$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa File: ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa (raw, json) Hash identifier: i4dNlS03AvyiCkYfmrpVXpcqcCQJtKT3YUOjqK7p4G0= Subject key identifier: A4:E7:4C:CC:07:8E:10:28:AD:AB:37:2D:5B:23:67:FB:81:05:C3:B0 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F43285849B59BF15C59BAD5C9E8CEB040 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa Signing time: Thu 01 May 2025 14:09:20 +0000 ROA not before: Thu 01 May 2025 14:09:20 +0000 ROA not after: Wed 30 Jul 2025 14:09:20 +0000 asID: 398156 IP address blocks: 158.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:9b:f1:5c:59:ba:d5:c9:e8:ce:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: May 1 14:09:20 2025 GMT Not After : Jul 30 14:09:20 2025 GMT Subject: CN=fa6026f9-61c1-44dc-91f9-a135d7906324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:f0:a4:6f:d6:1c:41:2f:f6:ea:c6:45:89: 8e:13:7c:b1:04:22:b4:c4:ab:59:1d:a4:7d:74:f2: 33:16:f1:12:3c:bd:e4:85:f8:7b:4f:3c:30:e5:43: a5:a2:5c:b5:9b:12:9b:af:7e:9f:4f:db:31:99:e9: 0e:83:a0:f9:b7:67:c0:18:ba:36:00:2d:d5:80:4d: 35:8e:8d:68:c9:06:18:70:7d:2d:ab:3e:40:20:18: d9:50:24:06:a4:0e:2c:95:2e:df:d8:50:d1:96:a4: 6a:09:4c:73:cd:54:e2:bb:db:c2:3f:62:cf:43:25: 79:96:07:8b:f0:1b:f4:da:bc:f3:b8:be:07:24:bb: 5f:bb:bb:f9:c9:89:5d:1f:e3:1a:f5:f0:a8:df:3f: f1:70:85:fe:e0:dc:f9:df:75:3b:cd:70:84:ea:e6: 34:a6:1a:76:8d:ec:82:84:20:80:4a:bc:49:5d:60: ec:ee:e8:7a:fa:f0:44:19:4e:9c:a9:4c:a2:fb:10: 81:83:22:b0:b0:cb:da:67:8a:f7:9c:17:9d:d8:6e: 88:96:ea:54:6f:1a:c3:73:3e:ac:fb:64:cb:57:67: 0c:14:c0:01:68:7e:d6:4a:9a:87:e3:bf:ab:88:a0: 5b:e3:2d:56:13:fe:95:c4:d6:05:ef:89:ff:30:61: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E7:4C:CC:07:8E:10:28:AD:AB:37:2D:5B:23:67:FB:81:05:C3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5f:cd:54:3e:af:bc:38:32:b8:c8:97:86:e3:79:b6:51:39: 1a:05:78:1b:ad:76:f5:a5:ef:3e:64:f4:37:38:1a:ba:ee:13: ca:04:7b:ec:c1:9d:86:bb:4f:df:5f:bd:c5:94:31:12:65:94: b1:03:d2:71:9c:77:51:94:33:ef:b1:a7:70:a5:a6:24:32:87: e8:39:0b:5d:e1:5c:3f:8d:cd:37:6d:82:db:19:43:ec:82:23: 72:12:bc:4a:42:87:0b:d1:a4:26:33:6c:1b:7d:16:6a:00:54: cf:b2:e4:e2:44:d7:de:bb:ea:22:f2:41:61:c8:1c:7a:0b:49: 61:36:67:4c:99:77:7f:28:2c:75:c4:7d:a9:fc:f6:6c:96:35: 31:67:a2:1a:b5:ae:d8:6b:ae:b5:88:d5:05:14:c6:60:56:97: a7:12:62:37:d4:72:f9:01:9d:8b:d1:b1:df:26:5b:ef:c4:4d: be:01:e7:03:cc:3b:6b:3b:ac:f9:a0:88:8a:e1:7a:39:b6:cc: bc:15:04:fd:f1:42:ee:73:2b:23:9b:c4:ee:6e:84:b2:66:50: 75:b1:e7:c6:75:da:f1:5d:fe:40:51:b8:5e:19:18:51:56:8d: d3:fa:cf:c1:23:c4:7d:25:d1:63:28:48:2c:de:d7:31:57:72: 78:a3:ef:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1m/FcWbrVyejOsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDUwMTE0MDkyMFoXDTI1MDczMDE0MDkyMFowLzEtMCsGA1UEAxMk ZmE2MDI2ZjktNjFjMS00NGRjLTkxZjktYTEzNWQ3OTA2MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiszwpG/WHEEv9urGRYmOE3yxBCK0xKtZHaR9 dPIzFvESPL3khfh7Tzww5UOloly1mxKbr36fT9sxmekOg6D5t2fAGLo2AC3VgE01 jo1oyQYYcH0tqz5AIBjZUCQGpA4slS7f2FDRlqRqCUxzzVTiu9vCP2LPQyV5lgeL 8Bv02rzzuL4HJLtfu7v5yYldH+Ma9fCo3z/xcIX+4Nz533U7zXCE6uY0php2jeyC hCCASrxJXWDs7uh6+vBEGU6cqUyi+xCBgyKwsMvaZ4r3nBed2G6IlupUbxrDcz6s +2TLV2cMFMABaH7WSpqH47+riKBb4y1WE/6VxNYF74n/MGHrYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTnTMwHjhAoras3LVsjZ/uBBcOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvY2E4MTUwODctMDYyMC0z YjJlLTljZTctZmViYzc3YTVkNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhfzVQ+r7w4MrjIl4bjebZRORoFeButdvWl7z5k9Dc4GrruE8oEe+zB nYa7T99fvcWUMRJllLED0nGcd1GUM++xp3ClpiQyh+g5C13hXD+NzTdtgtsZQ+yC I3ISvEpChwvRpCYzbBt9FmoAVM+y5OJE19676iLyQWHIHHoLSWE2Z0yZd38oLHXE fan89myWNTFnohq1rthrrrWI1QUUxmBWl6cSYjfUcvkBnYvRsd8mW+/ETb4B5wPM O2s7rPmgiIrhejm2zLwVBP3xQu5zKyObxO5uhLJmUHWx58Z12vFd/kBRuF4ZGFFW jdP6z8EjxH0l0WMoSCze1zFXcnij75M= -----END CERTIFICATE-----Generated at Wed May 7 08:30:20 2025 by rpki-client