$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/179172ad-2db5-37db-a4a9-a7fb2d70e7dc.roa File: 179172ad-2db5-37db-a4a9-a7fb2d70e7dc.roa (raw, json) Hash identifier: 4/b3v8cOu5D96+3d/y0pWAsp0xWu+jpSb5OP1bkcimU= Subject key identifier: E0:24:B7:6A:42:13:82:40:FC:40:08:C7:A3:8B:F5:E9:73:B6:9C:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B38219453A11FF880F6F14CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/179172ad-2db5-37db-a4a9-a7fb2d70e7dc.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 143.42.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:94:53:a1:1f:f8:80:f6:f1:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=29c7df29-550e-4ed3-bfc3-53f1a0efe5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:9c:72:a4:27:c8:a2:99:74:ef:6e:bb:b2: 5c:01:ed:24:be:1c:f8:27:ec:cb:44:11:c4:c1:66: b8:0b:e4:cd:f1:1a:35:be:39:23:cb:b2:69:72:cd: 94:fd:b5:4d:20:49:d9:f8:a5:77:67:70:f2:42:6b: d0:f2:e6:08:91:bb:df:bf:f2:af:6f:1d:df:ee:a1: 6a:3b:b1:f0:0e:58:55:75:67:b5:19:ad:cd:48:0d: 3d:a9:36:15:20:c7:89:27:44:f7:de:fb:6f:ed:ea: f5:61:05:0b:d1:3d:0e:6c:f3:30:f5:84:94:8c:e0: 25:b8:a3:be:eb:f8:53:3c:78:06:8a:ca:37:c4:0d: 60:11:4e:93:d1:85:f1:4d:4b:aa:83:64:e5:2f:ff: 7f:2e:d1:bc:ac:7d:b1:d6:fb:2a:2f:d9:6a:1d:36: bd:c2:6c:50:c9:d9:01:5c:94:3f:6b:dd:b6:3f:4a: 87:05:00:11:47:0f:42:d6:c9:d5:ff:aa:52:18:a7: 18:b3:2c:5b:26:fa:be:ca:d5:fa:4d:6c:46:cd:64: 20:92:3b:70:ec:2a:48:9d:86:e2:25:2d:11:1b:33: de:8b:2f:27:94:75:60:57:cc:26:4e:c9:ed:34:05: 91:99:9f:0a:e8:69:3d:40:b4:31:cf:82:b0:11:d2: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:24:B7:6A:42:13:82:40:FC:40:08:C7:A3:8B:F5:E9:73:B6:9C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/179172ad-2db5-37db-a4a9-a7fb2d70e7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9a:a4:20:9b:b1:91:fc:04:85:9e:6d:7f:81:69:85:b3:eb: 06:43:72:73:57:aa:6e:6b:09:d9:2c:4c:61:a8:bd:38:b8:19: d0:b4:34:0a:50:0a:10:be:cb:e3:28:7d:8b:72:4e:a6:ba:ac: 84:92:dd:fa:2c:2d:af:6c:2d:31:85:cf:be:a0:35:d6:ad:30: e6:6a:34:c8:cd:6c:85:cc:b4:64:61:12:21:96:16:fb:0a:6c: dd:e9:2e:cf:af:f0:c7:6e:a7:a8:ad:71:59:3c:47:35:2c:b2: 8e:ab:eb:da:3e:fe:7b:08:80:b4:2b:26:45:52:70:58:7d:7c: dc:a9:c2:bd:a7:58:3a:e8:ad:b4:de:c7:8a:b8:ec:cf:e3:ed: 35:f2:fc:33:43:f5:2b:d3:ef:4d:99:8c:fa:78:2f:74:f0:bd: 12:33:9f:32:21:bd:f6:f7:d0:1d:ad:62:c5:6f:91:f9:39:17: 0a:f0:2a:cc:0c:e6:88:74:f9:92:65:d6:96:aa:53:75:4f:1d: 30:28:77:90:a2:57:2b:79:f7:4a:69:dc:52:64:40:e7:62:4c: 51:b3:53:cb:86:a4:29:91:e0:2f:14:d9:7a:46:00:dc:86:b4: 81:2e:66:9b:84:9e:0d:3f:b7:3b:c3:2d:c5:7b:b2:dc:74:e5: 8b:9b:da:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZRToR/4gPbxTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MjljN2RmMjktNTUwZS00ZWQzLWJmYzMtNTNmMWEwZWZlNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijyccqQnyKKZdO9uu7JcAe0kvhz4J+zLRBHE wWa4C+TN8Ro1vjkjy7Jpcs2U/bVNIEnZ+KV3Z3DyQmvQ8uYIkbvfv/Kvbx3f7qFq O7HwDlhVdWe1Ga3NSA09qTYVIMeJJ0T33vtv7er1YQUL0T0ObPMw9YSUjOAluKO+ 6/hTPHgGiso3xA1gEU6T0YXxTUuqg2TlL/9/LtG8rH2x1vsqL9lqHTa9wmxQydkB XJQ/a922P0qHBQARRw9C1snV/6pSGKcYsyxbJvq+ytX6TWxGzWQgkjtw7CpInYbi JS0RGzPeiy8nlHVgV8wmTsntNAWRmZ8K6Gk9QLQxz4KwEdKq7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAkt2pCE4JA/EAIx6OL9elztpz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTc5MTcyYWQtMmRiNS0z N2RiLWE0YTktYTdmYjJkNzBlN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjyrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOapCCbsZH8BIWebX+BaYWz6wZDcnNXqm5rCdksTGGovTi4GdC0NApQ ChC+y+MofYtyTqa6rISS3fosLa9sLTGFz76gNdatMOZqNMjNbIXMtGRhEiGWFvsK bN3pLs+v8Mdup6itcVk8RzUsso6r69o+/nsIgLQrJkVScFh9fNypwr2nWDrorbTe x4q47M/j7TXy/DND9SvT702ZjPp4L3TwvRIznzIhvfb30B2tYsVvkfk5FwrwKswM 5oh0+ZJl1paqU3VPHTAod5CiVyt590pp3FJkQOdiTFGzU8uGpCmR4C8U2XpGANyG tIEuZpuEng0/tzvDLcV7stx05Yub2tc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:06 2025 by rpki-client