$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/831f7b1d-f047-3651-af93-1b2515f17b28.roa File: 831f7b1d-f047-3651-af93-1b2515f17b28.roa (raw, json) Hash identifier: eVYxgILBTQhTgBNy+9oPQMyfPsIBy4g8e6UblxuutLI= Subject key identifier: BD:FD:F4:2A:C1:B7:8A:89:EE:DF:7C:12:54:DF:E7:A1:9F:2A:1D:6A Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F43285849AFF2948E6777DA0322B36500 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/831f7b1d-f047-3651-af93-1b2515f17b28.roa Signing time: Tue 29 Apr 2025 13:29:03 +0000 ROA not before: Tue 29 Apr 2025 13:29:03 +0000 ROA not after: Mon 28 Jul 2025 13:29:03 +0000 asID: 398156 IP address blocks: 158.120.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:f2:94:8e:67:77:da:03:22:b3:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Apr 29 13:29:03 2025 GMT Not After : Jul 28 13:29:03 2025 GMT Subject: CN=cfae98e8-cdaf-4816-9ff7-164a28829028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:2c:81:de:28:17:52:77:09:d0:74:a7:28: 14:14:de:54:e1:d0:b1:18:f4:ee:d9:2a:d7:4a:55: a3:b2:b1:bc:62:46:c3:84:9e:66:7d:ec:03:80:ca: bc:2d:dc:f8:d0:8d:09:4c:e6:ff:5b:8c:b1:c0:21: 8b:cd:ef:11:e0:2f:9b:5f:c9:00:99:7f:02:dc:1a: 1e:d9:12:ff:dc:89:ef:ef:a9:15:f9:cf:66:aa:48: 89:33:ed:51:da:40:85:e1:74:6f:ed:e9:de:83:1c: 15:73:98:63:5f:e1:7b:85:28:85:92:fa:d1:e9:37: 42:6c:52:25:d0:e9:c7:bd:cf:80:5e:74:46:89:6a: b2:1e:5c:2a:53:a2:52:76:d3:1e:c8:44:ea:b9:6e: c5:6a:40:02:52:a0:6e:fa:47:51:f6:c6:5c:92:cc: 45:e0:1a:8c:e6:69:a9:fb:d7:2a:83:83:6c:40:bc: 42:05:3b:61:35:13:ce:0c:18:92:ec:2f:1a:db:80: dd:2d:a0:ed:8c:9f:49:6a:bc:ae:bb:77:c7:db:86: 82:37:6e:c1:fd:b1:ac:80:4e:9e:03:d0:d0:03:c8: c5:44:dd:de:84:08:3c:17:25:1d:96:93:68:80:ac: 9b:d3:fc:79:ac:52:14:21:53:11:36:54:4f:ad:63: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FD:F4:2A:C1:B7:8A:89:EE:DF:7C:12:54:DF:E7:A1:9F:2A:1D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/831f7b1d-f047-3651-af93-1b2515f17b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:48:25:be:a6:e0:c8:42:ec:58:ff:bd:e7:10:57:1a:93:d4: 0a:b2:f1:97:5f:f2:23:45:d1:e4:ef:a9:a2:b7:e1:d9:44:45: f2:c1:11:5f:61:f0:4e:46:ca:e2:2c:86:92:a9:b9:29:2d:b0: 4c:2e:4e:06:9d:f4:f6:fd:16:8f:a8:9b:22:94:6f:7b:4c:0e: d6:d5:f1:f9:13:70:41:a3:95:b3:04:7d:47:98:75:74:07:6d: e1:4b:48:9b:55:93:7f:2a:df:1a:9f:f0:c7:5e:e4:6e:47:2e: 50:52:80:2e:43:ad:d3:39:6d:b1:cd:ae:e6:fd:92:86:eb:67: 03:36:27:6e:5a:c2:6b:bd:90:5e:bb:b6:76:af:cb:c9:28:ee: 40:79:61:0c:6c:69:ae:d8:f2:7c:52:9c:0b:e2:a7:df:7d:25: 25:6a:8b:2e:01:51:60:ac:a2:a2:a3:79:4f:34:64:1f:34:9d: 3d:c6:da:a5:2f:86:50:c6:dd:de:79:4d:06:f2:49:ea:55:5c: 80:77:30:1a:a7:53:d3:d2:e5:9a:51:6e:a1:22:6f:c3:4e:2e: 7e:50:45:de:92:21:dd:99:e5:62:6d:67:a2:43:fb:4c:50:5d: be:b9:2c:be:30:53:43:5e:74:65:05:a4:a8:7f:38:58:87:4f: 98:6c:9b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv8pSOZ3faAyKzZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDQyOTEzMjkwM1oXDTI1MDcyODEzMjkwM1owLzEtMCsGA1UEAxMk Y2ZhZTk4ZTgtY2RhZi00ODE2LTlmZjctMTY0YTI4ODI5MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsosgd4oF1J3CdB0pygUFN5U4dCxGPTu2SrX SlWjsrG8YkbDhJ5mfewDgMq8Ldz40I0JTOb/W4yxwCGLze8R4C+bX8kAmX8C3Boe 2RL/3Inv76kV+c9mqkiJM+1R2kCF4XRv7enegxwVc5hjX+F7hSiFkvrR6TdCbFIl 0OnHvc+AXnRGiWqyHlwqU6JSdtMeyETquW7FakACUqBu+kdR9sZcksxF4BqM5mmp +9cqg4NsQLxCBTthNRPODBiS7C8a24DdLaDtjJ9Jaryuu3fH24aCN27B/bGsgE6e A9DQA8jFRN3ehAg8FyUdlpNogKyb0/x5rFIUIVMRNlRPrWOM9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL399CrBt4qJ7t98ElTf56GfKh1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvODMxZjdiMWQtZjA0Ny0z NjUxLWFmOTMtMWIyNTE1ZjE3YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtIJb6m4MhC7Fj/vecQVxqT1Aqy8Zdf8iNF0eTvqaK34dlERfLBEV9h 8E5GyuIshpKpuSktsEwuTgad9Pb9Fo+omyKUb3tMDtbV8fkTcEGjlbMEfUeYdXQH beFLSJtVk38q3xqf8Mde5G5HLlBSgC5DrdM5bbHNrub9kobrZwM2J25awmu9kF67 tnavy8ko7kB5YQxsaa7Y8nxSnAvip999JSVqiy4BUWCsoqKjeU80ZB80nT3G2qUv hlDG3d55TQbySepVXIB3MBqnU9PS5ZpRbqEib8NOLn5QRd6SId2Z5WJtZ6JD+0xQ Xb65LL4wU0NedGUFpKh/OFiHT5hsm4s= -----END CERTIFICATE-----Generated at Sat May 10 13:22:12 2025 by rpki-client