$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa File: f6064a69-8e2a-30ff-a4e0-a91669f30752.roa (raw, json) Hash identifier: QH3Sq9oklX5yvX0pkErSCskx+zFO2LYtrFQkGml8U8A= Subject key identifier: 78:DD:70:9E:6F:5E:30:E8:D3:43:BA:18:4F:80:12:58:D0:8D:44:34 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584FAB28A9B813B348235171D980 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 398156 IP address blocks: 158.120.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:a9:b8:13:b3:48:23:51:71:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=6be9cf39-cc24-4abd-a25d-6ca97750e17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:d4:c8:d5:47:0c:d8:00:ba:6a:4a:c5:64: 58:1c:85:88:eb:94:26:7e:0a:e3:f8:84:88:a2:64: 68:94:32:b1:ef:c7:5c:ae:bb:ec:ee:0e:e2:fc:64: 27:e9:87:3b:08:73:27:93:54:16:8a:18:3e:bc:8a: e9:96:de:91:3e:99:46:0a:b9:b0:6c:d9:28:70:56: 27:dd:9e:72:9a:24:05:21:f2:13:2e:8a:ca:b7:68: 04:58:67:c2:1e:82:19:eb:cc:e6:72:e6:1a:8e:a9: ce:93:a5:e2:b6:8f:48:21:3d:33:df:8a:b5:d3:c9: 01:65:ea:40:4c:32:cb:b2:cf:51:93:2e:ce:ac:45: d1:c9:5b:02:d4:bc:e2:b9:29:11:d8:a2:71:aa:8a: f2:65:ab:d3:b2:3b:24:9c:9d:12:ab:e4:17:19:bd: b8:df:e3:48:94:9d:e6:c3:bf:b7:a3:82:07:9c:eb: da:37:a8:8c:87:f0:f2:51:65:3e:0e:ad:27:98:24: 02:7e:ba:c7:3c:7d:e9:d7:16:b0:5d:01:ee:68:d9: ff:fd:1b:45:fb:0a:62:bb:17:9c:15:1f:e8:6e:64: d2:1b:ee:fe:f2:64:dc:9c:81:82:16:92:38:d1:4b: d4:30:ba:be:c0:80:51:6e:4d:d1:85:7b:a8:f5:c5: b1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DD:70:9E:6F:5E:30:E8:D3:43:BA:18:4F:80:12:58:D0:8D:44:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:99:c7:f6:38:a7:01:0e:8e:45:19:c8:ea:e5:7d:8e:fd:6a: f3:36:0c:53:b9:05:f7:36:c7:b9:c4:07:9a:dd:ec:88:e7:ec: 66:04:f8:be:5e:77:8e:88:ec:da:52:48:2e:14:e7:51:89:ce: 01:66:0d:12:8d:29:23:e4:aa:12:8b:1d:06:4a:a4:76:5b:b4: de:9e:49:73:53:04:d9:80:77:45:01:12:ef:a1:ed:c9:f2:47: bd:f0:76:3d:2a:de:62:e6:2e:7a:ef:19:20:ce:ce:e4:1e:06: d8:c5:e1:2c:82:0d:c3:82:2f:ec:2b:f2:9d:9f:9e:d5:ff:35: 76:a5:6e:49:7a:fa:e8:44:b6:00:17:07:86:c0:66:42:c8:4c: 97:0f:3d:52:ba:b9:fa:f2:44:d5:a3:b4:1a:04:00:cc:f6:7b: b6:62:a0:cc:ba:79:aa:66:74:76:fb:8d:57:2c:e1:4b:b4:8c: fd:65:f5:62:ac:f2:f8:a3:6b:69:80:9e:1f:21:10:ba:cb:fb: 0f:be:da:e0:d3:25:be:66:57:3a:de:18:4c:e8:c4:29:c7:33: 41:36:2e:9e:3f:c9:0f:66:95:c3:32:0f:56:ef:39:44:36:e2: 86:d2:7e:59:47:bc:ed:fa:ca:d7:be:69:a2:0f:bf:79:c9:5d: 32:25:7d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKKm4E7NII1Fx2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk NmJlOWNmMzktY2MyNC00YWJkLWEyNWQtNmNhOTc3NTBlMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J7UyNVHDNgAumpKxWRYHIWI65Qmfgrj+ISI omRolDKx78dcrrvs7g7i/GQn6Yc7CHMnk1QWihg+vIrplt6RPplGCrmwbNkocFYn 3Z5ymiQFIfITLorKt2gEWGfCHoIZ68zmcuYajqnOk6Xito9IIT0z34q108kBZepA TDLLss9Rky7OrEXRyVsC1LziuSkR2KJxqoryZavTsjsknJ0Sq+QXGb243+NIlJ3m w7+3o4IHnOvaN6iMh/DyUWU+Dq0nmCQCfrrHPH3p1xawXQHuaNn//RtF+wpiuxec FR/obmTSG+7+8mTcnIGCFpI40UvUMLq+wIBRbk3RhXuo9cWxBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjdcJ5vXjDo00O6GE+AEljQjUQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZjYwNjRhNjktOGUyYS0z MGZmLWE0ZTAtYTkxNjY5ZjMwNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuZx/Y4pwEOjkUZyOrlfY79avM2DFO5Bfc2x7nEB5rd7Ijn7GYE+L5e d46I7NpSSC4U51GJzgFmDRKNKSPkqhKLHQZKpHZbtN6eSXNTBNmAd0UBEu+h7cny R73wdj0q3mLmLnrvGSDOzuQeBtjF4SyCDcOCL+wr8p2fntX/NXalbkl6+uhEtgAX B4bAZkLITJcPPVK6ufryRNWjtBoEAMz2e7ZioMy6eapmdHb7jVcs4Uu0jP1l9WKs 8vija2mAnh8hELrL+w++2uDTJb5mVzreGEzoxCnHM0E2Lp4/yQ9mlcMyD1bvOUQ2 4obSfllHvO36yte+aaIPv3nJXTIlfd8= -----END CERTIFICATE-----Generated at Tue Nov 3 12:06:50 2026 by rpki-client