$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95ed8224-4129-3d89-a513-694456146523.roa File: 95ed8224-4129-3d89-a513-694456146523.roa (raw, json) Hash identifier: pzlJH29U4Jyk7OEpn+tyULgYYKwrCpwnKtRisKLrwXg= Subject key identifier: 89:D4:E1:66:F4:E3:4A:00:31:FE:1B:6F:8C:0F:B3:BA:66:50:2F:70 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AEF8BCA0413795D39451B00C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95ed8224-4129-3d89-a513-694456146523.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 401152 IP address blocks: 143.109.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:ca:04:13:79:5d:39:45:1b:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=77b14833-1cd8-4d00-860d-80d6b9ea401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:9e:26:94:79:45:e5:ba:15:06:4f:91:73: 01:d9:c7:8e:7f:61:dd:1c:a1:80:41:88:f6:40:45: 7b:39:a5:5b:ab:f4:ee:f9:be:68:1e:23:95:b1:4c: 8c:de:8a:bf:d2:e5:c4:a8:51:08:29:0d:20:36:7b: 41:ba:b4:71:c5:bc:2d:41:6a:c7:81:0c:81:94:1b: fa:45:5d:45:c8:06:67:50:7a:fb:4b:11:eb:13:2c: de:5d:7b:b9:ff:7c:26:63:22:a4:53:db:bd:31:0f: 0d:f5:cd:2d:cd:7a:ca:fc:5e:b9:91:7e:e2:2d:c4: 68:5c:19:48:59:b9:de:7d:b5:72:9e:75:ea:a1:ea: ae:7b:a4:6c:91:c9:3c:c9:ab:fd:25:95:fb:93:90: cd:14:32:5d:e9:45:e0:49:da:bd:5a:69:18:5e:e1: bd:52:a2:bb:e9:24:19:54:c5:4f:e7:bc:68:ee:85: 89:b0:a1:13:11:31:26:e6:b2:1a:3e:eb:4f:dc:b7: 95:17:a6:ba:dc:c4:8d:1a:7b:46:2e:f8:ef:59:c8: 34:88:2c:e6:98:7d:0c:6c:72:02:e5:12:47:86:a6: 2e:ff:0b:a5:2e:18:ef:65:9e:65:66:a0:27:46:91: 2c:56:e9:6f:d3:9c:ab:02:05:9b:34:fc:00:1e:3f: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D4:E1:66:F4:E3:4A:00:31:FE:1B:6F:8C:0F:B3:BA:66:50:2F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95ed8224-4129-3d89-a513-694456146523.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 143.109.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2c:e3:b8:9f:bf:06:ab:41:6e:94:1e:3e:05:76:e2:c2:80: 0a:24:09:ea:40:a4:85:3d:81:49:8f:cc:a0:df:94:0e:30:4e: 5f:c4:47:4f:60:3b:9a:a5:a0:1f:70:ef:25:b9:a8:5e:be:5f: 5e:c2:df:82:81:c1:61:45:c8:0b:6e:80:cd:aa:01:27:be:eb: 72:95:43:e0:e1:3b:c0:a0:7c:58:28:57:43:21:6a:5b:7e:55: 70:c0:b2:b6:86:86:21:1c:d2:08:7e:cd:d0:31:9e:54:ff:92: ba:27:0d:31:ae:08:4f:90:c4:46:f1:07:23:f1:e1:94:60:36: fd:97:01:27:dc:62:18:89:79:78:4d:75:f1:45:17:c9:4a:ab: b3:83:41:99:01:69:29:28:cd:7a:6a:3b:25:c7:90:f2:bb:38: 58:0e:3a:5d:1c:c8:bd:fc:bc:c5:41:36:8e:de:11:d8:4d:ef: fc:f2:be:69:0f:af:fa:33:38:99:6a:bd:ba:1e:b0:11:b8:f1: fe:14:35:fe:53:7d:9c:ba:66:e4:40:c1:9a:48:e5:55:de:36: d7:38:62:83:2b:51:a8:c3:29:92:58:46:f9:4a:fd:b8:12:93: 53:e8:02:a1:e0:b7:ea:1c:2c:23:18:bc:36:4d:f7:46:c9:1f: 44:c7:ef:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8oEE3ldOUUbAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk NzdiMTQ4MzMtMWNkOC00ZDAwLTg2MGQtODBkNmI5ZWE0MDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwWeJpR5ReW6FQZPkXMB2ceOf2HdHKGAQYj2 QEV7OaVbq/Tu+b5oHiOVsUyM3oq/0uXEqFEIKQ0gNntBurRxxbwtQWrHgQyBlBv6 RV1FyAZnUHr7SxHrEyzeXXu5/3wmYyKkU9u9MQ8N9c0tzXrK/F65kX7iLcRoXBlI WbnefbVynnXqoeque6Rskck8yav9JZX7k5DNFDJd6UXgSdq9WmkYXuG9UqK76SQZ VMVP57xo7oWJsKETETEm5rIaPutP3LeVF6a63MSNGntGLvjvWcg0iCzmmH0MbHIC 5RJHhqYu/wulLhjvZZ5lZqAnRpEsVulv05yrAgWbNPwAHj8sLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInU4Wb040oAMf4bb4wPs7pmUC9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTVlZDgyMjQtNDEyOS0z ZDg5LWE1MTMtNjk0NDU2MTQ2NTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj208MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAs47ifvwarQW6UHj4FduLCgAokCepApIU9gUmPzKDflA4wTl/ER09g O5qloB9w7yW5qF6+X17C34KBwWFFyAtugM2qASe+63KVQ+DhO8CgfFgoV0Mhalt+ VXDAsraGhiEc0gh+zdAxnlT/kronDTGuCE+QxEbxByPx4ZRgNv2XASfcYhiJeXhN dfFFF8lKq7ODQZkBaSkozXpqOyXHkPK7OFgOOl0cyL38vMVBNo7eEdhN7/zyvmkP r/ozOJlqvboesBG48f4UNf5TfZy6ZuRAwZpI5VXeNtc4YoMrUajDKZJYRvlK/bgS k1PoAqHgt+ocLCMYvDZN90bJH0TH7x4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:53 2025 by rpki-client