$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/558c1928-6e67-3fc7-8d58-06768ee5cc30.roa File: 558c1928-6e67-3fc7-8d58-06768ee5cc30.roa (raw, json) Hash identifier: VWXKcqQ7Bt0faU8CDbQ3x7hyIO6qh0PsrK23QXl7Yuo= Subject key identifier: 07:CD:AA:61:1E:06:F8:57:C1:CD:0A:F1:21:00:B3:B4:D3:27:BD:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3821943A288145CE45245500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/558c1928-6e67-3fc7-8d58-06768ee5cc30.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 143.42.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:94:3a:28:81:45:ce:45:24:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=c209d7f9-4361-4a3c-9ce4-7efae947af55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:af:90:1d:50:34:80:a8:3a:98:03:6c:64: 28:fd:65:41:6b:01:eb:cc:1e:ac:b5:a6:db:1e:8b: e9:e1:32:6f:b2:b3:41:dc:f4:88:0a:de:0c:c8:b5: c6:d3:67:9f:55:ff:92:b9:4c:42:c0:30:fe:df:3c: f3:b8:eb:0a:ff:5e:ab:a1:70:35:4e:77:2a:29:2b: 6a:9d:85:54:0a:a2:0a:cb:94:c1:d5:a4:af:ef:4d: d4:b2:b3:8d:a2:db:a1:4e:1b:4b:84:57:a8:bc:21: 03:c5:60:85:7e:cd:00:e3:a8:72:8d:18:fd:a2:31: e6:4b:7f:cf:e4:2d:bb:c0:90:a8:bc:b3:83:8e:f2: 86:c3:d3:89:47:99:02:8c:eb:91:47:8e:c7:4c:fe: fe:dd:f7:06:a7:a1:e8:67:b0:96:b3:d2:8f:38:2f: 2b:92:d2:6f:04:08:36:c7:6f:74:c1:d7:02:e7:6a: 4d:dd:4b:45:c3:a3:db:8f:84:5b:43:bd:0d:0c:89: 31:40:01:40:15:5c:a6:94:b1:2f:30:2f:b6:53:56: 8f:10:2b:d1:e0:1c:cd:33:bc:e8:3a:aa:5a:c3:b3: a1:9d:4c:d8:f4:a9:11:68:68:53:e1:78:2a:5d:f7: ee:e4:02:18:e6:0c:ff:ed:3d:5f:14:23:fa:cd:73: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CD:AA:61:1E:06:F8:57:C1:CD:0A:F1:21:00:B3:B4:D3:27:BD:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/558c1928-6e67-3fc7-8d58-06768ee5cc30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c3:5d:c5:7d:e3:0f:22:fa:53:da:25:ad:b9:e6:2c:a5:a0: b0:48:13:a8:35:de:fd:fc:4b:4f:fc:a8:70:69:65:48:e0:9b: c9:d4:a6:0d:76:b4:9b:53:e8:27:b4:7b:e0:7b:36:ba:bf:c5: 0a:20:15:f8:44:9e:a9:c0:6f:78:30:b9:15:01:19:f0:bf:70: db:f3:6b:74:bd:4e:9e:99:23:e0:2a:35:59:bf:d7:71:e3:e6: 70:98:03:17:fb:56:f4:94:8e:48:54:dc:a6:6c:0d:dd:cd:7e: 12:6a:73:bd:a5:2b:be:8e:05:3e:b5:7f:4d:e6:d7:62:9b:4a: a2:56:76:16:db:5d:dd:3f:f4:79:3c:d3:e2:45:cd:03:67:e6: 25:43:45:db:96:b1:b2:42:cc:5b:60:02:01:51:fd:03:0a:ea: b5:94:89:f8:91:0f:3f:35:12:ad:d8:2c:39:3f:15:e3:b8:d6: ec:80:7f:b9:f5:68:ae:00:1d:47:a2:19:2d:09:9f:0b:c3:6d: 68:a2:0d:a1:4e:66:15:73:2d:bf:e9:a7:03:3d:da:34:46:04: a8:ef:5c:1b:ce:58:9a:6e:43:13:98:9b:36:0a:d4:dd:b7:98: 95:76:46:fb:74:0f:68:bd:7b:9a:7b:87:cd:72:af:f7:e6:72: d5:ec:e1:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZQ6KIFFzkUkVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YzIwOWQ3ZjktNDM2MS00YTNjLTljZTQtN2VmYWU5NDdhZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr6vkB1QNICoOpgDbGQo/WVBawHrzB6stabb Hovp4TJvsrNB3PSICt4MyLXG02efVf+SuUxCwDD+3zzzuOsK/16roXA1TncqKStq nYVUCqIKy5TB1aSv703UsrONotuhThtLhFeovCEDxWCFfs0A46hyjRj9ojHmS3/P 5C27wJCovLODjvKGw9OJR5kCjOuRR47HTP7+3fcGp6HoZ7CWs9KPOC8rktJvBAg2 x290wdcC52pN3UtFw6Pbj4RbQ70NDIkxQAFAFVymlLEvMC+2U1aPECvR4BzNM7zo Oqpaw7OhnUzY9KkRaGhT4XgqXffu5AIY5gz/7T1fFCP6zXP6AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfNqmEeBvhXwc0K8SEAs7TTJ73EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTU4YzE5MjgtNmU2Ny0z ZmM3LThkNTgtMDY3NjhlZTVjYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjyrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPDXcV94w8i+lPaJa255iyloLBIE6g13v38S0/8qHBpZUjgm8nUpg12 tJtT6Ce0e+B7Nrq/xQogFfhEnqnAb3gwuRUBGfC/cNvza3S9Tp6ZI+AqNVm/13Hj 5nCYAxf7VvSUjkhU3KZsDd3NfhJqc72lK76OBT61f03m12KbSqJWdhbbXd0/9Hk8 0+JFzQNn5iVDRduWsbJCzFtgAgFR/QMK6rWUifiRDz81Eq3YLDk/FeO41uyAf7n1 aK4AHUeiGS0JnwvDbWiiDaFOZhVzLb/ppwM92jRGBKjvXBvOWJpuQxOYmzYK1N23 mJV2Rvt0D2i9e5p7h81yr/fmctXs4VU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:48 2025 by rpki-client