-----Generated at Mon Jun 16 01:53:01 2025 by rpki-client