$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa File: 2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json) Hash identifier: q3wM9s7awUq53BoN9Kdv5mz8OMTTOZDdnuXzHPF3I4o= Subject key identifier: 7B:F8:46:5C:82:CC:20:A8:5B:BB:F3:E5:97:8C:06:8C:18:72:A7:65 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F4328584C8046CC459934FA41F510A580 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 14618 IP address blocks: 143.220.144.0/23 maxlen: 23 143.220.146.0/23 maxlen: 23 143.220.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:cc:45:99:34:fa:41:f5:10:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=6eb23432-794b-4bf6-9310-45bdce684bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:a2:6e:50:58:1e:a0:25:7b:c8:15:0d:fc: f6:12:3e:b0:89:a4:e1:bd:d6:0a:da:65:55:d6:23: 11:02:9a:e4:23:21:ea:1b:ec:e2:bf:9d:7a:34:58: af:51:c8:92:87:97:21:b8:3c:d4:e2:79:8f:4c:2d: ac:de:79:33:87:0d:bb:25:50:36:82:07:3e:37:dc: 4c:3c:3d:11:5c:86:87:56:d6:c2:49:04:45:3d:97: bf:8e:03:54:08:28:94:dd:3f:55:b0:5e:08:40:25: 11:8c:f0:5f:21:a5:e9:4c:df:13:cd:27:3a:db:95: 77:5c:c8:39:3d:b6:4b:f5:bc:31:21:6a:20:f4:30: f2:70:bf:db:86:aa:7d:80:85:58:08:bd:a5:f6:77: 32:7e:bc:7f:87:de:0a:17:09:05:35:cf:13:ac:47: 86:9c:ec:bf:4e:2a:b4:22:41:5f:e9:54:b2:ec:64: 13:1c:55:29:42:cc:a6:b1:36:52:21:c4:5a:05:f9: 6d:c6:f3:28:bc:ba:99:98:58:bf:72:0f:45:c9:3c: 5f:73:c6:3a:95:95:a4:05:83:4b:e7:b2:e8:9f:76: ba:75:c0:cf:41:97:61:35:f5:b5:6a:a1:72:ab:33: fd:47:92:f9:9d:30:15:c2:d2:e1:0a:1b:ec:9b:44: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F8:46:5C:82:CC:20:A8:5B:BB:F3:E5:97:8C:06:8C:18:72:A7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.144.0-143.220.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4b:49:fe:3f:ec:ed:f9:32:91:f4:43:9f:8b:de:a3:fa:5f: 4d:39:84:07:8c:27:c2:ab:8c:be:e4:a4:ec:51:94:ca:2b:9e: 94:07:e0:09:98:73:ab:98:70:d2:b4:a5:bb:04:d7:51:2e:fe: 04:25:00:ff:ca:78:41:e7:c9:f1:2a:2a:a9:df:23:49:2e:05: ed:6c:bc:4e:10:a6:32:dc:c3:b4:98:73:7d:1a:93:6f:fe:17: e1:9e:16:9c:6a:9e:a7:42:62:f5:0b:f7:72:b5:61:29:f0:87: 45:91:21:7a:d9:27:e6:f4:b8:a6:f4:1d:bf:89:c3:14:85:11: 32:a6:3a:c8:2b:b1:59:af:83:1d:8f:2c:91:f4:f8:57:6a:ff: 7e:d4:7a:9e:04:f2:76:27:64:aa:ca:5e:f1:7a:07:cc:28:7d: 19:d9:d0:4d:ec:a9:1e:39:e7:c3:8a:b7:3b:ef:6f:82:c0:6d: da:bf:c2:71:67:0c:6b:7b:44:bd:ce:c0:8f:99:76:91:01:5a: d8:e4:e7:a9:b7:79:a8:ea:99:3e:c3:14:bd:b1:16:bf:7e:63: 9f:5a:ae:84:be:72:ee:56:27:d9:93:c7:79:ef:1f:7d:e1:74: ea:21:6a:6b:bb:57:a5:a6:e4:f6:8e:59:ad:6a:d3:79:c9:97: 92:6f:a9:f0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEyARsxFmTT6QfUQpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NmViMjM0MzItNzk0Yi00YmY2LTkzMTAtNDViZGNlNjg0YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTaiblBYHqAle8gVDfz2Ej6wiaThvdYK2mVV 1iMRAprkIyHqG+ziv516NFivUciSh5chuDzU4nmPTC2s3nkzhw27JVA2ggc+N9xM PD0RXIaHVtbCSQRFPZe/jgNUCCiU3T9VsF4IQCURjPBfIaXpTN8TzSc625V3XMg5 PbZL9bwxIWog9DDycL/bhqp9gIVYCL2l9ncyfrx/h94KFwkFNc8TrEeGnOy/Tiq0 IkFf6VSy7GQTHFUpQsymsTZSIcRaBfltxvMovLqZmFi/cg9FyTxfc8Y6lZWkBYNL 57Lon3a6dcDPQZdhNfW1aqFyqzP9R5L5nTAVwtLhChvsm0RhmwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHv4RlyCzCCoW7vz5ZeMBowYcqdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvMmM4OTk3NTYtYWQxZi0z NzM0LTk3N2MtNjVlYWVmMmJiYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANktJ/j/s7fkykfRDn4veo/pfTTmEB4wnwquMvuSk7FGU yiuelAfgCZhzq5hw0rSluwTXUS7+BCUA/8p4QefJ8Soqqd8jSS4F7Wy8ThCmMtzD tJhzfRqTb/4X4Z4WnGqep0Ji9Qv3crVhKfCHRZEhetkn5vS4pvQdv4nDFIURMqY6 yCuxWa+DHY8skfT4V2r/ftR6ngTydidkqspe8XoHzCh9GdnQTeypHjnnw4q3O+9v gsBt2r/CcWcMa3tEvc7Aj5l2kQFa2OTnqbd5qOqZPsMUvbEWv35jn1quhL5y7lYn 2ZPHee8ffeF06iFqa7tXpabk9o5ZrWrTecmXkm+p8A== -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:23 2026 by rpki-client