$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa File: f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa (raw, json) Hash identifier: xJ9Q5fneXZtJNdaruLcWBG7lxwi7aVc1fQ97iss4NUA= Subject key identifier: D7:68:96:2A:E5:1A:D7:28:8D:CC:88:2E:D9:45:50:3C:EF:86:BD:6E Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584ACE0B8E5F3B8C9A73E5F63100 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 14618 IP address blocks: 143.244.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:8e:5f:3b:8c:9a:73:e5:f6:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=19145817-d125-40c7-a69f-f388d02b80e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:3e:32:dc:29:af:13:d5:dd:fb:ed:75:8f: 3e:7f:86:8c:85:58:c3:1b:c3:55:37:cc:7e:5c:8a: ad:c9:b9:53:b3:bc:2a:70:c6:90:81:a8:57:c7:47: 55:d8:e5:b1:ae:00:9b:1b:2c:2c:df:4a:cb:1e:6b: 3e:18:d9:d7:be:d5:26:2d:8d:f4:dd:db:4a:90:bf: e7:43:93:f4:ce:73:15:25:f1:5c:11:55:05:d1:e6: 37:01:d5:8c:5e:ac:83:ab:b5:2d:8e:13:65:82:9c: b7:2b:7a:d6:98:29:a5:9d:e8:3b:23:54:6b:11:a5: 9f:b9:ed:06:ba:02:4f:50:f0:c2:95:fe:cc:70:b5: fa:e6:4b:a6:87:1d:ba:0c:fa:5b:b5:f3:25:4d:56: 23:a1:97:bb:4d:37:ef:94:33:25:76:d4:10:55:e2: fa:26:0e:a5:0d:86:52:13:0f:c8:39:ed:1a:7e:0d: f5:35:bc:f5:76:ee:a7:f8:07:b1:1e:f7:08:35:42: 2c:9d:38:d0:00:d6:8c:a9:d9:8f:4e:81:32:47:10: 4b:b3:6e:88:01:41:c4:78:e1:d8:59:e2:6d:53:6f: 64:c3:ec:07:52:de:e0:ab:0d:23:8a:28:2e:5c:eb: ed:0f:ef:1e:19:cf:1b:9c:c8:9f:ec:45:7b:10:21: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:68:96:2A:E5:1A:D7:28:8D:CC:88:2E:D9:45:50:3C:EF:86:BD:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/f3670b91-3a6f-3dd1-bb75-bd4243b6b3ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:99:e3:05:3a:3c:69:e5:49:83:27:83:49:24:dd:33:6a:24: 58:b0:f3:d7:85:00:8c:9f:f0:fc:e8:02:67:a1:69:e1:f7:88: 4c:4a:5a:73:64:7f:f8:d4:87:ad:08:fb:85:37:ac:5d:d1:5d: 62:c7:65:88:1d:cb:fc:59:3f:27:ee:ac:c7:98:04:6e:4d:d1: db:bf:30:05:77:b0:4f:30:96:ec:0a:25:b9:0f:76:0c:5a:1f: 00:5f:84:5e:79:42:95:f4:85:e4:22:da:2f:58:7f:74:b1:eb: eb:68:fd:ec:3e:07:de:a6:30:03:80:c3:5f:11:78:e4:03:33: 57:e0:20:82:08:dd:4b:ce:52:81:22:c1:71:7a:b0:e6:b5:85: 45:77:7e:1b:70:19:50:99:7b:2e:ce:19:18:00:84:63:c1:08: 0e:ba:71:91:c3:71:4f:87:da:94:04:47:32:97:b5:df:9f:d0: f2:e0:e4:2f:aa:66:c1:8d:98:c0:3a:fa:7b:05:fa:3a:93:44: 47:87:1e:f2:e4:14:cc:1f:5e:18:6d:26:ba:50:91:5a:29:ed: 1e:01:db:a4:f5:04:c0:47:5d:69:d9:55:8e:01:10:52:0d:8b: 37:6f:1f:8c:7e:3c:c2:42:a3:66:53:e9:94:f7:43:b8:84:33: 40:34:77:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC45fO4yac+X2MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MTkxNDU4MTctZDEyNS00MGM3LWE2OWYtZjM4OGQwMmI4MGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZg+MtwprxPV3fvtdY8+f4aMhVjDG8NVN8x+ XIqtyblTs7wqcMaQgahXx0dV2OWxrgCbGyws30rLHms+GNnXvtUmLY303dtKkL/n Q5P0znMVJfFcEVUF0eY3AdWMXqyDq7UtjhNlgpy3K3rWmCmlneg7I1RrEaWfue0G ugJPUPDClf7McLX65kumhx26DPpbtfMlTVYjoZe7TTfvlDMldtQQVeL6Jg6lDYZS Ew/IOe0afg31Nbz1du6n+AexHvcINUIsnTjQANaMqdmPToEyRxBLs26IAUHEeOHY WeJtU29kw+wHUt7gqw0jiiguXOvtD+8eGc8bnMif7EV7ECHt6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdolirlGtcojcyILtlFUDzvhr1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZjM2NzBiOTEtM2E2Zi0z ZGQxLWJiNzUtYmQ0MjQzYjZiM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj/RSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Z4wU6PGnlSYMng0kk3TNqJFiw89eFAIyf8PzoAmehaeH3iExKWnNk f/jUh60I+4U3rF3RXWLHZYgdy/xZPyfurMeYBG5N0du/MAV3sE8wluwKJbkPdgxa HwBfhF55QpX0heQi2i9Yf3Sx6+to/ew+B96mMAOAw18ReOQDM1fgIIII3UvOUoEi wXF6sOa1hUV3fhtwGVCZey7OGRgAhGPBCA66cZHDcU+H2pQERzKXtd+f0PLg5C+q ZsGNmMA6+nsF+jqTREeHHvLkFMwfXhhtJrpQkVop7R4B26T1BMBHXWnZVY4BEFIN izdvH4x+PMJCo2ZT6ZT3Q7iEM0A0d5A= -----END CERTIFICATE-----Generated at Sat Aug 23 08:09:43 2025 by rpki-client