$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa File: ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa (raw, json) Hash identifier: Sgp4uoYlG0HzpfmjhprmLGoST3/hDL2QvX6LUBTMq6g= Subject key identifier: 31:DB:AB:BE:67:D6:D5:25:FD:C2:9D:66:C0:76:09:C0:AC:C2:86:1C Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584B76F28764BDCBA91D5E0E3D40 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 398156 IP address blocks: 158.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:87:64:bd:cb:a9:1d:5e:0e:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=811beeb6-4618-474b-b889-6b8e01d8b555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:6c:66:c7:a5:a3:c2:f7:76:5d:3f:b7:c1: 27:f0:39:8c:87:c7:32:e5:e8:6b:b0:81:e7:e8:1c: 73:17:41:d5:27:a2:9b:ba:ae:aa:35:33:9a:13:07: 78:9c:c7:14:5d:e0:ac:06:8e:a9:da:8c:91:5e:bd: 1b:55:32:54:1f:a5:49:6f:64:09:15:c4:9d:ff:e4: 82:77:61:d9:c4:9b:9a:da:7b:eb:ee:ed:56:f2:f0: 33:25:93:d3:78:f8:44:a4:90:ab:ce:d6:d6:8e:6d: 11:0d:49:d7:82:83:b4:51:f3:4b:8a:70:a0:78:47: 15:21:c6:6a:54:3a:cc:b7:b4:e2:56:23:60:e7:8a: 0b:df:61:a7:dc:c5:7b:0c:83:36:7c:23:5d:6d:bf: d4:28:fb:a3:1c:ad:6c:7e:d3:4b:33:7d:3c:d7:63: 2a:1f:3b:c3:43:e8:46:05:49:6c:a9:b4:44:13:61: 33:35:3a:04:33:db:2c:85:6f:34:ad:dd:48:7b:9c: 7e:df:3e:a1:5f:97:4d:ad:28:62:c0:7f:d9:e7:6c: 42:ce:0a:44:f6:ea:63:de:88:37:d9:23:1e:7a:de: db:f8:af:80:f2:92:b7:e1:64:ea:12:21:7b:3d:2d: a7:96:8d:0b:5d:d5:9a:3a:89:b3:40:f2:de:b6:a3: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DB:AB:BE:67:D6:D5:25:FD:C2:9D:66:C0:76:09:C0:AC:C2:86:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9a:88:9a:92:85:93:42:38:a6:5c:55:43:a5:d8:a4:d3:e0: 2d:a7:82:ec:b6:41:83:fb:12:0f:71:ef:64:16:15:4f:7c:8d: 7a:dc:72:76:39:6f:de:8e:66:f2:16:be:8a:a6:92:7f:00:e0: b0:08:46:3c:b2:ad:77:33:9a:c0:45:c6:3e:d5:87:1f:c5:3e: 6a:3c:75:45:da:d5:9d:72:6a:d2:74:a1:3d:a7:f2:66:c9:c4: fa:46:5b:ab:7c:cb:55:ef:33:37:16:47:62:51:bb:01:5b:00: eb:8d:57:52:8b:60:a4:f0:b4:4b:30:96:13:b9:f5:af:0f:6c: 49:8e:29:8c:58:81:4b:c4:b3:e2:ce:ac:39:b9:85:37:c5:3c: c6:e8:c6:94:ab:91:22:63:87:e9:09:1e:82:d3:36:5a:1f:74: c4:5e:f2:de:3a:c4:32:6c:97:5c:f5:44:22:6a:34:01:5c:dc: 4d:86:a1:c7:12:14:86:26:a5:b5:c7:09:99:66:3e:3d:16:e2: 4a:a8:2f:77:3e:31:6f:a6:f2:7d:f7:7f:c6:f4:cc:f1:3d:a4: 3c:ef:ae:6a:1c:73:c2:68:d3:bf:cd:ff:ad:53:34:85:8e:78: 2c:58:0b:e8:87:46:78:7a:8f:23:4c:97:b8:5b:4b:91:cc:04: 62:9f:2b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28odkvcupHV4OPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODExYmVlYjYtNDYxOC00NzRiLWI4ODktNmI4ZTAxZDhiNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi1sZselo8L3dl0/t8En8DmMh8cy5ehrsIHn 6BxzF0HVJ6Kbuq6qNTOaEwd4nMcUXeCsBo6p2oyRXr0bVTJUH6VJb2QJFcSd/+SC d2HZxJua2nvr7u1W8vAzJZPTePhEpJCrztbWjm0RDUnXgoO0UfNLinCgeEcVIcZq VDrMt7TiViNg54oL32Gn3MV7DIM2fCNdbb/UKPujHK1sftNLM30812MqHzvDQ+hG BUlsqbREE2EzNToEM9sshW80rd1Ie5x+3z6hX5dNrShiwH/Z52xCzgpE9upj3og3 2SMeet7b+K+A8pK34WTqEiF7PS2nlo0LXdWaOomzQPLetqNkNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHbq75n1tUl/cKdZsB2CcCswoYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvY2E4MTUwODctMDYyMC0z YjJlLTljZTctZmViYzc3YTVkNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOaiJqShZNCOKZcVUOl2KTT4C2nguy2QYP7Eg9x72QWFU98jXrccnY5 b96OZvIWvoqmkn8A4LAIRjyyrXczmsBFxj7Vhx/FPmo8dUXa1Z1yatJ0oT2n8mbJ xPpGW6t8y1XvMzcWR2JRuwFbAOuNV1KLYKTwtEswlhO59a8PbEmOKYxYgUvEs+LO rDm5hTfFPMboxpSrkSJjh+kJHoLTNlofdMRe8t46xDJsl1z1RCJqNAFc3E2GoccS FIYmpbXHCZlmPj0W4kqoL3c+MW+m8n33f8b0zPE9pDzvrmocc8Jo07/N/61TNIWO eCxYC+iHRnh6jyNMl7hbS5HMBGKfKxk= -----END CERTIFICATE-----Generated at Fri Oct 10 21:10:54 2025 by rpki-client