$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa File: 01688b26-89a1-3fa8-9d76-b1113324d268.roa (raw, json) Hash identifier: fdjzGuvGgAAenVS0zRROoN46l+b9RnhemDgnc6gxtfE= Subject key identifier: A3:D9:3B:94:E3:BA:82:AD:EF:27:F6:3D:97:94:5C:83:CE:C3:6C:9D Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584AE5C6766C5B0F01F747B22600 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 398156 IP address blocks: 158.120.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:76:6c:5b:0f:01:f7:47:b2:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=5cb51d21-acc0-47d2-8fbd-9f33492a8824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:76:66:5f:ba:68:df:b2:7c:da:62:9c:3f: c4:97:d1:af:62:8e:91:02:39:ca:8b:aa:36:29:ee: 52:c3:45:59:1e:4e:3d:65:fd:72:a3:07:7c:25:c3: 49:39:c2:bc:a9:63:aa:e9:28:2e:ae:d7:d1:1d:3a: a6:ef:14:fa:ec:73:f5:3b:74:24:d8:e3:6e:a8:23: a3:1a:17:da:c8:c8:2b:60:22:a8:bc:e3:15:b9:3f: 56:55:89:46:1f:fb:89:b0:b2:5d:1c:50:0c:0c:75: 75:dd:43:5b:d3:a6:28:66:da:0e:d9:54:9e:32:f9: fb:3f:8a:5d:de:0d:ad:d7:f2:27:32:72:4a:a8:c2: 9a:34:cc:1e:71:ba:ba:1d:20:94:b2:84:4f:ec:45: 41:b5:4e:c9:49:89:3b:c5:50:1f:3a:88:47:4d:b1: 2c:c2:dc:34:3d:75:00:f9:7d:32:20:5b:88:10:19: c7:aa:8f:ba:c8:3b:5b:18:75:38:9e:b9:aa:d9:8b: b7:a7:61:47:b9:09:79:af:29:86:8c:53:cf:2e:dc: 0d:cf:15:b5:33:e3:2f:a4:01:b7:4c:35:6e:7a:d3: f9:11:bf:64:60:5c:ad:e9:69:59:ee:ed:97:3f:1e: 09:41:9f:84:71:fb:5a:eb:11:ca:ad:04:7f:11:1d: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:3B:94:E3:BA:82:AD:EF:27:F6:3D:97:94:5C:83:CE:C3:6C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/01688b26-89a1-3fa8-9d76-b1113324d268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6d:6d:e2:b5:d9:60:e8:c5:bd:71:41:5e:e8:c4:7c:c5:50: 14:d9:51:7a:87:b2:b7:8e:e5:cd:73:8a:7f:b9:3a:86:7f:96: 35:e3:5b:c1:98:5a:25:8c:c0:ef:49:84:01:2b:6e:2d:3b:0a: ca:b6:7a:cd:de:b3:c3:4b:c5:be:f0:ff:91:be:ca:fd:07:7d: b2:5e:ef:17:f0:2a:29:a9:3c:1f:5e:ab:f4:f9:1a:62:0e:b6: c8:15:76:3e:db:b9:a4:6d:10:6f:ee:6a:55:e2:e1:ba:c1:4a: 5e:e5:6a:46:8c:49:6d:44:69:9e:03:59:41:be:a1:23:3f:88: d8:40:d7:44:d2:e5:38:51:64:e8:0a:a9:1e:4d:cb:79:db:60: e1:9c:86:bd:a4:94:07:3d:da:e5:bd:c0:29:0f:9f:66:a6:65: 5f:97:78:91:32:95:63:46:37:ce:c9:3b:ee:a0:07:f9:18:7d: 1b:35:dc:d0:a1:bf:5e:fb:dc:d5:9d:89:3c:24:12:25:f1:5d: 4f:04:d1:f2:6b:89:ba:0f:ab:24:8a:08:40:49:db:88:cf:52: dc:18:57:c7:1c:50:dc:7c:85:e0:81:a4:21:b1:b7:02:93:88: 76:21:33:4e:0e:b3:83:bc:c6:28:88:02:12:a1:0a:25:7a:83: 30:5e:0b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnZsWw8B90eyJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk NWNiNTFkMjEtYWNjMC00N2QyLThmYmQtOWYzMzQ5MmE4ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNB2Zl+6aN+yfNpinD/El9GvYo6RAjnKi6o2 Ke5Sw0VZHk49Zf1yowd8JcNJOcK8qWOq6SgurtfRHTqm7xT67HP1O3Qk2ONuqCOj GhfayMgrYCKovOMVuT9WVYlGH/uJsLJdHFAMDHV13UNb06YoZtoO2VSeMvn7P4pd 3g2t1/InMnJKqMKaNMwecbq6HSCUsoRP7EVBtU7JSYk7xVAfOohHTbEswtw0PXUA +X0yIFuIEBnHqo+6yDtbGHU4nrmq2Yu3p2FHuQl5rymGjFPPLtwNzxW1M+MvpAG3 TDVuetP5Eb9kYFyt6WlZ7u2XPx4JQZ+Ecfta6xHKrQR/ER3HSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPZO5TjuoKt7yf2PZeUXIPOw2ydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMDE2ODhiMjYtODlhMS0z ZmE4LTlkNzYtYjExMTMzMjRkMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9tbeK12WDoxb1xQV7oxHzFUBTZUXqHsreO5c1zin+5OoZ/ljXjW8GY WiWMwO9JhAErbi07Csq2es3es8NLxb7w/5G+yv0HfbJe7xfwKimpPB9eq/T5GmIO tsgVdj7buaRtEG/ualXi4brBSl7lakaMSW1EaZ4DWUG+oSM/iNhA10TS5ThRZOgK qR5Ny3nbYOGchr2klAc92uW9wCkPn2amZV+XeJEylWNGN87JO+6gB/kYfRs13NCh v1773NWdiTwkEiXxXU8E0fJriboPqySKCEBJ24jPUtwYV8ccUNx8heCBpCGxtwKT iHYhM04Os4O8xiiIAhKhCiV6gzBeCyg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:04:50 2025 by rpki-client