$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa File: 2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa (raw, json) Hash identifier: aIQBHbST1zgW7sNdGpm4p3aeQuxoN0+uOPH1lnwYheM= Subject key identifier: 49:77:76:6E:58:23:2B:D6:A9:82:0E:32:26:A3:5F:65:8D:D6:89:20 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584D359FD48186F88ADEB40DA480 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 398156 IP address blocks: 158.120.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d4:81:86:f8:8a:de:b4:0d:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b95e141a-da6c-430d-9aed-bbc04880afc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:af:36:52:97:34:61:ba:f7:7d:c3:99:7c: 50:93:13:7e:b1:16:44:a5:4a:8c:8e:72:a2:d1:8d: dd:87:81:05:d7:3d:9d:41:9b:bb:3b:18:87:84:74: aa:f3:6c:7a:79:35:ed:c8:dd:d8:9c:02:52:5e:d1: 66:f5:94:7c:fa:c1:95:5e:85:9a:28:c3:36:37:cb: 74:bb:19:6d:ea:42:9f:69:51:39:b8:00:7a:4e:46: c8:3d:20:f0:df:c1:95:d6:0d:42:34:4b:0b:06:9a: 65:ba:f6:88:83:90:08:fe:25:46:db:08:66:9e:c9: 39:20:7b:3c:18:c3:bc:15:b8:54:1f:91:55:71:7e: 7b:c0:64:5e:ae:02:f5:6e:58:ed:38:7f:0d:52:09: f1:48:d8:64:0a:f9:0c:dc:4a:d2:6e:86:3b:a9:9c: 2a:5f:0b:a1:0a:66:28:21:72:34:f5:29:9e:72:9f: 96:eb:5f:97:9c:2d:09:b5:f5:35:a2:15:87:5c:a3: 89:99:15:eb:f7:5c:08:9f:3b:ce:5a:4a:2a:a0:a7: 48:3d:07:69:55:b9:9f:d4:4c:02:d1:7c:11:95:5e: 38:6d:9d:ac:50:fa:32:49:e2:2a:ea:89:73:31:8c: 53:4f:ff:40:ee:22:53:af:a7:cf:b1:c6:e2:ce:6b: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:77:76:6E:58:23:2B:D6:A9:82:0E:32:26:A3:5F:65:8D:D6:89:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b6:8f:95:61:ec:d7:da:2c:6c:51:41:a9:af:5e:dc:f9:ca: e1:be:0e:0e:32:3e:7b:ab:91:75:25:f5:23:6f:07:a8:9d:3e: 42:81:5d:75:6f:23:e1:a4:ce:18:ff:a1:f4:1f:5d:2f:f5:4b: 26:a0:e5:3b:fd:b5:ac:a4:b4:7b:97:7a:9b:71:61:9b:32:c3: b8:d0:c6:25:9e:18:f8:51:b3:a6:48:60:41:c4:92:3c:84:69: d3:46:d4:d5:b0:79:a7:50:9c:26:00:b2:4d:46:d1:90:6f:6a: 3d:7d:09:64:92:16:d4:8c:89:3b:a3:e3:42:21:d3:1a:aa:59: e1:6a:72:3f:e0:66:06:c8:3e:3f:52:0a:b9:d8:0e:20:cd:11: e1:54:6a:80:e4:6e:93:dc:f6:91:f1:a3:d4:84:61:91:15:ac: fc:54:d2:13:7e:d6:dc:2d:a3:50:d4:27:f7:96:b8:01:e9:ff: ad:0d:1d:0d:01:5a:91:77:3d:5a:59:3e:70:4c:a3:0f:4c:de: d4:0c:5a:ca:f5:dc:59:9d:75:78:68:bd:f5:5c:1f:2d:7f:64: df:ea:0c:00:03:bd:3e:20:4b:94:b6:dd:08:6e:3d:aa:4c:b5: cd:e3:6f:2a:79:6e:80:f0:99:c0:7c:6e:a9:10:0e:95:f9:a1: 5f:86:30:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9SBhviK3rQNpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Yjk1ZTE0MWEtZGE2Yy00MzBkLTlhZWQtYmJjMDQ4ODBhZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKivNlKXNGG6933DmXxQkxN+sRZEpUqMjnKi 0Y3dh4EF1z2dQZu7OxiHhHSq82x6eTXtyN3YnAJSXtFm9ZR8+sGVXoWaKMM2N8t0 uxlt6kKfaVE5uAB6TkbIPSDw38GV1g1CNEsLBppluvaIg5AI/iVG2whmnsk5IHs8 GMO8FbhUH5FVcX57wGRergL1bljtOH8NUgnxSNhkCvkM3ErSboY7qZwqXwuhCmYo IXI09Smecp+W61+XnC0JtfU1ohWHXKOJmRXr91wInzvOWkoqoKdIPQdpVbmf1EwC 0XwRlV44bZ2sUPoySeIq6olzMYxTT/9A7iJTr6fPscbizmsYRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl3dm5YIyvWqYIOMiajX2WN1okgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMmQ3ZmU2N2YtMzczMi0z YzExLWIzZTAtZjNmMjkzOWJlMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa2j5Vh7NfaLGxRQamvXtz5yuG+Dg4yPnurkXUl9SNvB6idPkKBXXVv I+Gkzhj/ofQfXS/1Syag5Tv9tayktHuXeptxYZsyw7jQxiWeGPhRs6ZIYEHEkjyE adNG1NWweadQnCYAsk1G0ZBvaj19CWSSFtSMiTuj40Ih0xqqWeFqcj/gZgbIPj9S CrnYDiDNEeFUaoDkbpPc9pHxo9SEYZEVrPxU0hN+1twto1DUJ/eWuAHp/60NHQ0B WpF3PVpZPnBMow9M3tQMWsr13FmddXhovfVcHy1/ZN/qDAADvT4gS5S23QhuPapM tc3jbyp5boDwmcB8bqkQDpX5oV+GMJg= -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:52 2026 by rpki-client