$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3fd47344-c9cd-3570-8f8d-38029d6d41e3.roa File: 3fd47344-c9cd-3570-8f8d-38029d6d41e3.roa (raw, json) Hash identifier: LFpC9imbHf+jxEb4dJhr1IZyGBBbYnEE3wApvyvOFhw= Subject key identifier: 22:0D:A2:9A:39:E6:81:AA:BC:B1:DC:1E:DF:04:23:40:04:35:0E:12 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584FAB28B06D7D73BED290B6C300 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3fd47344-c9cd-3570-8f8d-38029d6d41e3.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 398156 IP address blocks: 158.120.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:b0:6d:7d:73:be:d2:90:b6:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=c3e117ae-76e7-4aec-a958-5989a23e2380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:00:98:66:3a:81:58:9c:af:08:6f:b6:8a: b6:03:e3:45:3b:6e:8e:0e:2d:4d:74:da:40:bb:5a: 69:c0:84:21:e1:3e:0e:5a:74:a3:e7:7d:44:08:e3: ed:c5:d7:e8:dc:06:ee:42:49:2f:2c:7a:f5:ad:13: 73:30:8e:ab:e4:85:9c:6a:9c:28:4f:03:c8:a6:ce: 74:ab:70:38:02:4d:44:64:9a:e2:ef:64:11:53:fc: 7c:d7:d5:4d:9e:19:a6:cd:56:8d:ae:80:dc:b9:0f: 79:da:8f:33:22:31:7f:53:51:00:a6:17:c1:84:d2: 21:9e:49:4f:59:81:17:4e:59:76:a5:8e:d9:00:fa: bb:e6:ca:10:ad:44:29:0d:ac:20:80:29:ce:f5:68: 72:f6:d4:a2:6c:35:eb:3b:73:7d:1b:7f:f4:33:50: 94:eb:91:a1:a6:2f:e8:27:db:84:02:79:5a:4d:56: b0:98:b8:80:92:2c:24:ae:34:81:86:35:2a:c9:e8: be:ee:61:6b:c7:36:f4:2e:54:06:a0:77:96:4a:1e: 3e:c8:29:75:f2:96:7c:8f:61:c9:89:2b:82:d4:e7: 35:7d:f1:e6:d3:0f:27:35:ee:23:04:30:cd:e9:00: d5:26:37:d9:df:e0:81:d9:7d:0b:d8:fb:48:b8:dd: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0D:A2:9A:39:E6:81:AA:BC:B1:DC:1E:DF:04:23:40:04:35:0E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3fd47344-c9cd-3570-8f8d-38029d6d41e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a6:3b:2a:ba:69:97:be:20:6d:87:71:4d:30:ef:9d:1a:51: 7c:88:1e:63:f0:d3:96:40:12:23:65:72:fa:2e:f0:42:49:e0: 9e:a2:e1:82:80:3e:7c:91:e9:36:f9:a6:13:83:bc:1a:a7:57: 3d:9b:88:d0:28:52:ba:ea:59:0a:46:b4:95:1c:d1:72:1b:15: 9a:73:c5:14:1f:07:af:30:4f:2a:50:cb:c7:7f:31:f0:64:eb: 3f:36:6c:d6:30:2f:ab:20:d4:47:14:51:2a:b5:a9:80:d7:cd: 5c:cc:cf:af:f2:7f:a0:d4:8d:1b:06:c5:76:2e:28:db:c5:f7: 2d:6e:d9:74:07:28:9a:15:3a:f8:40:b4:f8:fb:d0:58:b5:d3: d5:04:5e:07:a8:a1:24:8e:c0:93:89:f1:ea:6c:78:b3:6d:cb: 54:4b:cc:c9:32:3d:dd:b7:aa:65:67:e5:bb:50:5b:80:a9:2d: c7:ba:05:6f:52:4d:26:66:b5:bf:04:d4:57:20:6f:29:5d:94: 94:2f:9b:08:03:4c:d3:2b:2d:b8:9f:79:a3:cc:96:c8:b1:9b: 03:82:92:86:21:a5:75:01:38:93:45:d3:eb:e4:d8:fd:be:cd: 41:da:c3:77:49:e7:48:24:fc:ec:26:6a:69:60:17:62:11:08: ba:84:ce:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKLBtfXO+0pC2wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk YzNlMTE3YWUtNzZlNy00YWVjLWE5NTgtNTk4OWEyM2UyMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMAAmGY6gVicrwhvtoq2A+NFO26ODi1NdNpA u1ppwIQh4T4OWnSj531ECOPtxdfo3AbuQkkvLHr1rRNzMI6r5IWcapwoTwPIps50 q3A4Ak1EZJri72QRU/x819VNnhmmzVaNroDcuQ952o8zIjF/U1EAphfBhNIhnklP WYEXTll2pY7ZAPq75soQrUQpDawggCnO9Why9tSibDXrO3N9G3/0M1CU65Ghpi/o J9uEAnlaTVawmLiAkiwkrjSBhjUqyei+7mFrxzb0LlQGoHeWSh4+yCl18pZ8j2HJ iSuC1Oc1ffHm0w8nNe4jBDDN6QDVJjfZ3+CB2X0L2PtIuN1jjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCINopo55oGqvLHcHt8EI0AENQ4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvM2ZkNDczNDQtYzljZC0z NTcwLThmOGQtMzgwMjlkNmQ0MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnnjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2mOyq6aZe+IG2HcU0w750aUXyIHmPw05ZAEiNlcvou8EJJ4J6i4YKA PnyR6Tb5phODvBqnVz2biNAoUrrqWQpGtJUc0XIbFZpzxRQfB68wTypQy8d/MfBk 6z82bNYwL6sg1EcUUSq1qYDXzVzMz6/yf6DUjRsGxXYuKNvF9y1u2XQHKJoVOvhA tPj70Fi109UEXgeooSSOwJOJ8epseLNty1RLzMkyPd23qmVn5btQW4CpLce6BW9S TSZmtb8E1FcgbyldlJQvmwgDTNMrLbifeaPMlsixmwOCkoYhpXUBOJNF0+vk2P2+ zUHaw3dJ50gk/OwmamlgF2IRCLqEznw= -----END CERTIFICATE-----Generated at Tue Nov 3 06:36:01 2026 by rpki-client