$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa File: def21d29-3c57-3407-a3f2-98f21d026004.roa (raw, json) Hash identifier: h3jMLId99XUFn8qBXioLJkCWk8VLjdd8xgKD9vSq+yU= Subject key identifier: 87:E2:CD:3A:BE:26:D3:8D:2B:8E:24:22:95:B9:5E:61:10:2D:3D:A8 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F4328584BA0D245E27F001DD74C262460 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 143.220.144.0/23 maxlen: 23 143.220.146.0/23 maxlen: 23 143.220.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:45:e2:7f:00:1d:d7:4c:26:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=0d2a0861-d8c1-47a9-84e1-7654e0240c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:44:63:80:21:fd:fd:f1:b7:40:8b:c0:b7:eb: a7:9e:f1:db:5f:47:56:b4:54:96:bd:f9:7d:62:db: fd:f0:3d:ed:74:81:6c:f9:18:0b:a0:b3:64:61:b6: 7f:1a:eb:3d:f3:b2:f6:1e:dd:8a:47:d9:cf:1b:4d: 77:ad:75:13:15:b0:88:54:40:ba:2d:9e:b4:90:a5: c8:f2:2b:59:51:ad:e7:39:30:06:b4:ee:0c:8d:84: ae:37:05:7c:ce:c1:8a:18:61:ca:d2:ff:29:74:d2: 24:85:c9:ef:0a:e8:93:d5:c4:70:a4:99:fc:07:e2: c6:09:ff:f9:ac:76:52:b3:d6:fd:cb:77:34:62:0c: ae:23:51:12:65:19:dd:af:90:8b:a5:a7:41:44:cc: dc:75:3f:35:4f:96:0f:da:1f:f0:57:fc:0c:d7:20: 1e:34:13:99:dd:f2:89:2a:73:8b:09:c8:72:60:ea: 79:57:00:2c:92:5d:3d:22:57:2d:f7:55:87:ed:4d: 57:97:6e:94:41:f2:91:db:59:2f:c5:c2:d9:ed:aa: 0b:d2:f4:9e:cc:2b:20:c5:37:ff:e6:08:b1:6c:12: d2:42:80:72:53:b4:c1:6a:2b:57:48:71:2d:f0:2f: f4:44:68:ca:bf:ec:f4:e6:6f:b7:b3:8b:e3:bd:ea: ec:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E2:CD:3A:BE:26:D3:8D:2B:8E:24:22:95:B9:5E:61:10:2D:3D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.144.0-143.220.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9b:a1:99:2a:8d:62:45:48:ae:d5:ea:fc:08:7b:a0:e4:83: 10:84:f5:15:8c:6f:e7:38:1c:4b:d8:f1:33:4d:dc:1c:aa:54: 78:56:9b:35:6c:f9:1c:25:fe:cc:2b:99:e2:b0:b9:da:9c:9a: ce:fd:1b:ae:f9:56:e1:c4:90:b8:4f:5d:66:af:af:f2:7a:23: ac:37:e9:6e:8a:44:70:84:6d:2f:9a:e6:ed:cb:45:3f:ff:47: eb:f1:3d:d7:8f:5f:1c:ce:e5:ab:ee:db:4f:7e:3b:f9:7c:83: e1:e2:62:59:95:b4:51:38:60:13:e5:66:a4:81:a2:80:86:73: d2:40:59:94:50:30:25:dd:f4:af:15:60:e4:bc:0b:e6:ce:b3: c1:0f:6a:11:a4:70:88:e0:8f:34:c8:8a:27:7f:ed:08:27:66: d9:45:cb:2e:27:6c:d3:52:f7:3f:f6:58:db:c9:98:f9:86:c2: 59:b2:e3:9a:40:08:01:b0:38:2a:9e:4c:85:22:f2:20:11:90: 98:3b:8f:17:70:96:26:56:c6:89:46:65:2c:db:b1:08:0d:85: fa:16:2c:7c:14:ee:30:99:a7:9b:92:fb:49:63:b1:92:fb:59: 85:03:55:63:22:0b:c1:03:42:6d:b9:7f:18:60:dd:0c:58:5f: 4a:3d:12:24 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEug0kXifwAd10wmJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MGQyYTA4NjEtZDhjMS00N2E5LTg0ZTEtNzY1NGUwMjQwYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kRjgCH9/fG3QIvAt+unnvHbX0dWtFSWvfl9 Ytv98D3tdIFs+RgLoLNkYbZ/Gus987L2Ht2KR9nPG013rXUTFbCIVEC6LZ60kKXI 8itZUa3nOTAGtO4MjYSuNwV8zsGKGGHK0v8pdNIkhcnvCuiT1cRwpJn8B+LGCf/5 rHZSs9b9y3c0YgyuI1ESZRndr5CLpadBRMzcdT81T5YP2h/wV/wM1yAeNBOZ3fKJ KnOLCchyYOp5VwAskl09Ilct91WH7U1Xl26UQfKR21kvxcLZ7aoL0vSezCsgxTf/ 5gixbBLSQoByU7TBaitXSHEt8C/0RGjKv+z05m+3s4vjversPwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIfizTq+JtONK44kIpW5XmEQLT2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvZGVmMjFkMjktM2M1Ny0z NDA3LWEzZjItOThmMjFkMDI2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAbpuhmSqNYkVIrtXq/Ah7oOSDEIT1FYxv5zgcS9jxM03c HKpUeFabNWz5HCX+zCuZ4rC52pyazv0brvlW4cSQuE9dZq+v8nojrDfpbopEcIRt L5rm7ctFP/9H6/E9149fHM7lq+7bT347+XyD4eJiWZW0UThgE+VmpIGigIZz0kBZ lFAwJd30rxVg5LwL5s6zwQ9qEaRwiOCPNMiKJ3/tCCdm2UXLLids01L3P/ZY28mY +YbCWbLjmkAIAbA4Kp5MhSLyIBGQmDuPF3CWJlbGiUZlLNuxCA2F+hYsfBTuMJmn m5L7SWOxkvtZhQNVYyILwQNCbbl/GGDdDFhfSj0SJA== -----END CERTIFICATE-----Generated at Wed Nov 5 09:12:53 2025 by rpki-client