$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa File: 549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa (raw, json) Hash identifier: Xq2fzhq5BaC77mTuiTfKnVd+8/j0bQ9FFZHaGOHgysM= Subject key identifier: 0B:62:15:F2:7B:3E:A4:77:DD:E2:EF:A8:A2:05:4E:E4:7C:17:37:9D Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584AE5C67BCCC11B45A5644F0FC0 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 398156 IP address blocks: 158.120.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:7b:cc:c1:1b:45:a5:64:4f:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=da16505c-6ed1-4f64-94f3-4a4802fd1153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:34:e9:e4:47:b1:3d:37:2f:90:c1:c9:5f: cf:6b:5e:a0:92:be:74:9a:46:78:a5:32:10:90:8f: ee:80:23:bb:76:d4:df:24:f2:b2:38:93:c7:ac:5c: 9a:3d:05:d6:e1:42:1f:0d:6f:11:01:88:19:7d:f6: 54:9e:4f:b7:24:2b:89:94:d1:f8:12:91:45:a8:ad: c6:42:6f:d5:fd:2b:b7:28:02:f3:61:06:29:21:29: 77:9a:a0:5b:38:d1:12:9f:98:5f:da:d8:84:5a:c8: 2c:0f:60:31:ff:ca:e7:44:fc:38:1f:7a:e2:57:eb: 6b:f5:08:27:4a:ee:f3:73:21:de:03:29:b4:73:7a: f7:4d:92:d2:65:d6:47:03:84:4c:37:cf:92:e0:13: 56:38:f7:f1:7d:a7:e6:1c:77:86:01:89:f2:d7:c6: 48:b5:49:42:f2:13:13:bb:cb:ae:12:79:ab:48:ec: 0f:88:55:47:75:d8:b2:5d:0c:96:39:7f:42:84:06: cc:02:e6:87:12:aa:3e:49:3c:9e:ad:2f:7c:a7:9e: 19:c2:6a:2f:a8:a4:21:26:98:50:1c:81:40:ab:87: d7:e4:94:83:9b:a0:78:cf:51:61:ab:e1:a6:55:0a: c5:6f:d0:f0:52:de:01:6a:8f:b4:fd:56:6d:80:66: 11:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:62:15:F2:7B:3E:A4:77:DD:E2:EF:A8:A2:05:4E:E4:7C:17:37:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c9:ca:2a:73:ae:09:45:1b:15:c1:be:b1:16:e6:04:cc:85: a5:59:13:b8:cd:4f:6d:c0:bf:31:d6:7c:24:6f:62:80:80:92: 66:8a:2d:76:a4:eb:70:76:1e:5b:03:eb:5b:13:c9:1a:74:d9: f5:d3:a7:08:16:74:f7:e1:f0:7d:fe:fe:59:7d:7b:7f:88:2e: 3c:bc:49:95:2e:2f:75:ed:33:56:4f:6b:dd:50:a3:37:2f:11: f5:4c:a2:d0:6c:91:bb:a9:a8:10:06:2c:60:df:b6:ac:e1:aa: e4:d7:96:97:f8:f6:53:05:d7:9c:b0:ce:31:f4:d0:17:e8:a2: bc:aa:ee:98:26:8a:e7:2e:77:e7:cc:ed:c6:1e:87:85:ee:fe: 54:89:56:0e:98:e0:1d:c9:f8:9a:fb:fa:bf:70:a7:e2:92:c4: ab:85:53:85:32:80:d5:57:2d:93:c3:00:a1:8b:20:ce:07:ff: c8:8e:c1:3d:c6:01:a2:37:b5:06:c8:16:f5:3e:5e:30:80:2b: 08:14:81:41:11:eb:48:28:50:bb:84:9b:44:7a:b0:39:66:1b: 6c:ab:7a:81:fb:19:df:c1:63:70:1c:27:bd:a6:b6:29:fc:64: 47:d6:9f:a1:03:85:06:06:84:c9:98:7b:83:a8:82:c5:3b:f1: 8b:ce:76:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnvMwRtFpWRPD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk ZGExNjUwNWMtNmVkMS00ZjY0LTk0ZjMtNGE0ODAyZmQxMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgI06eRHsT03L5DByV/Pa16gkr50mkZ4pTIQ kI/ugCO7dtTfJPKyOJPHrFyaPQXW4UIfDW8RAYgZffZUnk+3JCuJlNH4EpFFqK3G Qm/V/Su3KALzYQYpISl3mqBbONESn5hf2tiEWsgsD2Ax/8rnRPw4H3riV+tr9Qgn Su7zcyHeAym0c3r3TZLSZdZHA4RMN8+S4BNWOPfxfafmHHeGAYny18ZItUlC8hMT u8uuEnmrSOwPiFVHddiyXQyWOX9ChAbMAuaHEqo+STyerS98p54ZwmovqKQhJphQ HIFAq4fX5JSDm6B4z1Fhq+GmVQrFb9DwUt4Bao+0/VZtgGYRuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtiFfJ7PqR33eLvqKIFTuR8FzedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNTQ5ZjNlOGEtZGU5Zi0z ZTRhLTg5MTctZTY2YzA1OGFkNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPJyipzrglFGxXBvrEW5gTMhaVZE7jNT23AvzHWfCRvYoCAkmaKLXak 63B2HlsD61sTyRp02fXTpwgWdPfh8H3+/ll9e3+ILjy8SZUuL3XtM1ZPa91Qozcv EfVMotBskbupqBAGLGDftqzhquTXlpf49lMF15ywzjH00Bfooryq7pgmiucud+fM 7cYeh4Xu/lSJVg6Y4B3J+Jr7+r9wp+KSxKuFU4UygNVXLZPDAKGLIM4H/8iOwT3G AaI3tQbIFvU+XjCAKwgUgUER60goULuEm0R6sDlmG2yreoH7Gd/BY3AcJ72mtin8 ZEfWn6EDhQYGhMmYe4OogsU78YvOdtg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:13:39 2025 by rpki-client