$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa File: cfa4f32e-c53a-3acb-998b-283e18217244.roa (raw, json) Hash identifier: 8r1hORNQ/OVsg73yxx1DVZ1UEIFtRnQdUXewZnySb7k= Subject key identifier: B3:FA:6D:61:7F:A9:EC:26:30:BE:D8:4A:8B:6D:D6:02:23:D3:BF:50 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F4328584B99D77BFC1C442EE62B1E6800 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 143.220.128.0/23 maxlen: 23 143.220.130.0/23 maxlen: 23 143.220.132.0/23 maxlen: 23 143.220.134.0/23 maxlen: 23 143.220.136.0/23 maxlen: 23 143.220.138.0/23 maxlen: 23 143.220.140.0/23 maxlen: 23 143.220.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7b:fc:1c:44:2e:e6:2b:1e:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0f245c21-3850-4513-9dd0-43209df4501d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:e6:00:43:88:68:f7:a7:84:0a:4e:dc:2f: 72:9e:e4:cd:69:21:50:a2:c0:82:7a:1d:e6:c1:65: 7d:6c:92:4e:81:60:f3:67:03:9f:f0:f9:00:e5:45: 50:ea:66:a2:7f:6e:3b:72:41:4a:17:28:ab:d4:58: c3:48:9b:8e:19:82:db:de:94:c5:96:78:be:dd:f0: 07:83:68:61:96:49:57:40:bf:c6:03:cf:db:c3:fb: d0:26:07:8e:2f:da:0b:5c:40:59:29:4d:af:fe:b1: 14:66:83:22:65:54:31:6d:a3:70:dc:ab:49:34:92: 3e:12:b3:92:f8:1c:84:fe:70:f1:4c:3f:f3:fd:a5: 21:62:7e:38:4a:34:40:36:d4:1e:61:14:c7:cd:56: 20:a3:a8:02:e4:49:8a:22:70:5a:db:24:41:a9:80: 11:91:25:ee:2c:a2:1d:11:aa:4b:e4:57:20:68:3d: 51:4d:94:c6:e6:40:9c:3a:8a:24:0d:af:82:68:3c: ee:80:b1:82:ac:e7:bc:2d:30:60:da:e0:80:75:31: 28:f1:64:04:d9:0c:7e:6e:a4:e4:1b:a3:ce:0f:fe: a6:73:bf:08:2d:18:a3:49:56:5a:32:8a:cf:8e:50: f5:10:3d:52:cf:8c:1b:bd:77:6d:0e:dd:dc:c8:1e: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FA:6D:61:7F:A9:EC:26:30:BE:D8:4A:8B:6D:D6:02:23:D3:BF:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.128.0-143.220.142.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:61:10:bf:31:0c:ea:69:cc:66:e7:95:42:a0:d5:08:07:46: b5:76:bd:94:39:82:d5:71:01:d4:83:bb:47:8a:f9:d5:c3:bc: 88:eb:e5:a7:1a:36:6f:11:70:24:08:b2:5b:0b:7f:9b:35:61: d3:c0:b3:cc:65:d8:cb:73:26:93:5e:68:da:87:93:93:0e:eb: 71:97:e7:95:b3:4c:5e:f1:08:30:d3:d2:c2:46:6f:7a:e4:56: 42:0b:0d:df:ca:17:26:e8:05:67:c2:30:6a:7d:6b:52:4a:b5: 91:68:ca:c3:ef:b3:27:a0:67:1b:66:e3:f2:12:9f:0b:b9:98: 4e:3c:1f:5d:e7:a9:e9:48:51:70:e7:b8:30:54:f0:e9:70:f8: d8:65:ba:fa:86:54:50:06:77:dc:ed:d5:c0:ef:72:6a:a3:f6: 99:ea:7b:63:06:37:a5:be:b7:53:ab:0d:75:de:2d:60:72:e0: a5:58:bc:47:72:31:61:e4:d6:a1:83:85:b7:31:a0:f1:f7:72: 8b:54:7d:ef:51:a8:ed:99:7f:fc:09:dd:9c:0b:dd:5d:2d:09: 6f:08:b0:55:38:62:f1:3f:34:f8:50:d5:f2:df:be:16:28:68: d9:fb:c5:64:1a:10:5d:a2:1b:2f:70:0f:42:76:3e:53:e4:7d: 28:c8:ed:82 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuZ13v8HEQu5iseaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGYyNDVjMjEtMzg1MC00NTEzLTlkZDAtNDMyMDlkZjQ1MDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoejmAEOIaPenhApO3C9ynuTNaSFQosCCeh3m wWV9bJJOgWDzZwOf8PkA5UVQ6maif247ckFKFyir1FjDSJuOGYLb3pTFlni+3fAH g2hhlklXQL/GA8/bw/vQJgeOL9oLXEBZKU2v/rEUZoMiZVQxbaNw3KtJNJI+ErOS +ByE/nDxTD/z/aUhYn44SjRANtQeYRTHzVYgo6gC5EmKInBa2yRBqYARkSXuLKId EapL5FcgaD1RTZTG5kCcOookDa+CaDzugLGCrOe8LTBg2uCAdTEo8WQE2Qx+bqTk G6POD/6mc78ILRijSVZaMorPjlD1ED1Sz4wbvXdtDt3cyB5xlwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLP6bWF/qewmML7YSott1gIj079QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvY2ZhNGYzMmUtYzUzYS0z YWNiLTk5OGItMjgzZTE4MjE3MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeP3IAD BACP3I4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJGEQvzEM6mnMZueVQqDVCAdGtXa9lDmC1XEB1IO7R4r5 1cO8iOvlpxo2bxFwJAiyWwt/mzVh08CzzGXYy3Mmk15o2oeTkw7rcZfnlbNMXvEI MNPSwkZveuRWQgsN38oXJugFZ8Iwan1rUkq1kWjKw++zJ6BnG2bj8hKfC7mYTjwf Xeep6UhRcOe4MFTw6XD42GW6+oZUUAZ33O3VwO9yaqP2mep7YwY3pb63U6sNdd4t YHLgpVi8R3IxYeTWoYOFtzGg8fdyi1R971Go7Zl//AndnAvdXS0JbwiwVThi8T80 +FDV8t++Fiho2fvFZBoQXaIbL3APQnY+U+R9KMjtgg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:32:32 2025 by rpki-client