$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa File: 549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa (raw, json) Hash identifier: lWAarOynPzuXpXksCdnFnf13QHsPrJ+u2OLVThH0jeA= Subject key identifier: 97:63:9F:84:80:A4:34:40:D9:DA:4F:EB:0E:2C:24:31:AF:89:9E:39 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584FAB28B086672C8EC6B2FFD940 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 398156 IP address blocks: 158.120.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:b0:86:67:2c:8e:c6:b2:ff:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=f7e24715-5d1b-456c-9031-22e3bb7ca51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:bf:06:1c:d3:85:dd:af:fe:1e:c5:53:3b: 92:80:fc:82:94:83:98:2a:95:65:f3:3e:30:92:76: 3e:2a:70:9e:ea:6e:6a:5e:a0:6f:89:60:dc:be:b1: f8:c0:c6:6b:b2:48:d6:16:20:96:62:75:4e:4e:13: 4b:4c:71:1f:9e:c0:f7:8c:e4:9e:f2:98:61:63:09: 2f:10:88:4b:0a:1f:b1:b8:1b:b2:85:fa:e8:7c:74: 20:bc:d7:f5:d2:77:e8:82:d0:c6:7f:a1:dc:62:d8: d1:36:02:5e:d5:75:a3:de:17:64:b0:43:16:da:1e: 1f:04:a9:85:3a:d9:e3:9d:74:4d:04:8b:99:f6:1a: 24:29:95:eb:b2:be:70:62:bf:7d:4f:5c:d7:61:f9: ea:82:35:e2:56:65:6c:df:d4:6f:b4:d0:b5:9c:10: 27:c9:bb:4b:44:c0:a4:84:ee:c3:e6:fb:2e:32:73: 2a:ef:9b:c4:5f:01:ad:64:75:c3:2e:25:cb:19:2e: 5b:33:2e:53:80:c4:3b:7e:23:cb:28:19:b7:42:e4: 29:62:9b:09:1b:74:b5:34:63:8e:ea:bf:48:ff:d8: d2:48:e6:3a:9e:8c:ee:80:28:9d:f8:84:94:d5:99: 21:d6:cd:99:1c:c3:2b:b8:19:fa:a7:33:f6:ba:ce: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:9F:84:80:A4:34:40:D9:DA:4F:EB:0E:2C:24:31:AF:89:9E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/549f3e8a-de9f-3e4a-8917-e66c058ad53a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:84:07:08:aa:0c:c6:97:9f:d7:1f:0a:4e:f2:4a:b6:a1:c4: f8:d1:46:94:f3:b8:8b:ce:d9:c2:b5:f1:95:68:2c:0f:8d:8c: 30:f4:1f:8e:c2:8c:81:a6:1b:f5:18:e7:f2:71:eb:7d:88:eb: b8:1d:ee:e3:a6:63:dd:bb:da:38:c8:d9:72:f2:f6:ec:b9:1a: e3:7b:f0:ae:c5:cf:c1:59:82:4c:4c:67:90:3c:cb:21:9e:c8: ce:7d:73:6e:d0:ac:cf:77:26:c8:5a:14:8e:a6:62:73:92:04: f8:76:c6:4e:55:5b:9a:4a:e5:98:6f:ef:2b:1f:e4:86:5a:da: 9c:e4:d3:59:20:e2:bb:41:5a:c6:d9:93:b8:24:ad:ea:84:c6: 7a:ba:6f:e2:d5:4d:95:d4:aa:27:96:6f:6a:3b:6c:2e:23:ab: e2:29:04:0b:80:85:34:44:f8:88:af:03:35:16:e1:c5:9d:32: 55:4e:68:eb:d8:95:5b:da:54:a1:04:00:14:58:b2:55:40:a5: bb:24:3b:19:9a:be:e9:79:32:34:de:c1:b6:01:4d:ff:27:fd: 1b:5e:1f:65:e4:34:96:11:74:ef:27:6c:12:f1:f6:32:8b:07: 5a:1d:23:bc:7b:59:26:51:7f:df:8c:c9:48:f9:f5:79:33:0d: 2b:7b:77:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKLCGZyyOxrL/2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk ZjdlMjQ3MTUtNWQxYi00NTZjLTkwMzEtMjJlM2JiN2NhNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7O/BhzThd2v/h7FUzuSgPyClIOYKpVl8z4w knY+KnCe6m5qXqBviWDcvrH4wMZrskjWFiCWYnVOThNLTHEfnsD3jOSe8phhYwkv EIhLCh+xuBuyhfrofHQgvNf10nfogtDGf6HcYtjRNgJe1XWj3hdksEMW2h4fBKmF OtnjnXRNBIuZ9hokKZXrsr5wYr99T1zXYfnqgjXiVmVs39RvtNC1nBAnybtLRMCk hO7D5vsuMnMq75vEXwGtZHXDLiXLGS5bMy5TgMQ7fiPLKBm3QuQpYpsJG3S1NGOO 6r9I/9jSSOY6nozugCid+ISU1Zkh1s2ZHMMruBn6pzP2us5lTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdjn4SApDRA2dpP6w4sJDGviZ45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvNTQ5ZjNlOGEtZGU5Zi0z ZTRhLTg5MTctZTY2YzA1OGFkNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWEBwiqDMaXn9cfCk7ySrahxPjRRpTzuIvO2cK18ZVoLA+NjDD0H47C jIGmG/UY5/Jx632I67gd7uOmY9272jjI2XLy9uy5GuN78K7Fz8FZgkxMZ5A8yyGe yM59c27QrM93JshaFI6mYnOSBPh2xk5VW5pK5Zhv7ysf5IZa2pzk01kg4rtBWsbZ k7gkreqExnq6b+LVTZXUqieWb2o7bC4jq+IpBAuAhTRE+IivAzUW4cWdMlVOaOvY lVvaVKEEABRYslVApbskOxmavul5MjTewbYBTf8n/RteH2XkNJYRdO8nbBLx9jKL B1odI7x7WSZRf9+MyUj59XkzDSt7d04= -----END CERTIFICATE-----Generated at Tue Nov 3 17:09:39 2026 by rpki-client