$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa File: 673938d8-87b0-3c69-beed-a23cc3c631ae.roa (raw, json) Hash identifier: DwCyH/Y9kXt7M3oGlAK+Ps+DaikKzv5MiVMiGMxOMj8= Subject key identifier: 91:5E:94:70:79:2A:B1:7D:A8:2D:44:0A:C3:E4:37:D6:0C:CE:E5:70 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584AE5C6767DBB186078E45AF600 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 398156 IP address blocks: 158.120.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:76:7d:bb:18:60:78:e4:5a:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=661f3088-a3fe-4f32-9f92-3484c54b8ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:d8:5f:65:d4:21:98:31:30:bb:70:1b:cb: 07:0c:f8:51:ac:c7:97:3e:03:f5:15:b2:ba:d5:c3: e0:69:ce:72:6b:8c:a6:2d:63:db:8d:d3:de:42:fa: 2a:94:6f:60:8e:9b:97:80:1c:cc:a3:5b:1b:24:f6: aa:bf:c1:5c:d6:c1:93:0f:09:8d:c2:99:22:7e:2b: 81:a5:f1:e1:dc:eb:1a:fb:81:08:72:c0:ce:4a:29: 52:64:0e:4a:98:c1:f2:6c:39:dc:a1:73:e6:7c:ac: 9e:3d:15:0d:94:12:a3:3d:a5:32:51:ad:a0:9e:22: bf:56:2a:4f:33:13:85:45:b4:e6:5e:dd:5f:9f:9d: 1d:fe:ab:13:eb:6f:8f:7d:1b:a6:61:9e:d3:d1:9e: e8:2f:76:f2:a6:d3:6b:9d:ea:66:b3:67:03:0e:ce: 9a:c6:59:34:e5:3c:9d:d7:f6:0e:c3:a6:f9:8e:6b: 8d:61:13:1b:44:7d:93:9d:5a:c8:7a:9c:0a:a3:55: 6d:38:9d:2f:01:80:40:cb:b8:ca:b4:be:8b:a6:e5: 27:98:5c:b4:15:d5:2e:2f:0c:a9:cd:20:19:73:23: 3e:22:9b:47:ef:71:f0:57:94:cb:f4:45:e0:8b:24: 4f:41:98:f1:62:6c:0f:b0:7b:f5:10:66:4d:02:f3: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5E:94:70:79:2A:B1:7D:A8:2D:44:0A:C3:E4:37:D6:0C:CE:E5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/673938d8-87b0-3c69-beed-a23cc3c631ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8c:40:d2:3f:ed:f6:ee:3f:93:ee:d5:c5:cb:04:71:e1:9a: 26:8f:38:73:48:a6:e8:ab:30:28:48:d4:1f:e5:34:13:d9:d1: e3:94:75:d5:e5:3a:78:3a:66:13:d7:e2:ce:bb:02:fb:37:e2: 14:81:cd:54:66:55:80:7b:dc:6b:12:72:a9:2f:8e:59:30:11: 35:00:ec:ba:c2:37:d9:21:8f:ac:f7:95:21:94:79:8a:54:fb: 52:07:bf:fb:df:4e:23:70:15:1b:03:5e:23:54:c6:f8:ee:0d: 26:2c:25:f3:92:e2:b8:6a:e8:0c:7b:ba:9f:50:2c:e5:8c:cb: 6c:2f:e7:e5:22:0c:d0:88:f4:6d:29:73:ae:4c:9a:61:55:29: af:89:5d:0a:93:43:1a:4a:5c:0c:9e:53:95:0b:d0:ab:b5:84: 3d:28:9d:cc:10:5a:3a:de:a4:79:22:d2:da:55:3f:4e:6c:9b: 5b:54:fa:4f:c7:e7:2a:e7:a3:ab:30:05:50:32:5b:92:ed:07: 94:5c:9d:2c:4c:57:40:a7:aa:05:67:41:4c:4c:6d:dd:2a:9f: ef:fe:e5:16:c3:17:e7:61:35:f2:f8:4c:55:0f:70:7c:a0:3a: 0a:6b:f0:2b:e6:30:b0:0a:51:cd:63:20:d5:9f:61:34:b6:88: 69:e4:81:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnZ9uxhgeORa9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk NjYxZjMwODgtYTNmZS00ZjMyLTlmOTItMzQ4NGM1NGI4ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiobYX2XUIZgxMLtwG8sHDPhRrMeXPgP1FbK6 1cPgac5ya4ymLWPbjdPeQvoqlG9gjpuXgBzMo1sbJPaqv8Fc1sGTDwmNwpkifiuB pfHh3Osa+4EIcsDOSilSZA5KmMHybDncoXPmfKyePRUNlBKjPaUyUa2gniK/VipP MxOFRbTmXt1fn50d/qsT62+PfRumYZ7T0Z7oL3byptNrnepms2cDDs6axlk05Tyd 1/YOw6b5jmuNYRMbRH2TnVrIepwKo1VtOJ0vAYBAy7jKtL6LpuUnmFy0FdUuLwyp zSAZcyM+IptH73HwV5TL9EXgiyRPQZjxYmwPsHv1EGZNAvNKiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFelHB5KrF9qC1ECsPkN9YMzuVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNjczOTM4ZDgtODdiMC0z YzY5LWJlZWQtYTIzY2MzYzYzMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqMQNI/7fbuP5Pu1cXLBHHhmiaPOHNIpuirMChI1B/lNBPZ0eOUddXl Ong6ZhPX4s67Avs34hSBzVRmVYB73GsScqkvjlkwETUA7LrCN9khj6z3lSGUeYpU +1IHv/vfTiNwFRsDXiNUxvjuDSYsJfOS4rhq6Ax7up9QLOWMy2wv5+UiDNCI9G0p c65MmmFVKa+JXQqTQxpKXAyeU5UL0Ku1hD0oncwQWjrepHki0tpVP05sm1tU+k/H 5yrno6swBVAyW5LtB5RcnSxMV0CnqgVnQUxMbd0qn+/+5RbDF+dhNfL4TFUPcHyg Ogpr8CvmMLAKUc1jINWfYTS2iGnkgd8= -----END CERTIFICATE-----Generated at Sun Aug 24 01:09:57 2025 by rpki-client