$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa File: d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa (raw, json) Hash identifier: cmsVTsKwq9mSWGtihyBQzsr+HINVlOzJDDxlo2mkFf4= Subject key identifier: 62:B2:FE:DF:EE:B3:A7:4C:65:73:17:77:A8:AD:58:6A:77:0F:BB:DD Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584B76F2412FECE585ADBA5C0180 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 398156 IP address blocks: 158.120.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:41:2f:ec:e5:85:ad:ba:5c:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=27c277ef-03d0-4ca5-8212-7d1bb2cf2cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:64:4b:3d:aa:39:f2:34:e1:8e:64:58:60:99: d1:6e:ef:9c:bf:45:fe:39:74:69:3a:9f:55:2d:22: 32:e1:22:38:f4:24:38:7e:9c:77:2b:ad:c8:2d:86: 51:f0:9e:ba:24:13:57:45:f5:3f:26:1a:9d:8d:e3: dc:f8:6a:85:7b:57:fd:1b:5a:18:bf:a7:a9:72:21: 93:2b:94:86:07:bc:50:04:6d:18:0a:dd:ee:af:c0: 13:5f:f4:59:85:eb:8e:74:46:a5:56:e0:a8:09:62: d2:36:fd:0c:8a:26:17:00:33:8e:7a:66:d2:6f:3f: 59:b8:c6:0b:f9:23:62:b0:55:4a:c0:16:b4:77:cc: a2:8f:20:06:ef:61:6d:63:43:b5:f9:45:c3:9f:c4: 3a:bd:8d:bd:16:47:7b:02:d2:79:82:c1:42:e0:dc: 1b:a3:b4:ea:c6:8e:df:c4:21:c2:63:05:a3:d8:e3: da:ee:97:77:39:f5:ba:25:7b:06:62:af:e3:4f:bd: 67:5e:ce:9b:28:1e:67:8a:59:c9:8e:ba:89:d6:aa: c7:8c:5e:62:ab:24:68:c1:f1:1c:47:c4:4c:99:f6: c4:cb:f6:e8:aa:6a:9d:ca:6a:59:4c:60:f4:97:c1: 55:99:29:98:18:c7:67:f9:6d:4f:00:46:b3:d2:90: e8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B2:FE:DF:EE:B3:A7:4C:65:73:17:77:A8:AD:58:6A:77:0F:BB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:74:c6:69:b4:4a:f7:ef:5b:8c:fd:db:53:c2:8f:1a:ab:f2: 98:96:9c:a3:9c:5a:71:7e:d1:9c:9a:5d:38:56:5f:59:e9:70: d5:90:87:28:79:94:24:38:11:d4:b3:a1:bd:f0:bb:04:48:4c: a9:fe:d8:67:bf:a0:13:38:d5:18:5e:7f:91:be:3b:85:cc:e1: 55:58:e9:54:2b:3a:09:68:b0:6c:8e:6a:d1:0e:d2:f4:03:a9: 37:2c:44:ee:9d:da:9a:4a:56:fb:33:50:62:b6:04:54:22:19: 6e:d8:66:60:c6:04:84:0b:9c:1a:31:18:fd:de:91:0f:25:04: 8d:84:bb:1a:0e:aa:0f:66:fb:0b:26:e3:b2:2e:9a:bd:ec:9c: ac:60:d5:39:6a:ed:4a:73:80:b7:96:cd:e9:27:d3:1f:f1:6e: db:cb:8e:1a:9e:43:b0:d1:9c:c7:87:37:3d:9e:18:fe:c5:42: 0f:a3:58:9c:ca:e0:82:56:52:c0:18:a1:8c:ea:a4:8e:cb:84: ec:0d:81:48:c2:24:bf:a9:04:6f:9e:c7:60:6e:1b:e4:1c:0a: 65:a7:ee:7c:a2:c7:6b:f7:58:63:1c:ba:4c:ec:97:c2:14:a9: 70:74:f7:a5:ba:39:01:70:76:1f:70:d0:5e:76:0e:84:08:99: ae:a1:b7:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kEv7OWFrbpcAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjdjMjc3ZWYtMDNkMC00Y2E1LTgyMTItN2QxYmIyY2YyY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GRLPao58jThjmRYYJnRbu+cv0X+OXRpOp9V LSIy4SI49CQ4fpx3K63ILYZR8J66JBNXRfU/JhqdjePc+GqFe1f9G1oYv6epciGT K5SGB7xQBG0YCt3ur8ATX/RZheuOdEalVuCoCWLSNv0MiiYXADOOembSbz9ZuMYL +SNisFVKwBa0d8yijyAG72FtY0O1+UXDn8Q6vY29Fkd7AtJ5gsFC4Nwbo7Tqxo7f xCHCYwWj2OPa7pd3OfW6JXsGYq/jT71nXs6bKB5nilnJjrqJ1qrHjF5iqyRowfEc R8RMmfbEy/boqmqdympZTGD0l8FVmSmYGMdn+W1PAEaz0pDolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKy/t/us6dMZXMXd6itWGp3D7vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZDIzZjliMmYtODJiNC0z OWU4LWFiNzEtMWRhNjdhZTFjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ0xmm0SvfvW4z921PCjxqr8piWnKOcWnF+0ZyaXThWX1npcNWQhyh5 lCQ4EdSzob3wuwRITKn+2Ge/oBM41Rhef5G+O4XM4VVY6VQrOglosGyOatEO0vQD qTcsRO6d2ppKVvszUGK2BFQiGW7YZmDGBIQLnBoxGP3ekQ8lBI2EuxoOqg9m+wsm 47Iumr3snKxg1Tlq7UpzgLeWzekn0x/xbtvLjhqeQ7DRnMeHNz2eGP7FQg+jWJzK 4IJWUsAYoYzqpI7LhOwNgUjCJL+pBG+ex2BuG+QcCmWn7nyix2v3WGMcukzsl8IU qXB096W6OQFwdh9w0F52DoQIma6ht6c= -----END CERTIFICATE-----Generated at Fri Oct 10 21:08:51 2025 by rpki-client