$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd57ea3-69ba-3cb1-8978-b7f366d7b886.roa File: cbd57ea3-69ba-3cb1-8978-b7f366d7b886.roa (raw, json) Hash identifier: JEr6P2e7V/SK7eOkEXaqG44RmUEftByQvFqR54589OM= Subject key identifier: 75:4B:34:5C:6D:50:70:1F:03:27:22:95:7C:36:D0:9F:81:FA:36:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05C9B4F9ACEABABC201E9B Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd57ea3-69ba-3cb1-8978-b7f366d7b886.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 63949 IP address blocks: 143.42.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c9:b4:f9:ac:ea:ba:bc:20:1e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=fd8ab2f2-7e38-4355-995e-f1f59fa9d9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:a2:c0:f8:22:7d:93:8c:a0:82:02:84:3a: e8:02:d6:14:7f:b2:49:48:1f:b5:41:9c:ab:61:8b: 33:31:d3:b5:d8:55:b5:2f:2e:ce:a7:d2:0a:47:b3: 40:1f:87:b1:34:25:c5:c3:d0:f3:23:24:8b:44:58: 53:35:f4:17:92:5f:a3:6a:4f:34:48:b6:8e:96:ca: 94:1c:c5:e4:f1:45:3d:2c:8c:c3:35:76:db:1a:a9: b5:57:b8:c2:c4:dc:87:68:df:e8:c5:92:37:ac:a7: 0f:30:6c:dd:ae:93:86:30:4c:c9:f7:47:72:d6:91: 5b:1b:be:13:20:46:47:b8:1a:e6:d5:5a:80:f8:ec: 48:2f:20:53:1a:7e:f4:9a:f6:69:9d:67:5d:be:1d: 0d:d6:ea:0e:67:a4:69:c4:0a:96:fc:a9:ea:2c:6b: ee:33:1b:3a:3f:b6:e6:09:7d:19:97:14:c2:6f:ee: 2f:f6:07:83:fb:08:d1:73:11:2e:62:dc:da:87:0b: 01:8d:e8:1e:fc:e8:49:c9:f0:67:a3:65:15:9f:c5: 38:7e:04:25:58:cc:cc:f3:27:7e:66:f6:57:5a:70: db:2b:2b:e7:a9:ff:8f:6c:55:54:7b:14:40:2d:ce: 47:16:90:59:b3:fe:19:dd:62:1e:4f:3f:02:f2:1e: fa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:34:5C:6D:50:70:1F:03:27:22:95:7C:36:D0:9F:81:FA:36:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbd57ea3-69ba-3cb1-8978-b7f366d7b886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6a:f4:42:65:c9:e7:47:32:65:7a:b6:3a:b2:de:df:c0:56: a8:95:9b:2a:18:44:ce:7e:0c:29:bf:0e:1e:94:f3:e6:02:8a: a5:fc:8b:4f:d9:d0:ee:a3:70:7b:ad:51:72:18:b8:79:9c:c3: 1d:09:11:32:8d:19:98:82:c1:ee:2c:ef:57:e9:50:e5:8a:56: ee:d0:2d:09:ad:79:35:fc:b7:f1:0e:1a:9b:c3:40:79:77:ff: 89:ef:c7:02:c6:25:1b:c5:d5:a5:71:5e:b8:cc:12:ad:4d:61: 14:41:45:60:6a:8b:e5:d2:7c:d1:70:84:b7:c3:87:6f:95:95: 24:5d:23:66:a2:3f:56:f1:7b:ab:5d:bd:de:31:35:2f:38:d6: 3c:d1:89:05:3e:2b:83:b0:29:62:65:5d:72:10:7f:06:65:64: af:f1:2e:1b:01:cd:2b:fe:21:60:a4:a6:8d:9f:0f:6e:58:20: 92:ae:29:52:08:74:d3:35:06:f4:9d:55:bd:53:83:9d:76:62: a3:8e:ce:c9:6b:29:10:cd:42:03:4b:38:bf:94:db:56:7e:89: fe:86:89:19:f5:30:5d:a9:41:ef:f2:6b:c3:d3:4e:d8:20:77: 45:5b:8a:44:89:e4:f5:f6:ec:46:1e:43:ec:61:87:15:a6:cb: b3:2d:b9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBcm0+azqurwgHpswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk ZmQ4YWIyZjItN2UzOC00MzU1LTk5NWUtZjFmNTlmYTlkOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/OiwPgifZOMoIIChDroAtYUf7JJSB+1QZyr YYszMdO12FW1Ly7Op9IKR7NAH4exNCXFw9DzIySLRFhTNfQXkl+jak80SLaOlsqU HMXk8UU9LIzDNXbbGqm1V7jCxNyHaN/oxZI3rKcPMGzdrpOGMEzJ90dy1pFbG74T IEZHuBrm1VqA+OxILyBTGn70mvZpnWddvh0N1uoOZ6RpxAqW/KnqLGvuMxs6P7bm CX0ZlxTCb+4v9geD+wjRcxEuYtzahwsBjege/OhJyfBno2UVn8U4fgQlWMzM8yd+ ZvZXWnDbKyvnqf+PbFVUexRALc5HFpBZs/4Z3WIeTz8C8h76kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVLNFxtUHAfAycilXw20J+B+jZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JkNTdlYTMtNjliYS0z Y2IxLTg5NzgtYjdmMzY2ZDdiODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjyqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERq9EJlyedHMmV6tjqy3t/AVqiVmyoYRM5+DCm/Dh6U8+YCiqX8i0/Z 0O6jcHutUXIYuHmcwx0JETKNGZiCwe4s71fpUOWKVu7QLQmteTX8t/EOGpvDQHl3 /4nvxwLGJRvF1aVxXrjMEq1NYRRBRWBqi+XSfNFwhLfDh2+VlSRdI2aiP1bxe6td vd4xNS841jzRiQU+K4OwKWJlXXIQfwZlZK/xLhsBzSv+IWCkpo2fD25YIJKuKVII dNM1BvSdVb1Tg512YqOOzslrKRDNQgNLOL+U21Z+if6GiRn1MF2pQe/ya8PTTtgg d0VbikSJ5PX27EYeQ+xhhxWmy7Mtuf8= -----END CERTIFICATE-----Generated at Sun Jun 29 14:01:26 2025 by rpki-client