$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa File: b596de48-c39a-3bef-8e7f-6c5138de76a0.roa (raw, json) Hash identifier: 3nZmoOKryo2juTv5/YjpcNgj8d8WMEhv/CWw/jsgYV4= Subject key identifier: E4:B8:6D:E8:CF:2C:0F:A1:2C:90:95:D3:08:47:D5:36:15:56:AE:0E Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584AE5C6752C88DF08F909595580 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 398156 IP address blocks: 168.220.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:75:2c:88:df:08:f9:09:59:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=5fb11334-2ede-4102-ae25-f617050adcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:59:1c:09:79:6c:8a:ce:e2:24:8c:71:85: 22:42:cf:3e:e8:2d:05:a2:2a:60:c3:5e:f4:83:b8: f4:9f:51:0d:b3:fa:77:fd:17:20:84:02:f1:68:a6: 4e:c6:95:d3:fd:71:6a:2a:b5:7e:75:43:ac:99:e1: 3d:0f:70:73:1d:29:03:c0:d5:71:0b:93:78:39:21: c8:1e:3f:95:ac:7c:d4:a6:16:81:44:28:f4:ce:fa: 59:92:c5:93:b9:e0:54:9f:5f:04:79:ac:48:3c:c6: f8:8c:ec:a2:f0:4f:73:d7:ec:10:89:62:d2:45:75: a8:cd:74:d0:a5:3f:d4:0a:2b:7b:f8:a4:46:59:e3: 94:2a:64:50:1f:88:52:41:70:18:8e:80:f9:ec:7c: 4c:88:db:79:f6:d4:09:44:f8:ff:6e:f6:a3:62:91: 8d:46:6e:f3:34:68:a7:09:3c:27:f8:af:58:f5:a9: 0e:77:e0:ec:48:ca:e5:ff:2c:2b:c3:17:fd:4b:35: 9c:ad:6c:b1:ea:16:96:cb:e1:bc:07:bc:03:32:f5: b6:b2:3c:c4:ac:25:07:07:12:05:0c:3d:49:e6:7d: 6f:bd:95:44:30:7e:26:80:a7:83:b2:1d:44:3b:d9: 2e:7f:3d:3b:1b:68:cd:a6:d2:5f:26:25:e8:eb:8f: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B8:6D:E8:CF:2C:0F:A1:2C:90:95:D3:08:47:D5:36:15:56:AE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b596de48-c39a-3bef-8e7f-6c5138de76a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:08:85:a4:c3:2f:00:c2:48:75:f9:02:d7:65:13:b7:dc:64: 00:e3:d2:d9:13:a6:a4:b1:e7:59:1a:a2:de:09:7e:a2:56:a1: 19:68:50:99:70:65:06:52:52:87:e0:50:de:e4:92:f5:b4:74: 7f:7f:03:d1:c6:83:59:d8:8a:04:f7:f0:7c:dd:a2:00:72:2e: dd:70:b0:c6:e6:8a:4e:71:4d:d7:49:d9:80:44:48:b1:b9:7e: 80:47:16:18:54:87:d8:b3:78:04:eb:37:36:c7:fb:9d:e7:ef: 41:b0:57:1e:32:10:6d:2f:fa:11:e1:8a:a7:8a:39:a3:a9:fa: 32:79:70:16:1e:02:64:68:ab:00:72:9d:94:62:94:7e:08:37: 0d:04:fa:a5:7b:99:f7:95:12:b4:8c:9e:59:0a:8d:79:0a:79: bb:da:29:06:05:22:2a:b7:08:c9:f7:0a:26:66:e4:55:65:c7: 2f:1e:16:da:60:ad:c8:cc:6e:82:22:70:2e:47:05:76:c5:04: 69:b9:c9:af:05:7a:9e:55:ee:e6:85:d9:63:40:e1:be:16:9c: f9:32:97:9e:96:74:4b:51:3e:9c:a7:1a:29:c1:23:f6:c2:f7: fc:9c:15:12:22:7a:72:b1:f2:19:37:92:9a:12:66:5d:67:44: 32:ad:b6:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnUsiN8I+QlZVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk NWZiMTEzMzQtMmVkZS00MTAyLWFlMjUtZjYxNzA1MGFkY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveVZHAl5bIrO4iSMcYUiQs8+6C0Foipgw170 g7j0n1ENs/p3/RcghALxaKZOxpXT/XFqKrV+dUOsmeE9D3BzHSkDwNVxC5N4OSHI Hj+VrHzUphaBRCj0zvpZksWTueBUn18EeaxIPMb4jOyi8E9z1+wQiWLSRXWozXTQ pT/UCit7+KRGWeOUKmRQH4hSQXAYjoD57HxMiNt59tQJRPj/bvajYpGNRm7zNGin CTwn+K9Y9akOd+DsSMrl/ywrwxf9SzWcrWyx6haWy+G8B7wDMvW2sjzErCUHBxIF DD1J5n1vvZVEMH4mgKeDsh1EO9kufz07G2jNptJfJiXo649zjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOS4bejPLA+hLJCV0whH1TYVVq4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYjU5NmRlNDgtYzM5YS0z YmVmLThlN2YtNmM1MTM4ZGU3NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAIhaTDLwDCSHX5AtdlE7fcZADj0tkTpqSx51kaot4JfqJWoRloUJlw ZQZSUofgUN7kkvW0dH9/A9HGg1nYigT38HzdogByLt1wsMbmik5xTddJ2YBESLG5 foBHFhhUh9izeATrNzbH+53n70GwVx4yEG0v+hHhiqeKOaOp+jJ5cBYeAmRoqwBy nZRilH4INw0E+qV7mfeVErSMnlkKjXkKebvaKQYFIiq3CMn3CiZm5FVlxy8eFtpg rcjMboIicC5HBXbFBGm5ya8Fep5V7uaF2WNA4b4WnPkyl56WdEtRPpynGinBI/bC 9/ycFRIienKx8hk3kpoSZl1nRDKttq4= -----END CERTIFICATE-----Generated at Sat Aug 23 22:53:16 2025 by rpki-client