$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa File: ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa (raw, json) Hash identifier: rbddPRnbJ24x4KGvHCHdC2uGCbcnaHDp2+6dXZ51oeg= Subject key identifier: 4A:39:C7:DB:7C:0E:DF:41:DC:70:15:7F:E3:2D:B7:26:D1:04:70:FB Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584D35A0098EC340D8E215B53B20 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 398156 IP address blocks: 158.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:09:8e:c3:40:d8:e2:15:b5:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f4f02f69-25a9-42f6-875c-a0a45daf69a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0c:80:0f:0f:b0:15:26:ba:b5:40:ae:70:20: b3:f9:78:9a:3a:59:bf:44:09:ee:d5:65:51:df:f1: 7d:b7:70:17:23:98:fc:63:5a:2d:a0:63:16:b8:95: bf:9f:25:03:4e:ff:3b:0a:0b:c5:93:0b:bf:9f:55: 5b:21:b6:4c:b3:a0:9e:55:0b:ec:c3:02:79:aa:62: 6c:da:53:9a:70:ce:a8:7d:f3:5a:91:c9:19:20:54: 7e:c6:47:e3:b8:c2:49:1f:f3:76:c2:b5:a0:05:17: 5e:d3:b5:bd:43:25:17:0c:6f:2a:75:9d:c8:e0:c8: 89:1a:19:7e:f5:d2:9a:d0:da:2b:c5:b3:eb:19:3f: c3:20:6f:bc:e1:a8:4e:8c:bd:a2:01:87:ee:63:d8: 86:0b:74:ec:a0:52:2b:33:ec:87:8d:90:e1:82:cc: 10:8a:50:fb:ee:cd:c3:7f:c8:b2:53:b1:da:b3:ce: 2a:0b:16:b6:91:91:34:64:87:ae:8e:67:41:87:b8: c7:25:97:85:4e:e8:87:fd:dc:f1:4c:79:c1:38:1a: a2:d0:5c:e0:c4:02:13:9f:e4:6b:f6:bb:08:b0:8e: 9e:2f:76:42:2e:80:41:c6:0d:29:92:3d:03:7e:77: ad:2a:08:c0:5a:92:84:59:ad:2d:8f:3a:12:84:d5: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:39:C7:DB:7C:0E:DF:41:DC:70:15:7F:E3:2D:B7:26:D1:04:70:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d9:db:10:df:d9:d9:a1:16:37:e6:d3:3e:fd:62:a3:0d:56: 28:29:20:f7:80:0f:93:fd:d4:29:9b:28:0e:1b:c7:83:72:e9: 96:5e:57:f9:6a:33:e4:3e:36:26:c1:bf:3d:d7:e0:4c:90:47: 17:5a:b9:59:48:96:b0:0b:d5:31:37:b4:70:97:64:05:38:91: 17:73:b2:19:62:a3:f9:4c:7e:01:9a:80:d0:f1:b8:50:06:e4: 78:64:46:1b:e9:1d:48:6d:a4:87:75:c4:95:72:77:a9:47:88: a7:65:18:ef:69:ea:cb:c8:c1:b8:46:71:65:4d:93:28:34:ae: 0a:61:51:4d:56:c3:ed:89:20:ba:26:83:8d:88:0a:e0:f9:84: 00:66:06:2a:fc:2f:ee:44:81:ab:7f:58:e0:9c:e7:2f:38:7c: 9b:43:cd:4e:83:16:ee:e6:68:66:09:c4:53:9c:de:15:72:71: 44:ad:d2:59:ea:48:a7:df:90:47:c9:14:b2:03:86:84:6e:50: b3:3c:af:08:bd:b5:55:c5:e3:48:76:ba:15:5e:c9:39:27:ff: 7f:c6:6f:a0:b6:67:9b:db:6d:6e:aa:9d:76:0d:5d:95:b9:1d: a8:25:00:f6:e3:60:d7:cb:99:57:99:31:34:ca:22:a3:0d:97: 52:1f:69:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oAmOw0DY4hW1OyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjRmMDJmNjktMjVhOS00MmY2LTg3NWMtYTBhNDVkYWY2OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAyADw+wFSa6tUCucCCz+XiaOlm/RAnu1WVR 3/F9t3AXI5j8Y1otoGMWuJW/nyUDTv87CgvFkwu/n1VbIbZMs6CeVQvswwJ5qmJs 2lOacM6offNakckZIFR+xkfjuMJJH/N2wrWgBRde07W9QyUXDG8qdZ3I4MiJGhl+ 9dKa0NorxbPrGT/DIG+84ahOjL2iAYfuY9iGC3TsoFIrM+yHjZDhgswQilD77s3D f8iyU7Has84qCxa2kZE0ZIeujmdBh7jHJZeFTuiH/dzxTHnBOBqi0FzgxAITn+Rr 9rsIsI6eL3ZCLoBBxg0pkj0DfnetKgjAWpKEWa0tjzoShNVZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo5x9t8Dt9B3HAVf+MttybRBHD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvY2E4MTUwODctMDYyMC0z YjJlLTljZTctZmViYzc3YTVkNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrZ2xDf2dmhFjfm0z79YqMNVigpIPeAD5P91CmbKA4bx4Ny6ZZeV/lq M+Q+NibBvz3X4EyQRxdauVlIlrAL1TE3tHCXZAU4kRdzshlio/lMfgGagNDxuFAG 5HhkRhvpHUhtpId1xJVyd6lHiKdlGO9p6svIwbhGcWVNkyg0rgphUU1Ww+2JILom g42ICuD5hABmBir8L+5Egat/WOCc5y84fJtDzU6DFu7maGYJxFOc3hVycUSt0lnq SKffkEfJFLIDhoRuULM8rwi9tVXF40h2uhVeyTkn/3/Gb6C2Z5vbbW6qnXYNXZW5 HaglAPbjYNfLmVeZMTTKIqMNl1Ifacc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:44:06 2026 by rpki-client