$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa File: 4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa (raw, json) Hash identifier: K1dHKFjc3/+tHJsL8nukPOq2LYrLX+2PjbQpZIkmU5A= Subject key identifier: E1:6B:87:67:48:2D:C8:2B:B2:EF:30:26:10:20:C0:6E:CF:09:F3:C5 Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Certificate serial: 010D0C9F4328584A1730068562CFFA7D1DEDE900 Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 31942 IP address blocks: 143.223.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:06:85:62:cf:fa:7d:1d:ed:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=09b4a64d-968b-456b-b628-e77aaf395b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:cb:bc:46:6b:66:0d:f4:4e:c2:11:75:65: bc:9a:a0:b2:1a:97:93:04:75:fa:4d:74:d2:08:ff: d9:83:f0:66:93:76:e6:b0:9e:bc:15:58:dc:b8:2b: f0:24:03:07:05:b2:c8:87:76:6c:fe:1a:e1:27:da: 63:52:26:22:6d:63:7e:5c:4c:46:12:d7:56:5d:85: 1d:99:ed:5f:66:fd:a8:e8:a2:b4:be:93:ba:85:10: d3:bf:93:66:0c:1d:eb:33:5d:e9:5f:f2:1a:fc:5c: d8:06:7a:9e:92:35:6c:a9:0c:b5:0f:11:a2:54:a0: 2d:1f:25:c2:89:22:b8:b7:8a:60:76:45:b2:66:b7: 48:db:63:25:64:6f:5c:54:61:af:33:cb:f3:11:d9: 7e:7e:8e:3f:46:87:a3:06:e2:56:a8:98:82:9b:dc: 5a:c4:70:6a:6c:65:86:26:e9:3f:0f:f6:db:3a:73: f4:0d:e8:21:c1:5c:73:f9:9f:4f:5a:2c:2d:9d:15: fc:d7:ab:18:b2:60:73:c2:f3:74:49:04:0e:70:fe: 0c:b3:8d:3b:b6:89:ce:ff:3d:c4:3f:36:53:d6:ea: 50:f9:34:07:45:04:f4:22:4e:ba:06:68:11:0e:74: f4:44:7c:8f:f2:4d:d7:1b:e7:e5:7b:dc:31:58:da: cd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6B:87:67:48:2D:C8:2B:B2:EF:30:26:10:20:C0:6E:CF:09:F3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl X509v3 Authority Key Identifier: keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer sbgp-ipAddrBlock: critical IPv4: 143.223.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:81:65:41:8f:d9:df:08:3c:b9:0e:5f:48:bd:3f:54:b4:c4: f4:f4:25:45:cc:f0:0a:fe:fb:45:7f:e9:8a:be:24:94:c4:0f: de:7e:a6:c2:2a:7f:9c:fe:b1:74:eb:0b:46:38:6c:ea:e8:64: 13:35:dc:e0:ab:5e:13:84:c7:73:98:71:1f:6b:73:2e:f8:d9: b8:64:30:9e:b7:bd:2c:ba:f7:90:11:35:0c:02:9d:74:6f:65: b9:fd:57:b0:3b:19:68:ac:16:3c:36:de:e7:ed:72:e5:c6:f6: 7f:ea:1e:ad:33:30:76:df:6f:1f:13:86:d0:be:0f:df:00:eb: 2b:0f:8e:0b:7e:b3:d4:bd:09:08:a1:b3:1b:16:a0:4f:ec:db: e6:cb:f4:a8:7a:db:e6:bb:cd:9c:82:75:64:14:c6:66:1b:d9: ad:e4:03:d7:21:bc:4b:33:37:db:5c:22:26:8e:50:ca:08:3a: fc:07:cf:07:89:59:a0:37:9e:33:45:e6:55:14:ab:6e:4b:65: dd:f7:9b:e3:81:74:b4:8b:33:8f:06:ca:10:fa:9e:1b:49:7a: 4a:1f:04:26:25:d2:2a:f4:20:26:b8:11:de:d4:28:00:fa:69: de:a4:01:7b:1f:9c:06:10:27:bc:ea:a3:cc:40:bf:89:89:5b: 43:27:a4:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAaFYs/6fR3t6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5 ZDkyMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk MDliNGE2NGQtOTY4Yi00NTZiLWI2MjgtZTc3YWFmMzk1YjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0TLvEZrZg30TsIRdWW8mqCyGpeTBHX6TXTS CP/Zg/Bmk3bmsJ68FVjcuCvwJAMHBbLIh3Zs/hrhJ9pjUiYibWN+XExGEtdWXYUd me1fZv2o6KK0vpO6hRDTv5NmDB3rM13pX/Ia/FzYBnqekjVsqQy1DxGiVKAtHyXC iSK4t4pgdkWyZrdI22MlZG9cVGGvM8vzEdl+fo4/RoejBuJWqJiCm9xaxHBqbGWG Juk/D/bbOnP0DeghwVxz+Z9PWiwtnRX816sYsmBzwvN0SQQOcP4Ms407tonO/z3E PzZT1upQ+TQHRQT0Ik66BmgRDnT0RHyP8k3XG+fle9wxWNrNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFrh2dILcgrsu8wJhAgwG7PCfPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNGRlM2ZmMTMtNjlhMC0z MDY0LWI2NWEtMmFjOWI2YjNmNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2 OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj9+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmBZUGP2d8IPLkOX0i9P1S0xPT0JUXM8Ar++0V/6Yq+JJTED95+psIq f5z+sXTrC0Y4bOroZBM13OCrXhOEx3OYcR9rcy742bhkMJ63vSy695ARNQwCnXRv Zbn9V7A7GWisFjw23uftcuXG9n/qHq0zMHbfbx8ThtC+D98A6ysPjgt+s9S9CQih sxsWoE/s2+bL9Kh62+a7zZyCdWQUxmYb2a3kA9chvEszN9tcIiaOUMoIOvwHzweJ WaA3njNF5lUUq25LZd33m+OBdLSLM48GyhD6nhtJekofBCYl0ir0ICa4Ed7UKAD6 ad6kAXsfnAYQJ7zqo8xAv4mJW0MnpOQ= -----END CERTIFICATE-----Generated at Mon Jun 16 13:09:13 2025 by rpki-client