$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa File: 0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa (raw, json) Hash identifier: 8l/Sp2ZzAS43ptAcw6UWHKMN+x81LMGdSGxTgUq6+Zk= Subject key identifier: 59:64:9C:89:66:9C:5B:47:A0:C1:80:7A:87:1C:B3:4F:98:1C:A8:5E Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584AE5C675C92BD66AA9FB742860 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 398156 IP address blocks: 168.220.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:75:c9:2b:d6:6a:a9:fb:74:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=38de95ce-ac92-41db-bfca-13a5813219a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:98:9c:9b:6e:0b:e1:e4:54:3c:1c:0d:74:96: b1:c1:88:f0:6d:8e:8b:b1:e3:e9:d2:97:bb:1e:3e: 22:b9:c5:65:1a:d4:4d:11:11:ed:fb:ff:3a:20:95: d8:72:d8:10:75:bb:18:96:1f:81:83:a9:0f:6d:97: ba:43:27:b3:f1:27:ba:90:20:36:e6:3e:f5:72:f6: c6:07:76:38:90:c1:01:a7:55:8a:7d:a6:f5:38:10: 77:70:99:d4:d1:5e:d5:47:74:26:ef:1c:75:9c:8b: 6f:73:6e:6d:25:a1:93:4a:13:13:77:c2:58:2d:69: a3:80:aa:27:19:17:a8:ea:85:f1:9e:3f:70:dd:e3: 87:5b:d9:5d:e7:bb:5e:86:73:ba:38:23:66:23:36: df:f1:4f:62:74:b1:29:8a:76:1c:34:f9:39:b0:93: a9:10:8b:16:d8:cc:13:ca:86:c3:b0:b7:8c:12:92: d2:29:95:a2:6b:d2:3a:b2:00:91:f4:46:d4:9d:3a: e7:1c:e9:6b:0a:c3:a6:c9:85:77:ce:ec:02:c6:18: 81:dc:44:38:4a:7d:14:72:ba:82:92:a7:d2:bb:51: b4:4a:1c:6b:69:10:c3:6a:dc:f0:31:c8:a1:4c:37: f5:67:da:48:fe:8b:bd:af:49:32:ab:2c:08:5e:43: 5b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:9C:89:66:9C:5B:47:A0:C1:80:7A:87:1C:B3:4F:98:1C:A8:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d8:82:a3:f8:f7:f6:eb:f8:30:c7:6b:50:21:44:19:5c:ab: 17:b3:be:a2:ef:e1:76:b9:a3:1d:11:11:92:0f:f5:63:05:d5: 5a:a0:72:28:d6:db:34:28:cd:1e:bb:34:03:cf:d3:23:5f:49: 7d:0f:f5:17:18:4f:53:49:b3:44:ea:f1:6f:68:36:b6:28:90: 88:47:c1:bb:85:55:c7:08:5a:fa:32:a8:f0:cc:2c:f1:5b:79: 84:cc:ae:f6:41:e2:6d:62:26:12:26:ed:94:45:32:56:1b:c3: 9b:df:a5:56:ba:05:ff:2b:32:3e:c4:82:65:b6:95:a4:34:52: 2c:aa:f9:93:36:27:b3:b8:df:c1:8f:65:74:8b:71:3f:03:41: a5:82:d2:95:8d:33:79:eb:7b:2c:5a:87:a2:e7:43:87:30:bd: 5f:a9:8a:70:5a:90:4f:c6:63:85:c7:df:19:1d:a7:98:eb:8b: 19:99:37:92:60:0f:9b:44:24:0e:f8:29:17:67:6f:af:80:c3: 0b:27:de:4e:4f:8f:9e:e7:c7:61:ff:62:91:64:36:eb:0d:c1: 22:c8:f6:4b:1d:94:5d:62:43:21:9f:62:7d:a8:a7:ef:39:94: 37:03:02:bc:f9:08:7c:e0:12:e1:45:ff:95:3b:0d:29:54:6b: f6:70:c8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnXJK9Zqqft0KGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MzhkZTk1Y2UtYWM5Mi00MWRiLWJmY2EtMTNhNTgxMzIxOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4picm24L4eRUPBwNdJaxwYjwbY6LsePp0pe7 Hj4iucVlGtRNERHt+/86IJXYctgQdbsYlh+Bg6kPbZe6Qyez8Se6kCA25j71cvbG B3Y4kMEBp1WKfab1OBB3cJnU0V7VR3Qm7xx1nItvc25tJaGTShMTd8JYLWmjgKon GReo6oXxnj9w3eOHW9ld57tehnO6OCNmIzbf8U9idLEpinYcNPk5sJOpEIsW2MwT yobDsLeMEpLSKZWia9I6sgCR9EbUnTrnHOlrCsOmyYV3zuwCxhiB3EQ4Sn0UcrqC kqfSu1G0ShxraRDDatzwMcihTDf1Z9pI/ou9r0kyqywIXkNb0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlknIlmnFtHoMGAeoccs0+YHKheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMGZjZTk1YjYtM2JmNi0z ZWY4LTk4OGMtZmQyY2I3Y2FlMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzYgqP49/br+DDHa1AhRBlcqxezvqLv4Xa5ox0REZIP9WMF1VqgcijW 2zQozR67NAPP0yNfSX0P9RcYT1NJs0Tq8W9oNrYokIhHwbuFVccIWvoyqPDMLPFb eYTMrvZB4m1iJhIm7ZRFMlYbw5vfpVa6Bf8rMj7EgmW2laQ0Uiyq+ZM2J7O438GP ZXSLcT8DQaWC0pWNM3nreyxah6LnQ4cwvV+pinBakE/GY4XH3xkdp5jrixmZN5Jg D5tEJA74KRdnb6+Awwsn3k5Pj57nx2H/YpFkNusNwSLI9ksdlF1iQyGfYn2op+85 lDcDArz5CHzgEuFF/5U7DSlUa/ZwyIA= -----END CERTIFICATE-----Generated at Sun Aug 24 00:41:01 2025 by rpki-client