$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa File: def21d29-3c57-3407-a3f2-98f21d026004.roa (raw, json) Hash identifier: YUPnZD9felIuUH0MihC2zh6fcarBYdlsWQNPovVxVmI= Subject key identifier: 8F:06:23:2F:4E:11:26:45:2E:46:A0:39:EF:AB:41:D6:6F:E8:13:87 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F4328584E4129C9EC5326BC5EE119BC80 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 16509 IP address blocks: 143.220.144.0/23 maxlen: 23 143.220.146.0/23 maxlen: 23 143.220.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:c9:ec:53:26:bc:5e:e1:19:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=f2d75cf3-4eed-4118-94b7-6dd021a10a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:e3:5c:25:24:05:bf:b1:c3:3d:0c:4a:c8: c1:aa:4b:d8:e5:6d:c7:df:af:9f:e5:91:77:76:ba: da:3e:40:d3:73:96:f9:fd:d2:7f:73:0a:de:e3:26: f6:1f:93:20:a4:bf:62:3e:e5:36:21:36:bf:7d:b3: e6:68:52:bc:53:95:98:71:ea:4b:9c:01:2b:d1:fb: 7c:d2:53:69:b7:db:8c:56:5d:e9:e0:a7:00:e0:4a: c4:b0:5a:46:b6:20:d2:90:5d:34:d7:cd:e0:38:51: 84:57:46:dc:b0:26:46:76:c3:c5:34:be:d1:dc:fd: e3:b4:2d:74:62:bf:46:2e:ab:1a:43:69:92:01:78: 35:40:8a:4d:6f:6f:b2:1f:c5:37:ab:0c:c6:24:7a: 2f:f4:5b:1b:b8:2a:b9:8e:a7:63:53:c7:98:6e:36: 6c:b3:a6:3a:c2:54:85:b5:47:2e:57:4b:35:b8:a1: 43:eb:2d:60:4b:93:59:aa:be:4d:b8:67:64:c1:92: d5:98:da:5a:41:55:5f:dc:cc:21:92:7d:56:bb:9d: 54:47:98:d4:7d:66:48:3f:b9:aa:5c:b2:7e:3f:b5: ce:4e:06:68:b7:b1:36:c4:3c:63:02:6f:c8:cb:e6: 34:ee:b7:9e:50:67:9d:fa:47:19:ba:ac:e6:e3:39: 11:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:06:23:2F:4E:11:26:45:2E:46:A0:39:EF:AB:41:D6:6F:E8:13:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.144.0-143.220.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:32:8b:5b:3d:46:9c:5a:c3:ba:32:72:20:5a:3b:3b:f7:f7: 86:14:27:1d:54:73:55:1e:d5:b4:03:1f:42:d1:81:3b:9d:c7: 1a:6e:5d:07:5e:bc:9d:3d:56:43:7a:76:b9:8c:a7:e7:b5:b8: 62:4b:c1:f6:87:77:c4:c4:aa:79:ae:37:3f:6a:10:2f:12:94: 0d:ab:ca:18:cd:6b:15:54:a4:51:ae:60:30:39:96:1e:53:b9: 0f:cc:0c:3b:4a:24:f9:f3:0e:2b:65:85:ed:31:00:43:b2:3e: 5f:4c:9f:70:d9:77:b9:e2:11:48:18:18:26:3d:1d:40:a9:f7: 21:ef:a0:1f:c4:a2:8b:a3:7a:3b:9c:19:bc:c3:0c:56:22:95: 89:f5:4d:c0:d3:56:79:ac:6d:7c:c6:41:1b:4e:e8:ce:74:3f: 3d:cb:94:af:1f:cc:33:4b:22:6b:24:9c:eb:3e:a9:a6:6b:25: b2:82:25:ca:92:c5:19:e8:96:93:c1:c2:98:50:a3:ee:9d:26: 21:a3:ce:b0:e9:a6:ff:5c:6c:a9:4d:2d:e6:a2:27:20:b1:3b: 4b:5d:a5:f4:74:e0:8a:54:9b:ed:9a:e0:11:9d:ef:a7:aa:ad: 14:16:f9:19:26:6a:36:4a:f3:ef:4e:21:3a:41:39:76:ad:dc: 06:7d:8e:9c -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5BKcnsUya8XuEZvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZjJkNzVjZjMtNGVlZC00MTE4LTk0YjctNmRkMDIxYTEwYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUDjXCUkBb+xwz0MSsjBqkvY5W3H36+f5ZF3 drraPkDTc5b5/dJ/cwre4yb2H5MgpL9iPuU2ITa/fbPmaFK8U5WYcepLnAEr0ft8 0lNpt9uMVl3p4KcA4ErEsFpGtiDSkF00183gOFGEV0bcsCZGdsPFNL7R3P3jtC10 Yr9GLqsaQ2mSAXg1QIpNb2+yH8U3qwzGJHov9FsbuCq5jqdjU8eYbjZss6Y6wlSF tUcuV0s1uKFD6y1gS5NZqr5NuGdkwZLVmNpaQVVf3Mwhkn1Wu51UR5jUfWZIP7mq XLJ+P7XOTgZot7E2xDxjAm/Iy+Y07reeUGed+kcZuqzm4zkR2QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFI8GIy9OESZFLkagOe+rQdZv6BOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvZGVmMjFkMjktM2M1Ny0z NDA3LWEzZjItOThmMjFkMDI2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACjKLWz1GnFrDujJyIFo7O/f3hhQnHVRzVR7VtAMfQtGB O53HGm5dB168nT1WQ3p2uYyn57W4YkvB9od3xMSqea43P2oQLxKUDavKGM1rFVSk Ua5gMDmWHlO5D8wMO0ok+fMOK2WF7TEAQ7I+X0yfcNl3ueIRSBgYJj0dQKn3Ie+g H8Sii6N6O5wZvMMMViKVifVNwNNWeaxtfMZBG07oznQ/PcuUrx/MM0siaySc6z6p pmslsoIlypLFGeiWk8HCmFCj7p0mIaPOsOmm/1xsqU0t5qInILE7S12l9HTgilSb 7ZrgEZ3vp6qtFBb5GSZqNkrz704hOkE5dq3cBn2OnA== -----END CERTIFICATE-----Generated at Mon Jun 22 22:56:37 2026 by rpki-client