$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9771eade-2840-3a81-a8a9-f6503e180310.roa File: 9771eade-2840-3a81-a8a9-f6503e180310.roa (raw, json) Hash identifier: BpNZo1ZPzxrZDrXVkmAv/8R6C2I0RhqIFrWoWST4UNA= Subject key identifier: 3B:5C:4E:B1:04:D4:AE:3C:49:5D:BE:B7:01:78:02:6A:B0:C3:CD:ED Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584B76F23B16276BF8486CA8D000 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9771eade-2840-3a81-a8a9-f6503e180310.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 398156 IP address blocks: 158.120.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:3b:16:27:6b:f8:48:6c:a8:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=3a16571f-4a65-4a83-9ecc-1b1b7c8db593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:ef:b5:6d:11:0a:8f:b8:98:4c:d9:e8:c5: 71:57:0f:8c:09:58:65:43:a0:91:c0:28:71:5d:c0: d2:2a:4c:c7:3e:29:d1:72:86:78:df:f6:a4:68:da: 5e:43:66:c7:f6:ac:1f:d9:9b:04:e4:3d:4c:b0:f5: 89:3a:2a:13:ea:4b:72:f5:ee:e5:b3:6e:d4:d4:c3: 97:92:1e:b1:a7:36:1b:b7:ed:67:db:6d:ac:97:40: b7:26:4d:ab:dc:3e:c7:59:38:04:65:fd:ca:79:ed: e9:da:6f:24:bf:e2:59:26:6b:7c:eb:45:55:fa:01: 45:5c:fb:70:01:ba:a6:24:6c:a7:2e:27:0d:bc:c3: 29:41:96:42:a3:71:5c:5b:33:fb:a6:c5:12:1c:dd: 7d:45:24:69:4d:4b:37:bb:3d:c0:3c:32:a0:bd:44: f8:0e:a0:92:75:96:c8:d5:af:8e:73:5d:3a:b9:c7: 04:18:72:8d:da:b2:20:9c:46:fb:f9:92:8e:c7:42: 65:88:63:ce:f4:02:8f:f7:b4:ed:ff:b4:4d:a2:a4: 2f:90:bf:c3:4f:32:50:6f:23:dc:59:b1:25:e3:ea: c8:8a:58:51:79:92:c1:8f:5d:ed:5b:bc:83:da:63: 39:b7:c6:74:a9:ce:1b:0a:3c:e0:17:77:d6:b7:24: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:4E:B1:04:D4:AE:3C:49:5D:BE:B7:01:78:02:6A:B0:C3:CD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9771eade-2840-3a81-a8a9-f6503e180310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:6a:ec:46:09:a3:bb:54:2c:ad:e7:46:bb:19:9c:19:09:8a: d8:b5:8c:10:8f:91:7c:c7:59:dc:23:a3:2a:32:64:3b:b5:67: c5:7c:1e:01:17:a6:7d:25:01:80:cf:ed:e2:82:56:ae:7c:ed: b8:37:ff:e6:12:cb:fd:c4:04:a0:13:ca:57:1c:7a:c4:a8:04: 08:9c:49:0f:46:ef:6e:e7:98:31:67:82:42:d5:ce:96:3e:dc: 73:27:7e:89:fe:75:5d:95:88:4d:ad:0d:70:e7:b3:a7:08:96: b6:3d:6c:4a:80:f8:a3:0d:f4:46:a6:60:7e:e8:2e:db:12:97: a6:7e:1e:67:94:ac:82:44:01:60:2c:96:64:e2:0d:6b:bd:87: 3d:1c:3c:27:20:e4:6c:a8:b6:8c:ea:69:64:57:aa:54:91:cd: 40:21:c2:93:64:40:59:ca:11:f0:64:ec:6a:5f:ea:a0:c6:f8: 49:a9:c3:d4:29:30:a2:f7:f1:13:52:b1:03:3f:2e:dd:8d:ed: 9a:67:0a:5d:82:5e:ee:a7:a5:9c:2b:29:fb:50:2c:7a:44:28: dc:a5:96:2f:85:4a:c4:08:0c:df:f6:ed:70:c8:58:aa:87:49: d6:06:f4:79:d9:1b:1b:24:46:44:1e:44:9d:a7:c6:90:30:05: 11:27:47:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jsWJ2v4SGyo0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2ExNjU3MWYtNGE2NS00YTgzLTllY2MtMWIxYjdjOGRiNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9vvtW0RCo+4mEzZ6MVxVw+MCVhlQ6CRwChx XcDSKkzHPinRcoZ43/akaNpeQ2bH9qwf2ZsE5D1MsPWJOioT6kty9e7ls27U1MOX kh6xpzYbt+1n222sl0C3Jk2r3D7HWTgEZf3Kee3p2m8kv+JZJmt860VV+gFFXPtw AbqmJGynLicNvMMpQZZCo3FcWzP7psUSHN19RSRpTUs3uz3APDKgvUT4DqCSdZbI 1a+Oc106uccEGHKN2rIgnEb7+ZKOx0JliGPO9AKP97Tt/7RNoqQvkL/DTzJQbyPc WbEl4+rIilhReZLBj13tW7yD2mM5t8Z0qc4bCjzgF3fWtyTRhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtcTrEE1K48SV2+twF4Amqww83tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvOTc3MWVhZGUtMjg0MC0z YTgxLWE4YTktZjY1MDNlMTgwMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApq7EYJo7tULK3nRrsZnBkJiti1jBCPkXzHWdwjoyoyZDu1Z8V8HgEX pn0lAYDP7eKCVq587bg3/+YSy/3EBKATylccesSoBAicSQ9G727nmDFngkLVzpY+ 3HMnfon+dV2ViE2tDXDns6cIlrY9bEqA+KMN9EamYH7oLtsSl6Z+HmeUrIJEAWAs lmTiDWu9hz0cPCcg5GyotozqaWRXqlSRzUAhwpNkQFnKEfBk7Gpf6qDG+Empw9Qp MKL38RNSsQM/Lt2N7ZpnCl2CXu6npZwrKftQLHpEKNylli+FSsQIDN/27XDIWKqH SdYG9HnZGxskRkQeRJ2nxpAwBREnRzI= -----END CERTIFICATE-----Generated at Fri Oct 10 21:13:12 2025 by rpki-client