$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa File: 56e77077-485f-3fa0-ac2f-5f511c9a284b.roa (raw, json) Hash identifier: LMwlJIkRJu8XfwsUw4p9po5lfwuUl1P5MLGCqFgceDk= Subject key identifier: 5B:BC:1F:E1:62:C0:D1:28:59:5B:7C:30:D4:87:E5:75:0C:97:4D:6F Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584AE5C6754008A8D718BFE89F80 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 398156 IP address blocks: 168.220.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:75:40:08:a8:d7:18:bf:e8:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=2b1989f2-fa3f-45b1-884b-40aaf5e9725a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:85:c0:96:7a:e8:2b:fa:a7:ee:f9:ce:27:78: fe:3b:fb:b8:64:24:bb:ae:f7:2b:ab:2e:e0:b3:b1: 23:9b:89:dd:02:c6:7d:f8:0c:90:5e:7d:c5:29:03: 7a:b7:11:24:e8:27:89:88:12:5a:3a:72:09:49:53: 96:88:0a:07:9d:08:c8:c6:f4:73:8a:24:7c:85:dd: 13:e3:46:dd:c4:1d:30:dd:af:2e:7a:80:37:65:b8: 1b:6b:fb:ce:75:4e:1f:06:4e:8e:d7:c6:db:44:8f: 98:30:a6:8d:58:4a:d0:3c:06:71:f1:78:19:a2:de: 16:c0:49:47:82:d2:3d:d5:36:1a:11:51:87:74:78: c3:ab:37:c9:50:60:a6:3f:23:73:63:58:6c:86:99: 51:4d:e2:6b:49:72:a0:5a:94:92:e0:f3:de:66:31: 14:79:54:0e:bb:5c:69:8c:eb:86:81:ca:cb:0a:26: 6c:f3:43:9a:0f:8e:6c:b0:75:50:44:d5:09:51:3c: 64:e6:f5:ac:15:ad:e3:c6:de:c1:ef:af:03:d6:f3: 50:af:65:c3:a0:d4:cb:08:83:a5:23:b5:22:2d:23: 0f:dc:e3:f9:28:37:e3:70:2c:f0:04:73:57:0f:ed: 43:0a:d4:06:d3:70:17:9d:96:23:9f:b3:d9:00:5e: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:1F:E1:62:C0:D1:28:59:5B:7C:30:D4:87:E5:75:0C:97:4D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/56e77077-485f-3fa0-ac2f-5f511c9a284b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5e:a0:49:0d:f7:6a:9e:24:47:7a:11:db:81:07:f2:ac:f2: 2a:43:43:42:3a:60:4b:da:b0:ee:95:08:9f:55:f6:33:e1:ac: 30:46:fd:97:e3:d8:2a:d0:a0:0b:e5:aa:44:31:30:ef:e3:c5: ec:0a:f5:d4:57:ee:75:0e:ba:39:b1:2b:87:e1:3b:cb:a8:f3: e9:d5:0f:5f:2d:4b:4c:33:ea:4e:b9:ff:f2:04:0c:08:8a:45: 23:75:cf:ab:79:1c:ce:70:72:af:dd:b1:12:d5:e7:7a:1d:d1: 00:79:20:d8:64:58:05:4f:fb:4b:6b:d3:36:43:bb:eb:79:dc: 6b:ec:bc:75:bc:3a:f7:54:99:c3:3a:7e:29:ba:72:13:2f:7c: 97:0a:05:71:66:d4:1e:dc:fc:33:da:ab:2f:45:e1:df:89:06: 50:d1:01:2b:b5:e0:c3:be:28:da:6e:c4:ad:66:da:c2:1e:8e: 64:a4:da:9e:5b:dd:9a:0b:60:d2:06:ed:43:6b:87:e4:10:21: c4:3a:91:07:72:bd:67:87:64:c9:54:c0:22:67:0f:11:b4:6d: 39:7d:bc:ab:e0:2c:8e:fa:7d:a9:0c:a3:85:3b:f5:c8:c2:85: d5:88:87:6d:ef:a2:1d:75:00:27:5a:40:b5:7a:9b:85:d9:37: a5:1c:cb:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnVACKjXGL/on4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MmIxOTg5ZjItZmEzZi00NWIxLTg4NGItNDBhYWY1ZTk3MjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+YXAlnroK/qn7vnOJ3j+O/u4ZCS7rvcrqy7g s7Ejm4ndAsZ9+AyQXn3FKQN6txEk6CeJiBJaOnIJSVOWiAoHnQjIxvRziiR8hd0T 40bdxB0w3a8ueoA3Zbgba/vOdU4fBk6O18bbRI+YMKaNWErQPAZx8XgZot4WwElH gtI91TYaEVGHdHjDqzfJUGCmPyNzY1hshplRTeJrSXKgWpSS4PPeZjEUeVQOu1xp jOuGgcrLCiZs80OaD45ssHVQRNUJUTxk5vWsFa3jxt7B768D1vNQr2XDoNTLCIOl I7UiLSMP3OP5KDfjcCzwBHNXD+1DCtQG03AXnZYjn7PZAF7/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu8H+FiwNEoWVt8MNSH5XUMl01vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNTZlNzcwNzctNDg1Zi0z ZmEwLWFjMmYtNWY1MTFjOWEyODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACReoEkN92qeJEd6EduBB/Ks8ipDQ0I6YEvasO6VCJ9V9jPhrDBG/Zfj 2CrQoAvlqkQxMO/jxewK9dRX7nUOujmxK4fhO8uo8+nVD18tS0wz6k65//IEDAiK RSN1z6t5HM5wcq/dsRLV53od0QB5INhkWAVP+0tr0zZDu+t53GvsvHW8OvdUmcM6 fim6chMvfJcKBXFm1B7c/DPaqy9F4d+JBlDRASu14MO+KNpuxK1m2sIejmSk2p5b 3ZoLYNIG7UNrh+QQIcQ6kQdyvWeHZMlUwCJnDxG0bTl9vKvgLI76fakMo4U79cjC hdWIh23voh11ACdaQLV6m4XZN6Ucy+0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:27:39 2025 by rpki-client