$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa File: 2005afc5-6398-3704-ae6d-145db2a4d7af.roa (raw, json) Hash identifier: SE8R/4M2o/CqFQlmFTZIP5F4GLqWknwzArBu/hNtJnU= Subject key identifier: 9C:7E:66:B3:D6:DC:B9:E2:A3:DD:7D:D2:FF:B3:C7:7A:17:9A:F6:BB Certificate issuer: /CN=b5de9249-f707-4392-b43f-d406dfb20aee Certificate serial: 010D0C9F4328584B127B5111F7AAE30B65DCD180 Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa Signing time: Wed 03 Sep 2025 13:20:43 +0000 ROA not before: Wed 03 Sep 2025 13:20:43 +0000 ROA not after: Tue 02 Dec 2025 14:20:43 +0000 asID: 16504 IP address blocks: 143.170.0.0/16 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:7b:51:11:f7:aa:e3:0b:65:dc:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee Validity Not Before: Sep 3 13:20:43 2025 GMT Not After : Dec 2 14:20:43 2025 GMT Subject: CN=fdd5fc74-bc50-4f5b-b853-548f23445409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d7:91:59:da:7e:ea:d5:e5:9a:61:ff:f1:64: 09:59:15:5d:e3:89:8f:88:24:29:f1:45:b2:65:ec: 74:70:37:a2:56:3d:5f:52:a5:df:db:ac:fa:4b:52: d1:c2:f2:04:08:96:d8:d2:0d:0d:26:7c:1f:64:02: 47:88:39:34:7d:f7:f6:49:bc:5a:bb:7d:54:8e:b0: 59:cc:78:cb:87:e0:3e:72:85:a1:44:ab:36:97:37: e0:a5:bb:28:40:4f:29:08:e3:eb:20:c7:da:ee:4e: 42:05:18:ab:5d:e8:bf:9d:e5:a1:10:85:46:82:7d: c2:64:65:d1:53:db:89:58:bd:b1:87:bb:03:7b:64: 77:27:de:a0:bf:78:f8:6e:2a:ee:11:0b:99:3b:6e: e2:1d:5d:4a:2e:df:63:fc:88:62:76:b7:ff:fa:4f: 76:c2:2c:c6:ad:8a:55:1b:bf:92:2e:2b:ef:04:87: 18:e2:54:14:bf:ac:01:8c:f3:40:55:ba:34:80:58: 47:e4:06:19:a2:e9:f2:9d:ce:3d:80:ac:a7:d4:5e: 3f:df:26:80:a1:82:2b:ea:bd:8d:6b:38:dc:b0:72: 12:d6:3c:a1:e4:da:1c:1e:8f:0c:b6:17:83:38:78: f3:68:68:6f:0b:a4:c1:9a:06:fc:2d:c0:05:a5:86: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7E:66:B3:D6:DC:B9:E2:A3:DD:7D:D2:FF:B3:C7:7A:17:9A:F6:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl X509v3 Authority Key Identifier: keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer sbgp-ipAddrBlock: critical IPv4: 143.170.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7c:ab:19:2d:94:c0:a0:32:55:39:61:96:50:f3:bc:f6:ca: 39:13:59:67:5e:c9:fb:ad:6f:28:9c:56:d5:8d:b8:23:e7:86: 03:97:2f:83:f1:7f:b9:4a:5a:bf:83:16:0b:d3:93:ec:31:3c: 00:b5:92:cd:c2:cf:07:84:bc:5f:08:72:24:6f:b6:c2:ec:8a: b2:6b:e2:1a:94:b0:59:68:7a:9e:76:89:c0:7b:38:a9:2d:fd: 74:0d:f3:e4:46:57:2a:b1:7d:eb:fd:ab:ee:75:0b:03:84:83: bd:81:d0:ac:d5:fc:69:74:bc:90:6b:50:5a:eb:77:9c:13:1d: b7:97:ff:05:1d:cf:1a:00:2f:55:15:e4:52:30:56:d7:58:04: fd:e4:d7:4b:5e:75:e4:c2:fe:18:cf:18:76:73:7f:8a:68:7d: 70:67:7a:c8:f8:4e:9c:a0:e2:76:df:ee:85:cf:3d:1e:28:05: 4a:88:13:25:e1:9b:86:9b:bd:fe:bc:e5:bc:c2:45:40:ee:65: 19:1a:80:5c:36:a4:73:c6:de:9d:2a:99:ff:f6:62:11:b0:5d: 53:95:91:e2:76:0a:a9:7d:75:73:4c:8d:c3:79:82:0b:1a:21: 4d:69:3c:e4:8f:a9:f1:a9:08:50:86:75:73:79:fc:d3:f2:28: b0:a9:24:dd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsSe1ER96rjC2Xc0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw YWVlMB4XDTI1MDkwMzEzMjA0M1oXDTI1MTIwMjE0MjA0M1owLzEtMCsGA1UEAxMk ZmRkNWZjNzQtYmM1MC00ZjViLWI4NTMtNTQ4ZjIzNDQ1NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdeRWdp+6tXlmmH/8WQJWRVd44mPiCQp8UWy Zex0cDeiVj1fUqXf26z6S1LRwvIECJbY0g0NJnwfZAJHiDk0fff2Sbxau31UjrBZ zHjLh+A+coWhRKs2lzfgpbsoQE8pCOPrIMfa7k5CBRirXei/neWhEIVGgn3CZGXR U9uJWL2xh7sDe2R3J96gv3j4biruEQuZO27iHV1KLt9j/Ihidrf/+k92wizGrYpV G7+SLivvBIcY4lQUv6wBjPNAVbo0gFhH5AYZounync49gKyn1F4/3yaAoYIr6r2N azjcsHIS1jyh5NocHo8MtheDOHjzaGhvC6TBmgb8LcAFpYaVVQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJx+ZrPW3Lnio9190v+zx3oXmva7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvMjAwNWFmYzUtNjM5OC0z NzA0LWFlNmQtMTQ1ZGIyYTRkN2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0 M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2 ZGZiMjBhZWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj6owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADXyrGS2UwKAyVTlhllDzvPbKORNZZ17J+61vKJxW1Y24I+eGA5cvg/F/ uUpav4MWC9OT7DE8ALWSzcLPB4S8XwhyJG+2wuyKsmviGpSwWWh6nnaJwHs4qS39 dA3z5EZXKrF96/2r7nULA4SDvYHQrNX8aXS8kGtQWut3nBMdt5f/BR3PGgAvVRXk UjBW11gE/eTXS1515ML+GM8YdnN/imh9cGd6yPhOnKDidt/uhc89HigFSogTJeGb hpu9/rzlvMJFQO5lGRqAXDakc8benSqZ//ZiEbBdU5WR4nYKqX11c0yNw3mCCxoh TWk85I+p8akIUIZ1c3n80/IosKkk3Q== -----END CERTIFICATE-----Generated at Mon Sep 8 10:34:39 2025 by rpki-client