$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa File: 2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa (raw, json) Hash identifier: w2yP8WxlT/O7JHgDMxEAPeit/Hbeo21Pkjc2gMsSM04= Subject key identifier: 4E:29:CF:EE:23:2C:D3:29:B2:87:9F:FC:DC:71:EA:8B:BC:78:6E:BE Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584B76F25295DC252D9C59B7A600 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 398156 IP address blocks: 158.120.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:52:95:dc:25:2d:9c:59:b7:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1317e5f4-84a0-4071-9981-2306bcf09258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:24:1a:89:b2:f7:3f:50:64:dc:79:68:e2: 6f:a6:e7:ed:7a:76:ed:8a:c4:7f:70:21:08:5d:e3: 44:47:56:4e:b1:e7:c0:23:74:77:16:dd:a9:54:99: 11:2a:36:46:2a:92:7c:00:00:5c:1f:b7:31:3b:63: 72:aa:d1:cb:ab:9e:20:d9:ea:38:b5:a6:92:05:79: 81:7c:2f:ed:eb:46:49:df:12:5d:cd:e6:af:a7:75: b6:ac:20:a6:77:9d:c0:a3:ad:fc:10:0c:bb:a5:a6: c0:a4:b0:f0:a9:23:5d:de:5d:11:63:89:6c:03:6c: 37:cc:0b:0f:a8:40:7f:de:89:5e:10:e5:32:ab:1d: eb:9e:4b:f8:f2:b0:a1:d5:40:91:cd:fb:95:c9:7a: 1b:cd:3e:85:1f:ba:6b:77:ba:65:16:85:a5:92:2c: fd:b2:e8:b5:58:cb:67:3c:9e:96:88:fc:e9:c2:30: 74:b4:62:90:bb:27:a5:bf:4e:19:d4:76:b5:72:95: ba:df:f2:03:e6:fc:46:98:fb:df:a2:1c:92:37:8c: f7:56:9a:f4:7e:54:9d:03:3f:96:a9:2c:bc:59:4c: fa:03:14:f5:ea:22:85:5b:b4:97:e1:c4:e1:ec:80: f6:33:ac:b2:b1:98:98:9d:6f:e3:20:da:33:2e:39: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:CF:EE:23:2C:D3:29:B2:87:9F:FC:DC:71:EA:8B:BC:78:6E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c1:a4:de:a9:37:04:f5:25:8e:b9:bd:df:af:a2:75:b4:16: 7a:a8:be:8b:c4:8c:e0:4c:04:c9:eb:e5:fb:7b:fd:8d:a7:4a: 6a:ea:17:1a:f2:58:31:25:51:74:bd:a2:af:ed:6b:87:7b:06: 1e:86:82:4d:21:44:ab:92:d3:db:d6:3e:7b:fb:0e:31:71:9f: 6f:81:43:2f:18:bd:f5:e1:45:0c:f2:c8:3f:c7:93:1f:99:67: 2b:64:2e:1e:41:6a:ce:cd:94:e6:40:62:6b:14:70:f4:97:c5: ba:e1:47:65:9f:b6:ea:d6:7d:21:67:c4:2f:60:66:3f:d9:4b: 01:7e:4a:3a:87:d7:45:72:8e:2a:08:ce:e6:80:a3:42:e5:df: bc:1d:32:0e:6a:22:65:95:1e:bb:c4:65:20:49:6c:3c:af:11: 95:8b:df:7c:74:73:1e:f7:70:99:f9:7c:e6:96:4a:2e:60:0d: 9b:56:1f:d5:31:5e:27:4d:14:d4:ef:e7:54:7e:66:93:85:c2: 04:48:e7:61:2e:c5:41:16:c1:7d:41:43:7a:5f:0c:e3:94:8b: eb:81:3e:83:7a:08:26:32:58:42:a0:f0:f8:0f:65:07:b6:47: f4:d4:b1:c4:39:a1:99:b4:c5:4a:6d:70:70:da:1b:7b:1c:15: c5:ef:d9:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lKV3CUtnFm3pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTMxN2U1ZjQtODRhMC00MDcxLTk5ODEtMjMwNmJjZjA5MjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkwkGomy9z9QZNx5aOJvpuftenbtisR/cCEI XeNER1ZOsefAI3R3Ft2pVJkRKjZGKpJ8AABcH7cxO2NyqtHLq54g2eo4taaSBXmB fC/t60ZJ3xJdzeavp3W2rCCmd53Ao638EAy7pabApLDwqSNd3l0RY4lsA2w3zAsP qEB/3oleEOUyqx3rnkv48rCh1UCRzfuVyXobzT6FH7prd7plFoWlkiz9sui1WMtn PJ6WiPzpwjB0tGKQuyelv04Z1Ha1cpW63/ID5vxGmPvfohySN4z3Vpr0flSdAz+W qSy8WUz6AxT16iKFW7SX4cTh7ID2M6yysZiYnW/jINozLjlYxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4pz+4jLNMpsoef/Nxx6ou8eG6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMmQ3ZmU2N2YtMzczMi0z YzExLWIzZTAtZjNmMjkzOWJlMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3BpN6pNwT1JY65vd+vonW0FnqovovEjOBMBMnr5ft7/Y2nSmrqFxry WDElUXS9oq/ta4d7Bh6Ggk0hRKuS09vWPnv7DjFxn2+BQy8YvfXhRQzyyD/Hkx+Z ZytkLh5Bas7NlOZAYmsUcPSXxbrhR2WfturWfSFnxC9gZj/ZSwF+SjqH10VyjioI zuaAo0Ll37wdMg5qImWVHrvEZSBJbDyvEZWL33x0cx73cJn5fOaWSi5gDZtWH9Ux XidNFNTv51R+ZpOFwgRI52EuxUEWwX1BQ3pfDOOUi+uBPoN6CCYyWEKg8PgPZQe2 R/TUscQ5oZm0xUptcHDaG3scFcXv2c0= -----END CERTIFICATE-----Generated at Fri Oct 10 21:12:01 2025 by rpki-client