$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa File: b214acd2-07b1-360e-a1cc-31f9d400eba6.roa (raw, json) Hash identifier: sI0aEs3oZVYZq8pqogPjVIYvpD+mZyeUe2rwOa/RB+Q= Subject key identifier: D0:A7:09:EF:A1:BF:CE:CD:53:6C:CE:C6:04:7E:AB:FE:8F:17:69:DF Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584FAB28A9568C2DF02F37192680 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 398156 IP address blocks: 168.220.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:a9:56:8c:2d:f0:2f:37:19:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=7afbb0b3-77c4-4695-ba09-3bac6cd7bd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:35:e3:b4:de:29:5d:e1:f4:c2:1a:4e:ab: aa:22:7f:58:ae:be:30:c5:34:09:1c:ca:13:b5:6e: 3b:ad:ee:81:03:ba:61:59:40:78:f0:f4:f6:46:12: 39:c4:79:6f:eb:b7:6d:2e:5a:01:95:22:4d:a5:45: 97:da:c7:c5:1f:90:a2:78:28:0c:a5:53:82:3c:32: c6:32:d4:b7:c7:db:1f:f6:07:01:c1:17:5c:c2:91: a7:4c:6e:ce:d5:c9:36:79:a8:3d:b9:7c:50:2c:8c: f4:35:0f:dc:44:9a:75:44:62:54:2b:09:9c:9a:4c: f4:97:67:4e:53:6a:5b:67:97:1c:9a:9d:7e:f2:8a: e3:91:b0:49:a5:6f:3b:c3:f4:7d:8b:44:e2:55:c2: 0b:16:84:57:99:54:cc:35:78:44:a8:d0:b2:4f:e2: 55:9c:79:d7:36:45:e3:04:a6:c4:57:97:b9:22:8e: 81:7e:45:64:7c:fb:fd:fd:05:ca:6a:9d:e7:9c:9a: 35:68:c0:54:37:6e:6b:7f:bd:fd:64:35:27:26:be: ed:2c:6d:65:df:bc:0b:e4:a0:d8:91:2b:c6:a1:8f: d7:46:c9:fd:df:1c:de:d6:37:43:b9:ed:e7:7a:c4: de:21:44:c7:66:c6:4d:1e:52:01:ab:e3:3a:8a:c4: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A7:09:EF:A1:BF:CE:CD:53:6C:CE:C6:04:7E:AB:FE:8F:17:69:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ae:d0:ae:cd:71:ed:72:fe:58:06:cd:61:7e:52:74:f6:30: c3:a7:fa:e0:e2:8d:cc:5f:5c:71:5e:15:3c:a8:45:60:25:d4: 70:61:ba:b5:fa:43:e1:01:df:94:b4:da:cf:61:18:0d:42:17: 61:50:6d:46:02:fe:89:7f:fc:0b:7a:68:df:c7:1d:a2:a5:13: c5:17:7b:29:6a:33:a6:65:cb:fb:94:8f:b3:bc:9a:d3:48:51: 47:84:b3:96:09:14:ca:0d:0d:e9:26:32:d1:71:e9:0a:85:f0: 53:74:65:bd:14:34:80:8a:e6:09:60:e8:fc:60:c4:5f:15:07: a1:41:a3:90:f0:42:d7:ee:e9:ab:2c:39:9b:56:a6:c6:e2:12: 53:10:21:66:55:e9:05:af:94:41:90:a8:c6:86:c2:cb:4a:27: 1f:9a:0e:3b:8f:20:d3:8a:fc:3d:73:41:c8:dd:69:28:ae:6f: 02:c0:02:3a:1b:28:ea:19:c7:78:ae:57:70:0a:33:be:de:1e: 09:ef:bb:f3:3f:52:dd:e7:a9:11:a1:d3:8e:b0:3b:da:cf:f8: a6:67:bb:d6:14:a6:43:27:3a:46:7e:73:43:3b:9b:ad:2b:c8: b5:96:d8:94:74:dd:0e:8f:ea:16:b0:a9:9d:34:e7:ff:f2:40: c0:0f:a0:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKKlWjC3wLzcZJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk N2FmYmIwYjMtNzdjNC00Njk1LWJhMDktM2JhYzZjZDdiZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFs147TeKV3h9MIaTquqIn9Yrr4wxTQJHMoT tW47re6BA7phWUB48PT2RhI5xHlv67dtLloBlSJNpUWX2sfFH5CieCgMpVOCPDLG MtS3x9sf9gcBwRdcwpGnTG7O1ck2eag9uXxQLIz0NQ/cRJp1RGJUKwmcmkz0l2dO U2pbZ5ccmp1+8orjkbBJpW87w/R9i0TiVcILFoRXmVTMNXhEqNCyT+JVnHnXNkXj BKbEV5e5Io6BfkVkfPv9/QXKap3nnJo1aMBUN25rf739ZDUnJr7tLG1l37wL5KDY kSvGoY/XRsn93xze1jdDue3nesTeIUTHZsZNHlIBq+M6isQiFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCnCe+hv87NU2zOxgR+q/6PF2nfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYjIxNGFjZDItMDdiMS0z NjBlLWExY2MtMzFmOWQ0MDBlYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuu0K7Nce1y/lgGzWF+UnT2MMOn+uDijcxfXHFeFTyoRWAl1HBhurX6 Q+EB35S02s9hGA1CF2FQbUYC/ol//At6aN/HHaKlE8UXeylqM6Zly/uUj7O8mtNI UUeEs5YJFMoNDekmMtFx6QqF8FN0Zb0UNICK5glg6PxgxF8VB6FBo5DwQtfu6ass OZtWpsbiElMQIWZV6QWvlEGQqMaGwstKJx+aDjuPINOK/D1zQcjdaSiubwLAAjob KOoZx3iuV3AKM77eHgnvu/M/Ut3nqRGh046wO9rP+KZnu9YUpkMnOkZ+c0M7m60r yLWW2JR03Q6P6hawqZ005//yQMAPoFI= -----END CERTIFICATE-----Generated at Wed Nov 4 14:58:49 2026 by rpki-client