$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa File: def21d29-3c57-3407-a3f2-98f21d026004.roa (raw, json) Hash identifier: GkLqo6Ycrpgsg8hG4EDfvVVHXabAp8wBTWz7rqWx12I= Subject key identifier: 93:52:E5:09:1F:88:7D:2F:DF:22:42:BA:76:29:EA:4D:90:C3:17:18 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F4328584AC016273AB73A8E1D0A071090 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 143.220.144.0/23 maxlen: 23 143.220.146.0/23 maxlen: 23 143.220.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:27:3a:b7:3a:8e:1d:0a:07:10:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=326987c8-eb9a-4c6b-b908-f9615983e30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:43:01:5e:ed:a5:df:fb:28:94:37:a8:66: 23:95:4c:5f:16:f2:5c:bd:57:f4:3b:76:d4:64:90: 71:d7:00:98:6a:93:fc:29:01:51:2b:f4:f3:87:11: e5:01:1a:b5:3e:54:4c:5d:1c:da:f8:e8:8e:6f:ef: 22:fe:64:96:76:44:73:7a:8f:22:33:0d:b1:77:45: 64:69:b1:ac:7b:b3:41:be:aa:8e:61:df:e3:d9:ff: fe:69:03:82:0e:d6:27:09:82:5c:db:57:8f:89:18: e5:4f:6f:a0:0f:5f:1e:b5:38:0a:17:fd:01:04:65: 6f:b9:30:50:cf:3d:1e:f2:12:43:ce:f7:3d:a7:5f: 25:a8:82:30:a4:e5:50:42:84:62:06:d1:ab:fe:7a: 0e:59:b6:0b:70:9f:22:09:fc:a1:cb:2d:43:b4:33: d0:a7:2d:97:fd:a7:f9:33:8a:60:f7:01:fd:99:89: db:ce:1b:37:af:f8:fd:bf:4a:3a:b6:6c:42:ae:5a: 68:28:3c:37:50:69:bf:bd:45:10:f8:7f:78:d2:dd: ee:0d:9a:0e:c3:b6:65:4a:79:fb:f0:a3:4f:79:6e: 2e:c0:af:50:de:c7:99:8f:6e:23:05:c2:f4:2c:8d: 9e:8f:92:0d:7c:7d:ea:4c:a9:9d:0b:a2:2b:c3:21: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:52:E5:09:1F:88:7D:2F:DF:22:42:BA:76:29:EA:4D:90:C3:17:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.144.0-143.220.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d9:26:27:b7:4d:89:75:60:5e:8a:f8:c5:bb:65:a2:1c:3d: 21:34:37:90:35:4c:1c:a2:dd:55:48:61:d0:f8:1f:53:3e:6f: 9a:dd:ff:08:9d:2d:d4:a6:3a:74:45:f9:ee:9c:38:d0:99:39: e9:2b:2e:62:15:b3:9e:44:6b:5b:97:29:8a:b3:cc:72:02:ec: 50:bd:f6:c2:fe:0b:ab:f4:5b:2a:3f:66:95:65:1b:d9:f7:18: 4a:b4:54:0a:38:4a:a1:34:a4:da:03:c0:cc:81:ee:d5:1d:31: 3e:be:3b:88:3a:ff:19:a4:c6:7d:9d:63:c4:e7:ca:6d:17:40: e9:83:bc:31:32:ab:bc:88:a6:54:8d:c0:eb:15:4e:ee:d4:62: bb:1d:b8:d7:b0:62:b8:90:0d:84:97:02:26:c8:51:a8:e4:de: 42:57:8c:75:52:65:fc:b2:c6:47:49:88:d6:84:65:73:4f:53: 0b:9b:13:76:9a:22:f5:cf:6a:b8:99:cd:7d:a8:50:be:c5:44: d4:3a:67:7f:1d:ff:43:d1:d4:b8:b2:82:cd:bd:02:cf:ce:8d: 33:bd:fa:d7:ef:a4:9a:88:40:33:e3:77:41:ff:1f:4a:61:7a: 49:6c:6c:69:f1:9b:2b:0c:79:e7:3f:97:7e:c7:f8:0f:43:c5: c1:87:80:ed -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErAFic6tzqOHQoHEJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MzI2OTg3YzgtZWI5YS00YzZiLWI5MDgtZjk2MTU5ODNlMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj5DAV7tpd/7KJQ3qGYjlUxfFvJcvVf0O3bU ZJBx1wCYapP8KQFRK/TzhxHlARq1PlRMXRza+OiOb+8i/mSWdkRzeo8iMw2xd0Vk abGse7NBvqqOYd/j2f/+aQOCDtYnCYJc21ePiRjlT2+gD18etTgKF/0BBGVvuTBQ zz0e8hJDzvc9p18lqIIwpOVQQoRiBtGr/noOWbYLcJ8iCfyhyy1DtDPQpy2X/af5 M4pg9wH9mYnbzhs3r/j9v0o6tmxCrlpoKDw3UGm/vUUQ+H940t3uDZoOw7ZlSnn7 8KNPeW4uwK9Q3seZj24jBcL0LI2ej5INfH3qTKmdC6IrwyGLnwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJNS5QkfiH0v3yJCunYp6k2QwxcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvZGVmMjFkMjktM2M1Ny0z NDA3LWEzZjItOThmMjFkMDI2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJ9kmJ7dNiXVgXor4xbtlohw9ITQ3kDVMHKLdVUhh0Pgf Uz5vmt3/CJ0t1KY6dEX57pw40Jk56SsuYhWznkRrW5cpirPMcgLsUL32wv4Lq/Rb Kj9mlWUb2fcYSrRUCjhKoTSk2gPAzIHu1R0xPr47iDr/GaTGfZ1jxOfKbRdA6YO8 MTKrvIimVI3A6xVO7tRiux2417BiuJANhJcCJshRqOTeQleMdVJl/LLGR0mI1oRl c09TC5sTdpoi9c9quJnNfahQvsVE1Dpnfx3/Q9HUuLKCzb0Cz86NM7361++kmohA M+N3Qf8fSmF6SWxsafGbKwx55z+Xfsf4D0PFwYeA7Q== -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:17 2025 by rpki-client