$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa File: 68c230d0-a323-356a-a12c-934c81d3da7a.roa (raw, json) Hash identifier: uOc9FQuUT6fj9tOQotY7rFLgT29jWoXZ3dm8WVAY91g= Subject key identifier: 08:0C:E6:CD:CC:06:A1:02:A1:04:7E:F1:4A:2E:21:76:23:0C:72:86 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584B76F251793D930CB7299E2200 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 398156 IP address blocks: 158.120.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:51:79:3d:93:0c:b7:29:9e:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2a993224-b7c9-4342-bc13-514e41a58d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:89:86:c5:ea:cb:55:d0:3a:ff:fd:5f:6d: 91:16:96:95:4d:7e:1d:b1:85:a1:82:ce:0b:46:95: 4e:7f:3c:0d:ba:c6:5c:f1:b5:1a:e8:b1:95:c4:8a: a3:ce:73:24:b5:1a:b3:b1:c6:69:bc:29:bb:3f:e2: 2b:ce:a0:4e:11:9c:49:19:41:00:ac:65:cb:e5:f2: 14:72:c5:15:09:d9:70:15:00:28:2c:00:d7:a3:bf: 07:df:e7:39:fd:e9:7f:59:c5:5a:97:38:20:a5:48: ef:91:d3:12:44:f0:63:0d:ce:d4:ae:91:00:fb:99: 24:8e:c6:e2:d6:e3:82:e7:76:75:70:fb:cb:3c:56: e5:34:81:fd:1d:8d:4c:16:e9:2f:e1:e9:93:a7:80: 6b:f5:76:e5:59:cd:3a:41:04:e9:85:ec:a3:e8:92: dc:4f:e5:fe:69:0b:30:60:b5:7e:7b:57:98:d5:03: f6:3c:a2:90:4f:e8:8c:ac:5b:64:2a:bb:53:e5:1a: ad:ee:e1:50:97:27:f4:31:16:cd:29:f6:b7:d3:2b: b5:43:89:1a:e1:4a:df:90:39:35:39:c3:d3:2a:2e: e1:7b:d5:f8:b9:2b:fe:63:11:56:03:a9:8a:bd:13: 37:14:66:6d:ab:44:5d:5d:e9:22:d3:bd:b3:ff:0b: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0C:E6:CD:CC:06:A1:02:A1:04:7E:F1:4A:2E:21:76:23:0C:72:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/68c230d0-a323-356a-a12c-934c81d3da7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c1:2c:6a:41:b4:a2:0f:18:0b:89:a4:de:6c:07:f3:52:0e: 92:56:55:33:58:e9:54:49:0a:7b:7c:cd:93:2b:c8:16:ec:61: 5a:88:28:42:12:a0:6d:f1:60:54:25:06:0a:17:e2:fe:4e:23: 64:47:da:1c:f8:1a:7a:31:e4:17:f3:05:78:0a:1b:fe:a4:c1: 45:c9:3f:ef:0c:62:7b:6a:b4:6f:ad:f2:68:9c:29:4e:28:92: c3:a9:eb:f4:5d:1b:90:8f:94:6d:85:1b:3c:3a:64:13:55:13: bc:9a:ac:f9:84:a5:10:cc:e3:14:39:43:e7:59:b3:ce:46:0b: 80:96:05:0f:52:1a:57:c6:57:0b:19:31:51:e7:f8:2d:23:a6: a9:a3:6c:d0:7f:9c:7e:28:6b:82:b2:a2:b7:19:0c:ca:ee:9f: fc:fd:5b:b3:d9:e9:da:ef:a8:fe:b3:57:5b:91:e3:04:23:ad: af:cf:74:5b:ae:57:a9:2d:87:89:91:ce:b8:9d:b9:c1:76:f8: 71:57:ca:99:03:06:1d:d9:56:5f:8c:21:5a:49:34:0d:60:4e: 12:2a:d7:9a:e1:df:b9:b1:99:c2:fb:47:2a:95:c3:d6:83:c4: 68:52:e0:f7:01:84:a5:a6:91:1b:1c:a1:f5:41:98:39:49:0d: f1:65:fb:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lF5PZMMtymeIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmE5OTMyMjQtYjdjOS00MzQyLWJjMTMtNTE0ZTQxYTU4ZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzumJhsXqy1XQOv/9X22RFpaVTX4dsYWhgs4L RpVOfzwNusZc8bUa6LGVxIqjznMktRqzscZpvCm7P+IrzqBOEZxJGUEArGXL5fIU csUVCdlwFQAoLADXo78H3+c5/el/WcValzggpUjvkdMSRPBjDc7UrpEA+5kkjsbi 1uOC53Z1cPvLPFblNIH9HY1MFukv4emTp4Br9XblWc06QQTpheyj6JLcT+X+aQsw YLV+e1eY1QP2PKKQT+iMrFtkKrtT5Rqt7uFQlyf0MRbNKfa30yu1Q4ka4UrfkDk1 OcPTKi7he9X4uSv+YxFWA6mKvRM3FGZtq0RdXeki072z/wuH/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgM5s3MBqECoQR+8UouIXYjDHKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNjhjMjMwZDAtYTMyMy0z NTZhLWExMmMtOTM0YzgxZDNkYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvBLGpBtKIPGAuJpN5sB/NSDpJWVTNY6VRJCnt8zZMryBbsYVqIKEIS oG3xYFQlBgoX4v5OI2RH2hz4Gnox5BfzBXgKG/6kwUXJP+8MYntqtG+t8micKU4o ksOp6/RdG5CPlG2FGzw6ZBNVE7yarPmEpRDM4xQ5Q+dZs85GC4CWBQ9SGlfGVwsZ MVHn+C0jpqmjbNB/nH4oa4KyorcZDMrun/z9W7PZ6drvqP6zV1uR4wQjra/PdFuu V6kth4mRzriducF2+HFXypkDBh3ZVl+MIVpJNA1gThIq15rh37mxmcL7RyqVw9aD xGhS4PcBhKWmkRscofVBmDlJDfFl+yU= -----END CERTIFICATE-----Generated at Fri Oct 10 21:10:55 2025 by rpki-client