$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa File: 4d4cab64-b689-363d-b0b6-8347b7102bee.roa (raw, json) Hash identifier: ECVDgNiw7BPbOJKG4cWDC2hID3mPRQ1/TmrO1KaONZg= Subject key identifier: 38:75:A3:9D:E2:B1:26:CC:54:90:40:32:B5:D4:89:FB:82:8A:10:22 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584F093CF324A2F53228F3442B00 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 398156 IP address blocks: 158.120.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f3:24:a2:f5:32:28:f3:44:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=1ee14af3-ef21-458d-bc23-31e87120e361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dd:b8:65:14:41:f3:3b:37:84:41:8b:3e:0a: 2d:3e:cd:b0:f5:f1:d7:d8:00:68:55:5d:1f:c8:fd: 30:2d:cf:f0:62:f6:b0:2f:d0:10:b8:18:9b:2b:2a: 9d:44:04:84:67:e8:00:dc:eb:89:6a:e0:fd:8d:0a: fe:94:d8:0d:00:4e:85:16:cb:db:b2:10:10:a9:da: c3:e0:32:e1:b7:8b:cf:da:d8:3b:62:26:78:ea:5f: 8f:e0:82:f0:1c:98:18:e6:19:18:f2:e6:31:dd:30: 12:d8:a9:1d:e5:c0:95:43:68:3d:0a:78:20:49:48: c3:d2:c2:7b:dc:02:99:09:40:02:e5:e3:32:0e:f0: 2f:56:9c:a8:a4:11:d8:45:ff:ea:32:c2:69:61:d3: d8:60:1d:af:95:32:8c:83:14:56:bf:5b:e2:e1:89: c8:35:c5:e1:ca:c8:9d:bf:20:34:cb:a6:0a:b6:02: 90:42:52:70:ce:c8:7e:7a:7d:f6:59:b3:8e:0d:4a: fd:83:48:a7:0d:87:ff:39:d5:ee:ad:5f:8e:41:44: 78:1a:b4:4f:dd:f1:ff:b6:47:11:13:b7:43:9f:d8: da:28:1c:a6:c0:11:c2:34:3e:ba:04:65:a1:b3:f9: 6c:0c:6f:9e:68:01:a0:09:a2:4e:49:cd:3b:89:35: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:75:A3:9D:E2:B1:26:CC:54:90:40:32:B5:D4:89:FB:82:8A:10:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/4d4cab64-b689-363d-b0b6-8347b7102bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a6:d7:02:75:c3:6b:b3:e7:b0:b6:d8:ad:e9:25:de:a2:02: e8:ef:2e:7b:b4:8f:c8:e6:1a:46:e3:2d:5f:8b:d6:a0:b7:eb: 1e:f2:7e:41:88:25:40:0c:3c:62:0f:41:6d:33:38:7e:62:8b: d1:1f:3f:29:95:23:9e:6f:49:3c:0c:c9:81:4c:3b:54:bd:31: 43:e8:49:20:9c:2b:ba:1f:4d:91:6e:89:1e:33:ee:34:c8:b8: 0f:54:3f:f7:aa:3b:e8:01:d5:01:48:1b:34:0b:a2:39:16:fa: 47:3b:0a:65:9a:86:3e:9c:12:a0:20:bb:6f:05:33:d8:d7:66: 2e:7a:d9:fc:fc:cf:0b:a3:8c:7e:92:77:9e:4d:1a:cb:f7:c5: b2:76:ef:ca:62:13:93:13:5f:31:81:63:e0:a5:a6:61:ed:c3: c6:e4:0d:51:b0:d7:64:7c:80:fd:0b:92:f5:9a:bc:5e:00:4e: e4:a9:10:8c:d4:6a:24:a3:81:55:40:9c:6f:c7:bd:39:b5:ff: 19:b4:f8:44:68:bb:bc:3a:0a:55:a3:90:e0:a4:91:89:68:2b: 8d:67:85:37:a1:10:bb:10:74:5f:47:9e:b0:fa:b7:95:ff:d1: 7b:73:a5:33:05:da:df:ce:b0:2b:79:2b:69:28:e2:d4:fd:fb: 3c:4a:fa:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPMkovUyKPNEKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MWVlMTRhZjMtZWYyMS00NThkLWJjMjMtMzFlODcxMjBlMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd24ZRRB8zs3hEGLPgotPs2w9fHX2ABoVV0f yP0wLc/wYvawL9AQuBibKyqdRASEZ+gA3OuJauD9jQr+lNgNAE6FFsvbshAQqdrD 4DLht4vP2tg7YiZ46l+P4ILwHJgY5hkY8uYx3TAS2Kkd5cCVQ2g9CnggSUjD0sJ7 3AKZCUAC5eMyDvAvVpyopBHYRf/qMsJpYdPYYB2vlTKMgxRWv1vi4YnINcXhysid vyA0y6YKtgKQQlJwzsh+en32WbOODUr9g0inDYf/OdXurV+OQUR4GrRP3fH/tkcR E7dDn9jaKBymwBHCND66BGWhs/lsDG+eaAGgCaJOSc07iTWIRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh1o53isSbMVJBAMrXUifuCihAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNGQ0Y2FiNjQtYjY4OS0z NjNkLWIwYjYtODM0N2I3MTAyYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOm1wJ1w2uz57C22K3pJd6iAujvLnu0j8jmGkbjLV+L1qC36x7yfkGI JUAMPGIPQW0zOH5ii9EfPymVI55vSTwMyYFMO1S9MUPoSSCcK7ofTZFuiR4z7jTI uA9UP/eqO+gB1QFIGzQLojkW+kc7CmWahj6cEqAgu28FM9jXZi562fz8zwujjH6S d55NGsv3xbJ278piE5MTXzGBY+ClpmHtw8bkDVGw12R8gP0LkvWavF4ATuSpEIzU aiSjgVVAnG/HvTm1/xm0+ERou7w6ClWjkOCkkYloK41nhTehELsQdF9HnrD6t5X/ 0XtzpTMF2t/OsCt5K2ko4tT9+zxK+ks= -----END CERTIFICATE-----Generated at Sun Sep 13 10:19:26 2026 by rpki-client