$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa File: f6064a69-8e2a-30ff-a4e0-a91669f30752.roa (raw, json) Hash identifier: wO/S2z0udA9jcQLP4CFOYkZPAKPWtYAy6OndKLn3UI8= Subject key identifier: 08:2B:41:3C:B9:17:53:93:54:D5:CC:E5:B6:B8:14:19:15:03:35:73 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584AE5C676B1317816452A29C100 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 398156 IP address blocks: 158.120.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:76:b1:31:78:16:45:2a:29:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=7ce40a31-035d-467e-a8a2-d63c9334cf38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:c8:8d:99:a0:28:b9:d5:7d:f4:8f:e2:c5: d5:87:f3:0b:b0:49:ca:ff:31:32:45:c4:7e:68:97: e0:58:08:63:8e:bc:47:fa:1b:33:5d:33:7b:91:c8: 51:64:0d:96:28:8f:17:3f:f4:9b:26:a7:3d:59:49: a2:27:eb:cd:b7:2f:9d:6a:b6:b0:e2:86:d7:7a:7b: 5c:f3:90:7c:22:27:c1:57:70:ff:ff:fa:23:2e:b2: 98:f3:3a:8c:9c:6c:4e:2e:36:90:4a:fd:b1:49:13: e9:16:fa:f5:d1:e1:9f:b1:95:c6:ac:08:36:fd:8b: 57:62:a7:9e:72:bd:3c:f2:17:9e:43:31:1a:37:eb: 0b:41:2a:16:ac:7c:c1:63:14:33:8b:62:20:9e:30: 18:98:df:c5:d1:46:2a:da:91:47:8b:92:80:13:de: 83:40:a7:dd:a4:98:f3:c9:a4:63:bd:6a:50:e2:51: 6a:d9:26:3c:5e:01:7b:07:c2:47:01:da:86:00:4b: 50:b6:92:15:54:f0:7a:cb:47:9f:9c:8f:c5:b0:ee: 4a:fa:f5:db:d6:6d:af:32:86:92:2e:88:be:68:c4: dd:36:1c:df:c1:79:6e:50:3d:c3:a3:f3:30:13:1a: fc:94:e9:90:24:a9:57:92:a1:20:dd:2b:53:b0:81: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2B:41:3C:B9:17:53:93:54:D5:CC:E5:B6:B8:14:19:15:03:35:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b4:9c:86:03:b7:f3:ca:4e:f6:dc:d1:34:c3:32:64:14:73: ae:27:90:20:6b:df:d7:3b:f0:84:44:37:3d:ea:92:d8:ea:89: 78:c2:84:8a:34:ea:3e:60:a7:9c:10:0d:79:82:9d:4f:89:75: c9:92:f0:dd:df:0a:27:61:00:ea:20:08:39:83:8a:78:de:08: 25:83:c3:76:45:42:f4:43:e3:81:c2:91:aa:a0:57:74:18:cb: ab:f8:21:10:64:da:5a:cb:37:de:e7:bd:53:d3:37:b5:d4:55: fc:31:49:06:81:9d:98:fd:7a:90:66:c1:27:70:7a:a7:d3:2a: bb:52:29:d7:e6:03:9a:60:c0:87:d4:62:eb:06:4f:94:d8:0d: 72:91:96:27:12:ba:35:0e:c6:e0:cf:8b:55:ca:3c:aa:6b:99: a8:b5:1e:9d:bc:37:71:7a:e4:f1:52:83:61:db:c1:50:52:3f: a9:00:d8:6c:07:31:7a:07:b6:b6:ae:b4:14:21:ca:94:9b:fb: 91:ff:05:22:c3:62:16:76:1c:79:e7:91:97:a8:65:f4:38:2c: 2e:aa:d5:78:47:34:e8:90:7d:b1:14:a0:96:68:f9:c1:21:cf: df:63:ce:96:57:7e:12:9d:11:7f:a6:35:5b:46:ec:00:3b:31: fb:d6:e3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnaxMXgWRSopwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk N2NlNDBhMzEtMDM1ZC00NjdlLWE4YTItZDYzYzkzMzRjZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3IjZmgKLnVffSP4sXVh/MLsEnK/zEyRcR+ aJfgWAhjjrxH+hszXTN7kchRZA2WKI8XP/SbJqc9WUmiJ+vNty+daraw4obXentc 85B8IifBV3D///ojLrKY8zqMnGxOLjaQSv2xSRPpFvr10eGfsZXGrAg2/YtXYqee cr088heeQzEaN+sLQSoWrHzBYxQzi2IgnjAYmN/F0UYq2pFHi5KAE96DQKfdpJjz yaRjvWpQ4lFq2SY8XgF7B8JHAdqGAEtQtpIVVPB6y0efnI/FsO5K+vXb1m2vMoaS Loi+aMTdNhzfwXluUD3Do/MwExr8lOmQJKlXkqEg3StTsIFeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgrQTy5F1OTVNXM5ba4FBkVAzVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZjYwNjRhNjktOGUyYS0z MGZmLWE0ZTAtYTkxNjY5ZjMwNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK0nIYDt/PKTvbc0TTDMmQUc64nkCBr39c78IRENz3qktjqiXjChIo0 6j5gp5wQDXmCnU+JdcmS8N3fCidhAOogCDmDinjeCCWDw3ZFQvRD44HCkaqgV3QY y6v4IRBk2lrLN97nvVPTN7XUVfwxSQaBnZj9epBmwSdweqfTKrtSKdfmA5pgwIfU YusGT5TYDXKRlicSujUOxuDPi1XKPKprmai1Hp28N3F65PFSg2HbwVBSP6kA2GwH MXoHtrautBQhypSb+5H/BSLDYhZ2HHnnkZeoZfQ4LC6q1XhHNOiQfbEUoJZo+cEh z99jzpZXfhKdEX+mNVtG7AA7MfvW458= -----END CERTIFICATE-----Generated at Sun Aug 24 03:52:20 2025 by rpki-client