$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa File: cfa4f32e-c53a-3acb-998b-283e18217244.roa (raw, json) Hash identifier: Sw34pJBsAF3nMaSGlNZwc2evSZq9XxPS8Q8QE0eRhws= Subject key identifier: 35:24:52:FF:F0:50:16:D8:C6:1D:D6:36:9B:E6:47:2F:FC:BE:6F:77 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F4328584AB91B7F54CEEDA4BF60F9F260 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 14618 IP address blocks: 143.220.128.0/23 maxlen: 23 143.220.130.0/23 maxlen: 23 143.220.132.0/23 maxlen: 23 143.220.134.0/23 maxlen: 23 143.220.136.0/23 maxlen: 23 143.220.138.0/23 maxlen: 23 143.220.140.0/23 maxlen: 23 143.220.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:7f:54:ce:ed:a4:bf:60:f9:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=ee5d3e4d-c44b-4b8d-8fd3-802600460ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:39:5d:6f:fe:4e:57:61:d6:88:82:34:81:b7: 16:84:72:e9:8d:e6:d8:5a:b7:a9:8c:2c:68:94:4a: 38:f7:da:65:d3:7c:de:74:54:f1:b2:3e:e5:6a:a0: 4f:18:7d:d8:b3:41:b1:ff:1e:65:3a:34:37:45:66: 49:b9:1b:ba:05:4e:ab:41:52:8e:dc:6f:4d:86:e6: 37:9c:64:25:73:4b:a6:0b:5d:aa:77:ce:4b:57:99: 3d:5d:11:03:cb:55:e0:df:68:d7:d4:97:bb:56:34: 44:5f:38:95:7f:a9:10:96:39:94:de:f1:3a:2a:78: 5b:d9:19:06:52:9e:b0:70:b0:84:3a:6a:5d:af:3a: 4c:84:35:6c:72:e9:b0:51:25:af:77:d4:52:f2:3c: 00:f6:a5:8c:be:9d:5d:41:7f:0f:1e:f3:6d:ae:c9: 9e:ed:c7:cd:d5:3b:32:23:07:ae:99:34:5f:b6:f6: f8:3c:fe:87:03:7d:db:2c:b8:cd:04:63:7d:37:a2: 9c:ad:0a:59:79:90:91:ec:c3:1f:71:44:45:4f:36: 4e:a1:d9:98:78:ab:50:ee:d3:7b:a9:4a:34:18:e3: cd:f6:71:d6:9c:eb:b7:2b:36:c4:d0:8d:98:56:b4: 10:c6:15:62:e1:49:67:a0:1d:ba:c9:9a:af:d5:32: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:52:FF:F0:50:16:D8:C6:1D:D6:36:9B:E6:47:2F:FC:BE:6F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.128.0-143.220.142.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:64:7b:47:99:50:d9:f9:32:72:50:e1:25:51:85:96:af:e7: fb:f0:a8:dd:05:a5:d8:86:ee:05:6f:e9:e6:3f:44:0c:e3:87: fc:aa:88:fc:0b:57:12:47:67:dc:a0:35:90:45:6c:d7:a3:a8: 08:ee:ec:ce:06:c0:30:cb:ee:99:bb:1f:9a:ce:73:92:5d:52: a0:ad:90:a0:c9:92:92:96:3d:37:56:db:62:22:6b:37:b0:f0: a8:0a:28:5e:4e:a4:5a:4f:06:2a:60:ec:37:b1:d8:bf:2c:cb: 82:db:13:29:96:a7:10:01:2f:f7:c2:6d:03:d2:f0:01:70:69: d3:1c:1b:84:0f:76:7e:8d:c4:0a:2b:f3:f0:a8:5d:76:9b:a6: c9:5c:89:d6:33:9e:85:b1:cc:03:99:23:86:10:85:a4:2d:fa: a0:04:ce:f3:48:29:ad:b0:4b:42:c3:e0:15:f5:19:cd:58:8e: 2d:92:2b:3c:e3:61:b3:40:0a:fc:c3:7e:6f:13:f1:38:19:ed: b2:31:89:c3:39:be:8d:53:87:2a:ff:2a:ce:bb:d7:77:8a:17: 6d:ac:e3:df:63:74:f8:66:31:a1:3e:86:b9:47:10:88:49:6a: e2:e6:1d:56:2f:4f:4b:f9:7a:a6:9f:82:5f:72:65:cc:ae:41: 9c:ec:ac:ec -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEq5G39Uzu2kv2D58mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZWU1ZDNlNGQtYzQ0Yi00YjhkLThmZDMtODAyNjAwNDYwYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDldb/5OV2HWiII0gbcWhHLpjebYWrepjCxo lEo499pl03zedFTxsj7laqBPGH3Ys0Gx/x5lOjQ3RWZJuRu6BU6rQVKO3G9NhuY3 nGQlc0umC12qd85LV5k9XREDy1Xg32jX1Je7VjREXziVf6kQljmU3vE6Knhb2RkG Up6wcLCEOmpdrzpMhDVscumwUSWvd9RS8jwA9qWMvp1dQX8PHvNtrsme7cfN1Tsy IweumTRftvb4PP6HA33bLLjNBGN9N6KcrQpZeZCR7MMfcURFTzZOodmYeKtQ7tN7 qUo0GOPN9nHWnOu3KzbE0I2YVrQQxhVi4UlnoB26yZqv1TLglwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDUkUv/wUBbYxh3WNpvmRy/8vm93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvY2ZhNGYzMmUtYzUzYS0z YWNiLTk5OGItMjgzZTE4MjE3MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeP3IAD BACP3I4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXWR7R5lQ2fkyclDhJVGFlq/n+/Co3QWl2IbuBW/p5j9E DOOH/KqI/AtXEkdn3KA1kEVs16OoCO7szgbAMMvumbsfms5zkl1SoK2QoMmSkpY9 N1bbYiJrN7DwqAooXk6kWk8GKmDsN7HYvyzLgtsTKZanEAEv98JtA9LwAXBp0xwb hA92fo3ECivz8KhddpumyVyJ1jOehbHMA5kjhhCFpC36oATO80gprbBLQsPgFfUZ zViOLZIrPONhs0AK/MN+bxPxOBntsjGJwzm+jVOHKv8qzrvXd4oXbazj32N0+GYx oT6GuUcQiElq4uYdVi9PS/l6pp+CX3JlzK5BnOys7A== -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:40 2025 by rpki-client