$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f809c222-df26-36be-9936-2aa264af21c5.roa File: f809c222-df26-36be-9936-2aa264af21c5.roa (raw, json) Hash identifier: 9PE5tXBro1U3FQmfKgBrygiJi18yF5AaUrfdhTpbgzA= Subject key identifier: 10:3F:22:48:34:37:02:AD:B1:53:EC:7A:73:6C:FE:35:63:28:38:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2FC190843C39BBDDA3C8A730 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f809c222-df26-36be-9936-2aa264af21c5.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 143.42.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:90:84:3c:39:bb:dd:a3:c8:a7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=54be0af8-8cef-44e8-9b3d-d068c90d726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:b6:4f:48:fe:dc:8e:2b:e5:e1:64:80:9d: 95:f7:03:91:19:5f:db:94:f1:a4:77:37:17:c4:4d: dc:6c:94:9a:26:75:a6:5a:fa:01:3b:ca:23:b2:4d: c0:37:ae:0d:2c:6e:f5:9a:b2:ad:f2:10:fc:21:77: b4:e3:9a:e2:37:8f:cc:0d:e2:84:32:b0:2f:d9:1f: c6:75:14:74:9e:c5:e2:20:e7:23:0e:6b:85:bd:b9: 9a:55:ae:8f:d4:53:4b:80:16:b8:2b:d9:d5:28:6b: 95:60:59:1b:94:56:89:5a:1f:d3:96:20:73:6c:f3: 0e:f0:3f:ca:89:e4:f6:fe:ca:a3:0e:b9:5b:d7:81: ae:2c:00:81:8e:8a:bf:f7:20:bb:5e:7e:e9:09:3f: 5e:8d:d2:42:60:a2:0d:5f:51:04:d6:df:a1:96:1e: e1:02:22:ab:e5:9f:26:20:9f:0e:84:9c:fa:5a:ec: 07:5b:74:23:62:4e:c3:89:a0:4d:7d:00:d1:24:15: 5e:c1:3f:48:99:12:cf:8b:82:0e:9c:70:f6:cb:4d: ff:72:fe:2c:8b:6f:56:da:06:36:b8:f0:d1:72:35: cd:f8:11:93:da:c5:f6:c6:0f:d0:c0:7e:af:47:29: 1f:62:c1:bb:db:34:b3:e6:93:61:67:17:dd:d0:65: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:22:48:34:37:02:AD:B1:53:EC:7A:73:6C:FE:35:63:28:38:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f809c222-df26-36be-9936-2aa264af21c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:08:21:b5:e1:aa:b3:71:c5:ff:56:36:d1:7f:d0:97:ef:70: b2:85:b0:11:04:3c:34:96:36:37:2b:d8:af:ac:53:27:b0:ec: 31:ff:dd:f8:42:a3:56:c8:32:81:9b:a0:f5:fb:65:7e:05:bd: df:75:80:4d:b4:3f:e9:b4:c6:32:6e:43:9b:0f:41:5e:36:7a: 5b:86:52:ca:a0:18:52:a5:ce:50:b9:e4:83:34:19:2e:8e:1c: 46:e1:b2:f4:3f:f3:78:ec:dd:41:fa:94:10:4c:46:94:a1:3b: 76:cd:05:7d:8a:fe:06:ab:b4:3f:f8:62:0b:ab:56:0a:0e:0b: 5a:f8:44:97:fa:fe:49:f6:a6:71:67:4b:6d:ab:d2:ce:fc:c4: 9a:ec:2b:ad:1b:c4:2d:f6:a1:33:e5:f6:07:4d:d2:3b:4f:a3: 44:eb:bd:09:17:95:05:14:30:c4:aa:c5:e6:29:51:e8:a0:12: fa:7f:03:74:a1:30:e3:90:fe:a6:2f:41:a0:51:9d:e3:a0:82: 18:70:1b:e9:ef:66:c9:f0:3c:40:92:68:cf:4f:25:39:cb:14: d7:cb:ee:31:2c:b3:27:7f:63:a4:b9:21:1d:e3:60:ae:68:1b: 3b:7b:8f:38:5f:1c:ff:34:83:a6:8a:cf:23:ea:31:05:1a:2d: a8:f0:06:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZCEPDm73aPIpzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NTRiZTBhZjgtOGNlZi00NGU4LTliM2QtZDA2OGM5MGQ3MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCG2T0j+3I4r5eFkgJ2V9wORGV/blPGkdzcX xE3cbJSaJnWmWvoBO8ojsk3AN64NLG71mrKt8hD8IXe045riN4/MDeKEMrAv2R/G dRR0nsXiIOcjDmuFvbmaVa6P1FNLgBa4K9nVKGuVYFkblFaJWh/TliBzbPMO8D/K ieT2/sqjDrlb14GuLACBjoq/9yC7Xn7pCT9ejdJCYKINX1EE1t+hlh7hAiKr5Z8m IJ8OhJz6WuwHW3QjYk7DiaBNfQDRJBVewT9ImRLPi4IOnHD2y03/cv4si29W2gY2 uPDRcjXN+BGT2sX2xg/QwH6vRykfYsG72zSz5pNhZxfd0GUr+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA/Ikg0NwKtsVPsenNs/jVjKDiaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjgwOWMyMjItZGYyNi0z NmJlLTk5MzYtMmFhMjY0YWYyMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjyqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkIIbXhqrNxxf9WNtF/0JfvcLKFsBEEPDSWNjcr2K+sUyew7DH/3fhC o1bIMoGboPX7ZX4Fvd91gE20P+m0xjJuQ5sPQV42eluGUsqgGFKlzlC55IM0GS6O HEbhsvQ/83js3UH6lBBMRpShO3bNBX2K/gartD/4YgurVgoOC1r4RJf6/kn2pnFn S22r0s78xJrsK60bxC32oTPl9gdN0jtPo0TrvQkXlQUUMMSqxeYpUeigEvp/A3Sh MOOQ/qYvQaBRneOgghhwG+nvZsnwPECSaM9PJTnLFNfL7jEssyd/Y6S5IR3jYK5o Gzt7jzhfHP80g6aKzyPqMQUaLajwBp0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:24 2025 by rpki-client