$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/558c1928-6e67-3fc7-8d58-06768ee5cc30.roa File: 558c1928-6e67-3fc7-8d58-06768ee5cc30.roa (raw, json) Hash identifier: 9bPwrYJ21vEzJnpnUasScTR1/6h2zU/cArCAkP0Es6Q= Subject key identifier: 5D:02:38:23:7B:B3:09:DF:6A:4D:47:69:5A:EB:45:D0:7E:A6:57:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A5765C7E402FEC09BCD0BC260 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/558c1928-6e67-3fc7-8d58-06768ee5cc30.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 63949 IP address blocks: 143.42.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:c7:e4:02:fe:c0:9b:cd:0b:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=879dd42e-80d5-43ad-b4e1-9aa6be1d0dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:a8:5b:af:03:b5:9a:4d:01:b9:16:30:44: a0:82:21:0f:c5:23:79:b1:d7:9a:fe:3e:6f:0f:cb: bf:ad:36:18:27:6d:6d:03:15:74:ad:5f:c5:9f:4d: 97:f9:64:37:6c:ac:0b:f8:82:6b:a2:76:8d:2e:f3: 09:a3:9b:24:94:cc:c3:8e:9e:c2:03:55:ac:b8:c2: 3a:04:03:9c:50:14:29:89:9a:b7:36:fd:74:5e:4c: 39:36:54:50:7d:1b:5b:31:70:3e:ed:73:b4:f2:bc: 3c:22:f8:85:aa:1a:2d:22:3f:19:09:85:1e:06:b7: 47:1e:f7:90:70:26:63:25:03:b5:b6:32:11:58:10: fe:87:50:70:f3:f3:0c:f5:ff:22:fa:ab:7e:82:4f: dd:0a:0c:11:66:d6:8e:0f:2a:fa:90:c1:a3:c1:c7: 0d:3f:f8:fb:b7:07:4a:61:c7:65:20:af:42:23:23: ca:4e:e4:d8:af:b8:be:f3:5a:43:c1:0f:db:5b:f2: 45:26:9c:ee:f6:62:37:e2:d0:69:c1:8e:f1:88:64: 10:f4:b8:55:23:8b:b9:d2:65:35:50:20:9a:f3:ee: 4d:2e:d9:fb:5d:91:ff:10:0d:16:ae:f3:4e:6a:4f: 37:e5:1e:20:82:0e:62:98:15:0a:90:5b:99:c8:2c: ed:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:02:38:23:7B:B3:09:DF:6A:4D:47:69:5A:EB:45:D0:7E:A6:57:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/558c1928-6e67-3fc7-8d58-06768ee5cc30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:65:35:cd:4e:1c:e1:80:0f:aa:4d:56:53:ae:0f:30:c3:bd: 2d:6d:56:38:62:33:7f:ee:b3:62:d4:d9:56:81:99:70:87:1c: 0e:d3:c3:60:6b:f1:da:19:ea:85:4f:76:55:5b:56:b7:bd:17: 72:01:74:4e:a8:0b:ad:88:c4:c3:a1:28:9a:10:38:57:e3:5f: 0b:c0:d5:ed:6d:b6:13:e7:e0:9b:e0:02:20:91:26:dc:03:a9: 0c:d1:c3:6a:de:f0:89:29:3e:b0:b2:3d:48:15:b7:b8:59:5e: 3a:18:0a:4e:43:ee:ba:97:70:83:b2:04:a2:cc:48:27:fd:e2: cc:86:70:31:40:4b:1e:2d:d2:a2:5b:30:e5:fd:f9:32:f8:5f: d7:ee:cf:79:9e:35:75:8e:30:86:9b:c4:48:78:66:6b:f4:60: 7c:30:44:b7:70:77:63:e0:25:5b:9b:73:3b:c3:65:fb:6a:88: 38:82:08:26:d3:c6:b7:83:d9:0b:48:de:1c:e0:4a:19:f9:1b: 54:76:fb:da:73:3d:1c:2c:db:31:b5:48:59:94:d7:f3:cc:3f: db:b3:6e:bf:bb:25:45:27:a6:f0:e4:9e:c3:21:56:0e:25:f5: 8e:91:4c:69:78:0d:44:09:96:47:ab:b7:c5:d1:f7:12:c4:48: 9e:cf:af:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcfkAv7Am80LwmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk ODc5ZGQ0MmUtODBkNS00M2FkLWI0ZTEtOWFhNmJlMWQwZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoASoW68DtZpNAbkWMESggiEPxSN5sdea/j5v D8u/rTYYJ21tAxV0rV/Fn02X+WQ3bKwL+IJronaNLvMJo5sklMzDjp7CA1WsuMI6 BAOcUBQpiZq3Nv10Xkw5NlRQfRtbMXA+7XO08rw8IviFqhotIj8ZCYUeBrdHHveQ cCZjJQO1tjIRWBD+h1Bw8/MM9f8i+qt+gk/dCgwRZtaODyr6kMGjwccNP/j7twdK YcdlIK9CIyPKTuTYr7i+81pDwQ/bW/JFJpzu9mI34tBpwY7xiGQQ9LhVI4u50mU1 UCCa8+5NLtn7XZH/EA0WrvNOak835R4ggg5imBUKkFuZyCzt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0COCN7swnfak1HaVrrRdB+plcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTU4YzE5MjgtNmU2Ny0z ZmM3LThkNTgtMDY3NjhlZTVjYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjyrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERlNc1OHOGAD6pNVlOuDzDDvS1tVjhiM3/us2LU2VaBmXCHHA7Tw2Br 8doZ6oVPdlVbVre9F3IBdE6oC62IxMOhKJoQOFfjXwvA1e1tthPn4JvgAiCRJtwD qQzRw2re8IkpPrCyPUgVt7hZXjoYCk5D7rqXcIOyBKLMSCf94syGcDFASx4t0qJb MOX9+TL4X9fuz3meNXWOMIabxEh4Zmv0YHwwRLdwd2PgJVubczvDZftqiDiCCCbT xreD2QtI3hzgShn5G1R2+9pzPRws2zG1SFmU1/PMP9uzbr+7JUUnpvDknsMhVg4l 9Y6RTGl4DUQJlkert8XR9xLESJ7Pr7g= -----END CERTIFICATE-----Generated at Sun Jun 29 13:37:28 2025 by rpki-client