$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa File: cfa4f32e-c53a-3acb-998b-283e18217244.roa (raw, json) Hash identifier: Fxb5WEcmvaD75YRjUzUU912/WzCe+23OMewZ+ST5VZs= Subject key identifier: E8:97:DB:37:E9:5B:43:5B:CF:3E:6A:AA:3E:95:29:38:53:AE:80:B4 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F43285849D85F7CA7DA2486BDABA11E00 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 143.220.128.0/23 maxlen: 23 143.220.130.0/23 maxlen: 23 143.220.132.0/23 maxlen: 23 143.220.134.0/23 maxlen: 23 143.220.136.0/23 maxlen: 23 143.220.138.0/23 maxlen: 23 143.220.140.0/23 maxlen: 23 143.220.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:7c:a7:da:24:86:bd:ab:a1:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=5f222ed8-857c-4adb-a868-ba9f8abb8c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:21:a4:30:a4:57:9b:d7:89:83:c1:7e:94: f9:c1:c1:d8:0a:6a:1a:db:0c:6a:16:88:fe:08:a8: 6f:97:c8:a1:24:31:68:65:75:c0:8e:8b:01:3c:72: 8c:ba:43:44:a3:9f:40:2d:99:0f:88:10:5f:7a:a4: 43:73:7d:48:2f:6a:b6:28:d1:f9:2c:e8:95:7c:a4: 49:f9:14:b6:65:40:46:27:16:5a:aa:88:85:0e:ec: 01:dc:9c:4a:bb:76:e2:10:81:01:5d:f6:83:5a:d4: 27:3c:6f:cc:44:65:fb:d1:5d:43:f8:57:c1:86:24: c7:38:47:b4:80:1c:af:80:98:b2:9b:81:cd:e5:51: 47:92:2f:7a:04:a6:c5:9c:06:a5:e2:4b:62:c3:a7: 9a:f3:09:75:9c:8d:2b:16:c3:53:d3:7d:01:a4:11: 2b:e7:1c:9c:86:34:ff:71:6f:30:2d:b4:8c:31:97: 91:33:22:eb:d4:c9:6d:b9:13:c6:27:2e:20:c9:19: a8:89:f0:b1:f0:15:3a:07:d5:e4:a7:89:a4:b0:57: 58:57:e5:74:f4:4d:04:ce:4e:dd:c4:60:fd:b8:77: 83:90:11:18:25:98:83:7d:a2:fb:e9:ff:81:b9:78: d5:be:43:18:ab:25:ea:b3:29:67:1f:11:b8:f9:a4: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:97:DB:37:E9:5B:43:5B:CF:3E:6A:AA:3E:95:29:38:53:AE:80:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/cfa4f32e-c53a-3acb-998b-283e18217244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.128.0-143.220.142.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:15:1e:37:a7:ca:6a:49:3d:6a:9c:b3:74:67:57:be:9e:ee: 60:7d:92:bc:8c:80:b8:b6:3d:73:f1:a3:77:3a:d5:7b:81:75: 04:04:a7:63:bd:30:c1:44:5e:70:5c:e4:05:fa:52:0d:30:85: 17:c6:d4:a0:0e:3f:9f:3d:fa:67:31:7a:fe:2b:54:3a:54:f3: 7f:2e:78:da:3b:11:58:69:11:c0:11:31:bc:11:3b:2a:28:2d: 09:ae:a9:40:9c:11:67:4b:81:64:8b:a4:d6:ae:ac:95:62:e1: 00:5b:81:3a:84:9b:b4:f6:66:b4:95:27:cd:9e:3a:38:87:27: dc:09:8e:ca:d4:ff:01:fe:89:0d:44:5c:f0:06:99:b4:ff:90: d1:ef:73:17:b3:16:3b:68:23:16:2d:98:b9:65:6c:11:9c:1c: 64:12:74:77:bb:42:c6:5c:7c:5c:41:1d:04:bc:c6:d0:81:92: 1f:8e:f7:03:5a:d6:5f:7a:fc:f0:19:e6:dd:33:65:8e:6f:71: 2b:f2:80:25:a7:04:8c:73:21:d8:87:b0:5e:7a:cf:aa:f0:b5: 93:8e:88:ca:e2:30:a3:be:4e:a9:d5:8d:b4:36:6c:c3:9f:63: 3b:17:1d:3a:06:53:ea:c2:f1:22:b9:48:24:81:90:1d:41:fe: 21:54:93:ff -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnYX3yn2iSGvauhHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NWYyMjJlZDgtODU3Yy00YWRiLWE4NjgtYmE5ZjhhYmI4Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZghpDCkV5vXiYPBfpT5wcHYCmoa2wxqFoj+ CKhvl8ihJDFoZXXAjosBPHKMukNEo59ALZkPiBBfeqRDc31IL2q2KNH5LOiVfKRJ +RS2ZUBGJxZaqoiFDuwB3JxKu3biEIEBXfaDWtQnPG/MRGX70V1D+FfBhiTHOEe0 gByvgJiym4HN5VFHki96BKbFnAal4ktiw6ea8wl1nI0rFsNT030BpBEr5xychjT/ cW8wLbSMMZeRMyLr1MltuRPGJy4gyRmoifCx8BU6B9Xkp4mksFdYV+V09E0Ezk7d xGD9uHeDkBEYJZiDfaL76f+BuXjVvkMYqyXqsylnHxG4+aSeuwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOiX2zfpW0Nbzz5qqj6VKThTroC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvY2ZhNGYzMmUtYzUzYS0z YWNiLTk5OGItMjgzZTE4MjE3MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeP3IAD BACP3I4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAVBUeN6fKakk9apyzdGdXvp7uYH2SvIyAuLY9c/GjdzrV e4F1BASnY70wwURecFzkBfpSDTCFF8bUoA4/nz36ZzF6/itUOlTzfy542jsRWGkR wBExvBE7KigtCa6pQJwRZ0uBZIuk1q6slWLhAFuBOoSbtPZmtJUnzZ46OIcn3AmO ytT/Af6JDURc8AaZtP+Q0e9zF7MWO2gjFi2YuWVsEZwcZBJ0d7tCxlx8XEEdBLzG 0IGSH473A1rWX3r88Bnm3TNljm9xK/KAJacEjHMh2IewXnrPqvC1k46IyuIwo75O qdWNtDZsw59jOxcdOgZT6sLxIrlIJIGQHUH+IVST/w== -----END CERTIFICATE-----Generated at Mon Jun 30 17:31:20 2025 by rpki-client