$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa File: 2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json) Hash identifier: ihjbk7erau/0rw9OB8Vm9d8O/6/C/Ezr+goQUkUGah0= Subject key identifier: B6:11:64:C8:58:31:C9:65:FE:E6:75:9A:55:8E:A8:1A:EB:CB:10:C4 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F4328584AC01627506E61A2E3CB6C3A80 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 14618 IP address blocks: 143.220.144.0/23 maxlen: 23 143.220.146.0/23 maxlen: 23 143.220.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:27:50:6e:61:a2:e3:cb:6c:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=436be35b-e9ac-40fd-bc64-cf77d493669e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:f5:eb:ec:5a:4a:9d:ad:29:9f:20:d8:99: 70:15:fe:13:6e:1e:a5:60:2d:75:6f:fd:7e:61:f6: d5:87:5e:b8:0d:f3:68:2f:dd:51:03:c9:92:af:b8: ba:f8:3c:41:58:ab:45:3a:3f:e2:26:dc:45:47:28: bb:66:d5:c9:35:b6:70:02:f7:9c:38:e0:fc:da:4f: ff:5c:85:d4:ef:25:21:5f:99:cd:6c:01:a6:15:06: 57:7e:0f:ef:20:1a:82:87:33:93:77:e3:0e:11:6a: 28:71:6f:5a:ec:2b:cc:b4:52:da:bf:77:d0:ef:14: ef:c4:34:4b:29:8d:12:18:cb:28:3b:7b:37:d8:d9: 94:88:06:38:5b:5a:c0:bf:ec:e7:b4:f7:b2:64:e3: b3:26:23:5d:b0:99:77:7b:0b:a4:fe:fb:f7:c7:6b: 4d:c6:fa:d3:f7:fc:29:a0:40:09:d1:98:32:85:f3: 94:d6:01:df:76:9b:83:d6:c6:72:7c:69:06:c1:49: 5b:1a:2d:62:f5:44:ef:fb:ee:69:81:82:a3:b6:f0: ab:4a:4e:73:56:60:49:3c:66:96:47:6b:80:a9:36: dc:90:4b:54:73:74:56:1f:72:a1:7b:7f:7a:57:76: cd:62:f4:34:cf:69:4b:88:c7:04:7c:a1:c1:9a:5d: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:11:64:C8:58:31:C9:65:FE:E6:75:9A:55:8E:A8:1A:EB:CB:10:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.144.0-143.220.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6c:21:a4:d1:89:f8:d0:08:00:30:3d:fa:e1:32:a9:91:04: ff:77:59:31:5a:c5:11:b3:58:d4:4b:a8:3a:8f:2c:b2:5b:34: e7:5e:33:74:9a:2a:cc:88:a8:dd:4f:fe:d5:26:de:bc:a2:da: b1:90:f0:a3:cc:e3:2e:8f:b3:e5:16:e6:67:88:8f:0e:d5:2b: 43:85:e0:ad:c1:db:f5:dd:6f:96:25:bf:79:69:61:f3:9d:01: f2:09:ce:d2:11:f6:58:2f:71:8a:b8:49:78:41:f4:25:de:61: fd:fd:dd:db:fc:a1:6e:3a:5f:06:46:3e:5b:f3:8f:3c:9a:16: 58:30:10:0f:07:61:55:92:c8:c6:3f:e9:cd:c6:d2:51:21:6f: 9d:b9:40:31:18:1a:91:cc:0b:b2:1e:cb:b4:37:0c:e0:6c:79: 6b:53:64:aa:5e:4a:19:3f:f8:b4:46:0f:2d:0a:7a:3b:0a:cc: f1:16:57:40:28:84:4e:d7:4c:2f:93:40:e8:23:db:13:98:b3: d5:71:7c:77:fc:bd:a5:e1:0c:e6:1c:4a:7e:78:70:88:d1:5e: f5:99:77:17:83:1e:cf:ff:21:52:83:b5:e4:e9:d4:83:ea:3a: d9:fe:36:84:10:ca:e8:7c:64:91:2e:ae:e0:66:58:95:8b:f9: 47:fe:69:21 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErAFidQbmGi48tsOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NDM2YmUzNWItZTlhYy00MGZkLWJjNjQtY2Y3N2Q0OTM2NjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDv16+xaSp2tKZ8g2JlwFf4Tbh6lYC11b/1+ YfbVh164DfNoL91RA8mSr7i6+DxBWKtFOj/iJtxFRyi7ZtXJNbZwAvecOOD82k// XIXU7yUhX5nNbAGmFQZXfg/vIBqChzOTd+MOEWoocW9a7CvMtFLav3fQ7xTvxDRL KY0SGMsoO3s32NmUiAY4W1rAv+zntPeyZOOzJiNdsJl3ewuk/vv3x2tNxvrT9/wp oEAJ0ZgyhfOU1gHfdpuD1sZyfGkGwUlbGi1i9UTv++5pgYKjtvCrSk5zVmBJPGaW R2uAqTbckEtUc3RWH3Khe396V3bNYvQ0z2lLiMcEfKHBml3yjQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLYRZMhYMcll/uZ1mlWOqBrryxDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvMmM4OTk3NTYtYWQxZi0z NzM0LTk3N2MtNjVlYWVmMmJiYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEASmwhpNGJ+NAIADA9+uEyqZEE/3dZMVrFEbNY1EuoOo8s sls0514zdJoqzIio3U/+1SbevKLasZDwo8zjLo+z5RbmZ4iPDtUrQ4XgrcHb9d1v liW/eWlh850B8gnO0hH2WC9xirhJeEH0Jd5h/f3d2/yhbjpfBkY+W/OPPJoWWDAQ DwdhVZLIxj/pzcbSUSFvnblAMRgakcwLsh7LtDcM4Gx5a1Nkql5KGT/4tEYPLQp6 OwrM8RZXQCiETtdML5NA6CPbE5iz1XF8d/y9peEM5hxKfnhwiNFe9Zl3F4Mez/8h UoO15OnUg+o62f42hBDK6HxkkS6u4GZYlYv5R/5pIQ== -----END CERTIFICATE-----Generated at Wed Aug 6 05:27:07 2025 by rpki-client