$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa File: 2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json) Hash identifier: Lc2b5AQ/2v/YoiUJsACi9hz7wmwFuRZH8W+xcXjCCIA= Subject key identifier: 21:45:66:9C:83:A0:66:92:C7:B3:C2:4C:73:8F:4F:5E:EA:29:46:9B Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F43285849DF5A5CA08F5AD044FB4083C0 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 14618 IP address blocks: 143.220.144.0/23 maxlen: 23 143.220.146.0/23 maxlen: 23 143.220.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5c:a0:8f:5a:d0:44:fb:40:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=78de2d56-8e6b-44cb-9be8-c4a37ef80f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:99:4c:cf:98:24:44:3d:72:57:85:33:fb: b3:57:19:31:d4:c4:5b:0a:15:5c:83:0e:6e:9a:04: 8a:1a:3e:cc:6f:fc:9c:9a:a4:c5:61:b2:de:67:cd: af:b0:ac:07:22:82:42:d7:bc:4d:52:d0:81:c0:91: 75:4e:91:aa:cf:2f:3b:e3:f5:ae:4d:eb:66:ef:f4: ee:6c:fb:9c:a5:8f:ec:4e:04:fc:d5:f7:c5:99:82: 79:f2:90:4a:95:7b:7b:a9:53:94:88:1f:9b:1f:8e: c6:b4:3e:a8:1c:a2:75:98:d5:33:59:80:ae:b3:cc: f3:38:d0:65:3d:25:77:94:52:7b:b8:4d:9a:93:73: 3f:0b:04:cf:1a:b9:00:05:d5:7e:f4:ab:0d:12:8c: 6c:4a:8e:a0:38:c7:89:74:74:73:8f:d6:cb:fc:f2: 81:c1:0b:49:9d:ad:a0:2a:22:42:2f:b1:bf:a7:4f: e2:ff:3b:32:6e:13:c0:25:a8:8c:6f:c3:24:23:eb: e1:72:a9:cf:d3:a5:cb:6f:ef:c3:6c:0b:34:4b:9d: 62:44:03:96:6c:8d:51:dd:d8:5a:0d:f7:ef:fe:a7: 5c:99:46:9e:22:10:af:dd:a1:d9:f2:e1:d2:bd:1a: 00:a0:8e:39:c6:b5:64:78:7b:bf:af:3b:33:c1:64: 7c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:45:66:9C:83:A0:66:92:C7:B3:C2:4C:73:8F:4F:5E:EA:29:46:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.144.0-143.220.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7a:14:26:66:fa:98:e5:b1:b9:f6:54:d9:0f:d4:c0:47:84: fb:be:f2:a8:15:8a:46:69:31:f2:8f:e2:e1:c3:9a:d7:94:c4: df:36:3f:f8:2b:bf:bd:df:11:9b:88:2d:0c:ba:a2:d0:7f:fe: f3:c8:ee:65:d3:7b:17:e6:1e:05:52:ed:60:ac:29:00:1f:e2: c7:3b:54:ba:c9:e3:07:5d:81:d9:69:9b:01:8c:75:59:c4:15: 90:1f:74:15:80:ba:24:c3:4f:52:95:f7:fb:dd:61:f4:97:69: eb:5a:2f:b9:92:f8:27:b0:86:4b:1f:e1:9c:15:07:20:92:bd: a7:44:fe:61:15:41:80:5b:19:6c:d7:f0:b4:6c:65:af:a6:1a: 6d:a4:f1:1a:75:92:19:47:ea:04:e2:bb:e8:08:7a:45:b5:5e: 02:fc:f6:e6:e8:e4:ea:73:92:b0:2e:1c:bb:2b:6f:f3:c0:44: 36:f2:fc:12:99:df:e9:45:f2:57:97:8e:a3:ba:7a:ff:80:f9: d7:be:9b:44:88:81:04:ee:a0:cb:75:5d:ff:8d:1c:98:81:20: 86:4d:a7:50:31:15:cd:85:91:54:2f:3a:d6:3c:f7:60:a0:f2: f7:00:98:c3:19:35:98:6e:62:e8:cd:3b:72:64:71:e4:d0:62: e9:d0:5b:65 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnfWlygj1rQRPtAg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NzhkZTJkNTYtOGU2Yi00NGNiLTliZTgtYzRhMzdlZjgwZjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRqZTM+YJEQ9cleFM/uzVxkx1MRbChVcgw5u mgSKGj7Mb/ycmqTFYbLeZ82vsKwHIoJC17xNUtCBwJF1TpGqzy874/WuTetm7/Tu bPucpY/sTgT81ffFmYJ58pBKlXt7qVOUiB+bH47GtD6oHKJ1mNUzWYCus8zzONBl PSV3lFJ7uE2ak3M/CwTPGrkABdV+9KsNEoxsSo6gOMeJdHRzj9bL/PKBwQtJna2g KiJCL7G/p0/i/zsybhPAJaiMb8MkI+vhcqnP06XLb+/DbAs0S51iRAOWbI1R3dha Dffv/qdcmUaeIhCv3aHZ8uHSvRoAoI45xrVkeHu/rzszwWR81wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCFFZpyDoGaSx7PCTHOPT17qKUabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvMmM4OTk3NTYtYWQxZi0z NzM0LTk3N2MtNjVlYWVmMmJiYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARXoUJmb6mOWxufZU2Q/UwEeE+77yqBWKRmkx8o/i4cOa 15TE3zY/+Cu/vd8Rm4gtDLqi0H/+88juZdN7F+YeBVLtYKwpAB/ixztUusnjB12B 2WmbAYx1WcQVkB90FYC6JMNPUpX3+91h9Jdp61ovuZL4J7CGSx/hnBUHIJK9p0T+ YRVBgFsZbNfwtGxlr6YabaTxGnWSGUfqBOK76Ah6RbVeAvz25ujk6nOSsC4cuytv 88BENvL8Epnf6UXyV5eOo7p6/4D5176bRIiBBO6gy3Vd/40cmIEghk2nUDEVzYWR VC861jz3YKDy9wCYwxk1mG5i6M07cmRx5NBi6dBbZQ== -----END CERTIFICATE-----Generated at Sun Jun 15 13:24:41 2025 by rpki-client