$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ffd7c3fa-6db6-312f-a06f-60d3e2ad4af6.roa File: ffd7c3fa-6db6-312f-a06f-60d3e2ad4af6.roa (raw, json) Hash identifier: MbMR5SIAZaTRXzIz5vRZ9del8tHJ+0Fg69fLtWz1HG4= Subject key identifier: F7:17:1B:D6:EB:4A:A7:84:3A:40:27:E9:B0:B6:50:7D:88:B3:81:6C Certificate issuer: /CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f Certificate serial: 010D0C9F43285849C0A4E00B8EDC5D56F58406D0 Authority key identifier: 5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ffd7c3fa-6db6-312f-a06f-60d3e2ad4af6.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 393451 IP address blocks: 143.195.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e0:0b:8e:dc:5d:56:f5:84:06:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=33c5ce3b-3e24-400f-8ae0-97cd5bf9e3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:9f:d5:12:b2:c3:b1:9f:95:45:a6:5a:d5: b7:4e:3b:0b:93:d9:ad:8f:6a:2f:10:29:96:f4:30: b4:96:a6:c3:0f:f6:f0:55:67:94:6f:c5:2f:bb:1c: e3:59:39:72:aa:80:55:ad:6f:36:03:c1:be:84:0e: f1:1b:70:f2:bc:91:ce:6b:e8:84:e4:c3:68:a8:7c: 4b:86:af:f1:50:cb:86:75:da:38:85:97:de:e4:82: c4:2b:a8:42:2c:65:12:b5:55:ea:dc:db:bd:3a:8b: 49:5d:16:80:ec:f3:9d:c4:3f:2e:df:d0:d0:c4:0c: 46:6a:0e:68:82:cc:b8:e8:3f:f8:c8:53:9a:ee:c7: 4f:60:1c:f7:a0:c0:06:d3:22:e2:b0:6b:8c:b6:7f: ca:f9:27:42:93:ce:23:1a:d3:73:fc:47:4f:4f:fd: b1:1b:5b:b1:5b:3b:76:a3:65:e7:45:e9:2d:50:fc: b4:04:6a:53:84:8c:d8:08:df:d0:d3:04:cc:7f:9c: a5:25:c6:44:6a:89:dc:b2:50:3b:ee:d4:63:fd:c3: cc:a0:b4:39:ab:dc:97:7d:a1:6f:17:db:29:96:aa: 96:a9:f6:3d:16:98:62:8a:f5:14:a4:df:18:68:ef: 66:65:81:08:3e:7e:73:10:02:80:ec:c9:93:96:e4: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:17:1B:D6:EB:4A:A7:84:3A:40:27:E9:B0:B6:50:7D:88:B3:81:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ffd7c3fa-6db6-312f-a06f-60d3e2ad4af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.crl X509v3 Authority Key Identifier: keyid:5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer sbgp-ipAddrBlock: critical IPv4: 143.195.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:20:0b:7a:18:7b:9c:f2:43:24:fe:b9:aa:af:78:1e:ef:ea: ce:b2:f2:8d:42:70:4b:64:4f:56:9a:c5:01:d2:75:dc:2e:ce: 57:f2:e6:4a:cf:f6:59:66:70:a7:07:c9:db:b3:fc:ed:0a:72: b9:09:e7:54:e8:78:23:16:46:fd:34:15:a4:26:03:8b:e1:f7: 72:63:dd:71:f1:12:70:9d:4e:64:f8:04:ca:f1:a2:34:84:cd: 55:74:be:86:e3:40:6e:72:26:5f:24:cd:e8:09:84:02:07:49: bb:1c:46:c0:55:75:7f:32:77:d4:04:b7:d4:03:e3:49:84:df: 92:02:17:1b:12:f5:53:d6:5c:12:68:60:93:4c:5b:25:a2:a9: 44:aa:3d:0d:88:74:2d:f7:e0:3d:73:4e:3f:f6:a1:03:be:d4: e1:e0:0e:6b:5b:93:d2:34:b7:ad:34:a0:9a:a1:f5:79:c6:8a: 0c:5b:2a:d5:42:09:3d:66:8d:3d:28:1a:0e:28:60:aa:59:1a: b5:56:11:9f:5c:70:3f:df:d7:2d:c9:7a:f6:57:98:ab:d4:4a: b5:6a:70:62:73:e8:8b:f7:9e:b6:97:19:96:0d:bc:99:f7:33: 07:86:09:e8:3e:be:64:40:9d:98:bd:7a:36:22:57:ad:09:41: 13:28:46:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOALjtxdVvWEBtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0OTJlZWYtMDFiZS00YjgxLThlOWYtOGQ4OWY3YzZm ODVmMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MzNjNWNlM2ItM2UyNC00MDBmLThhZTAtOTdjZDViZjllM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswef1RKyw7GflUWmWtW3TjsLk9mtj2ovECmW 9DC0lqbDD/bwVWeUb8UvuxzjWTlyqoBVrW82A8G+hA7xG3DyvJHOa+iE5MNoqHxL hq/xUMuGddo4hZfe5ILEK6hCLGUStVXq3Nu9OotJXRaA7POdxD8u39DQxAxGag5o gsy46D/4yFOa7sdPYBz3oMAG0yLisGuMtn/K+SdCk84jGtNz/EdPT/2xG1uxWzt2 o2XnRektUPy0BGpThIzYCN/Q0wTMf5ylJcZEaoncslA77tRj/cPMoLQ5q9yXfaFv F9splqqWqfY9FphiivUUpN8YaO9mZYEIPn5zEAKA7MmTluTaYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcXG9brSqeEOkAn6bC2UH2Is4FsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NTQ5 MmVlZi0wMWJlLTRiODEtOGU5Zi04ZDg5ZjdjNmY4NWYvZmZkN2MzZmEtNmRiNi0z MTJmLWEwNmYtNjBkM2UyYWQ0YWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjU0OTJlZWYtMDFiZS00YjgxLThl OWYtOGQ4OWY3YzZmODVmLzY1NDkyZWVmLTAxYmUtNGI4MS04ZTlmLThkODlmN2M2 Zjg1Zi5jcmwwHwYDVR0jBBgwFoAUW4a6N52gzNW5al1cf6H52mjALPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NTQ5MmVlZi0wMWJlLTRiODEtOGU5Zi04ZDg5 ZjdjNmY4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFj8PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkgC3oYe5zyQyT+uaqveB7v6s6y8o1CcEtkT1aaxQHSddwuzlfy5krP 9llmcKcHyduz/O0KcrkJ51ToeCMWRv00FaQmA4vh93Jj3XHxEnCdTmT4BMrxojSE zVV0vobjQG5yJl8kzegJhAIHSbscRsBVdX8yd9QEt9QD40mE35ICFxsS9VPWXBJo YJNMWyWiqUSqPQ2IdC334D1zTj/2oQO+1OHgDmtbk9I0t600oJqh9XnGigxbKtVC CT1mjT0oGg4oYKpZGrVWEZ9ccD/f1y3JevZXmKvUSrVqcGJz6Iv3nraXGZYNvJn3 MweGCeg+vmRAnZi9ejYiV60JQRMoRmU= -----END CERTIFICATE-----Generated at Mon Jun 30 01:04:37 2025 by rpki-client