$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa File: 4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa (raw, json) Hash identifier: ZXuBw+N6MrlcdCVWNzBcohhszQ0cnEee64nzNMlNElA= Subject key identifier: B1:40:25:4E:4C:F2:8E:3C:F3:95:10:14:C8:C4:7B:8F:79:79:22:FA Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Certificate serial: 010D0C9F4328584AF7EBD5D8F90241F8BB906800 Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 31942 IP address blocks: 143.223.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d5:d8:f9:02:41:f8:bb:90:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=83f21d16-19e2-47a1-b836-3621a7d04660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:0d:63:b6:bf:81:a2:dd:57:ad:be:80:cf: 7b:c4:2b:b1:76:27:7b:f7:b9:80:46:72:df:b4:25: 1e:ef:0c:25:68:93:f9:ee:09:cb:e8:43:35:bf:6f: 4b:70:93:83:27:14:a5:ce:95:f2:c8:03:7e:35:b9: e8:f7:ae:cf:0a:65:a5:21:0e:5d:21:14:9f:83:c2: d7:e2:cc:9f:f8:7a:90:c7:61:6f:dd:ef:74:d6:dd: a4:25:5f:f9:5f:65:bd:eb:20:fd:57:44:e2:98:58: 1f:13:9a:f1:b2:22:4c:7e:1e:00:ed:7d:5c:53:fe: 20:d2:20:cc:20:89:6e:52:73:96:50:2a:02:3e:ac: c3:70:86:9b:08:e8:dd:85:82:d6:ed:57:1c:df:3e: ef:30:0d:29:12:52:6d:46:da:d4:79:07:fa:5a:63: b8:f6:02:e7:b9:84:54:aa:35:20:96:ec:17:de:05: b5:4c:dd:4c:08:ec:e4:de:47:d3:08:30:70:30:47: 4c:1a:9b:b1:c3:1f:e0:d0:0b:ab:b3:b9:39:e8:86: 87:18:62:d1:fa:34:89:a2:18:e4:35:4f:44:d8:ec: 1e:d4:44:d3:b6:ae:60:4b:36:c3:db:b2:7b:e1:c9: 92:0e:f5:22:be:ab:49:cb:50:75:e2:22:3b:a7:d2: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:40:25:4E:4C:F2:8E:3C:F3:95:10:14:C8:C4:7B:8F:79:79:22:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl X509v3 Authority Key Identifier: keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer sbgp-ipAddrBlock: critical IPv4: 143.223.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0b:b3:48:cd:9c:67:68:1c:0c:68:44:b1:49:0b:47:15:30: 10:c7:db:78:78:d8:ef:7b:0b:33:d0:35:ba:69:c6:1f:10:22: 4d:e6:2e:fe:2e:49:71:71:35:61:65:3e:ab:cb:9c:60:aa:05: 2c:85:50:0d:38:1c:eb:e9:08:99:33:35:ee:33:f9:11:bd:61: c2:47:b7:b9:0c:31:ab:69:52:76:0f:65:2e:65:4b:0a:c6:eb: c3:cf:43:76:97:37:cc:2e:e7:c8:2d:bc:bf:ad:cc:f8:37:f1: e5:5a:b9:73:a6:90:4e:a5:aa:ad:d7:bd:4a:43:fb:b6:91:1c: 06:f8:da:27:f6:f6:ff:38:13:14:0b:5e:9a:fc:22:2a:9d:6f: 45:2a:ba:99:60:69:42:9d:d9:48:db:87:58:4a:4c:e8:31:cb: 42:3e:e7:b4:a6:f7:ef:4b:d8:9e:28:0c:36:f2:81:93:37:4d: d5:93:77:71:01:78:41:77:96:d6:bf:58:8e:01:82:15:50:90: 7c:cb:bf:2c:3c:db:20:d0:fb:5c:4c:bf:06:19:75:eb:e8:75: 4e:a1:d2:08:ae:1b:fc:b7:2f:c4:c0:f4:bb:50:1d:f3:c4:2b: fc:be:6c:d2:16:27:03:24:59:b4:5d:b8:b1:9f:3f:e4:d3:e1: 53:fc:8f:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369XY+QJB+LuQaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5 ZDkyMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ODNmMjFkMTYtMTllMi00N2ExLWI4MzYtMzYyMWE3ZDA0NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo98NY7a/gaLdV62+gM97xCuxdid797mARnLf tCUe7wwlaJP57gnL6EM1v29LcJODJxSlzpXyyAN+Nbno967PCmWlIQ5dIRSfg8LX 4syf+HqQx2Fv3e901t2kJV/5X2W96yD9V0TimFgfE5rxsiJMfh4A7X1cU/4g0iDM IIluUnOWUCoCPqzDcIabCOjdhYLW7Vcc3z7vMA0pElJtRtrUeQf6WmO49gLnuYRU qjUgluwX3gW1TN1MCOzk3kfTCDBwMEdMGpuxwx/g0Aurs7k56IaHGGLR+jSJohjk NU9E2Owe1ETTtq5gSzbD27J74cmSDvUivqtJy1B14iI7p9K3LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFAJU5M8o4885UQFMjEe495eSL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNGRlM2ZmMTMtNjlhMC0z MDY0LWI2NWEtMmFjOWI2YjNmNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2 OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj9+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIELs0jNnGdoHAxoRLFJC0cVMBDH23h42O97CzPQNbppxh8QIk3mLv4u SXFxNWFlPqvLnGCqBSyFUA04HOvpCJkzNe4z+RG9YcJHt7kMMatpUnYPZS5lSwrG 68PPQ3aXN8wu58gtvL+tzPg38eVauXOmkE6lqq3XvUpD+7aRHAb42if29v84ExQL Xpr8Iiqdb0UquplgaUKd2Ujbh1hKTOgxy0I+57Sm9+9L2J4oDDbygZM3TdWTd3EB eEF3lta/WI4BghVQkHzLvyw82yDQ+1xMvwYZdevodU6h0giuG/y3L8TA9LtQHfPE K/y+bNIWJwMkWbRduLGfP+TT4VP8j8A= -----END CERTIFICATE-----Generated at Wed Oct 8 21:16:57 2025 by rpki-client