$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa File: 25344a92-d984-3f4f-9efb-16ae44e8eac7.roa (raw, json) Hash identifier: ls1Z2r1r0qSa2SNQYWWNHoW/jKwGpDHCQXROQ2h7DgQ= Subject key identifier: 88:6F:0D:40:86:40:A7:6C:FE:8D:CD:F4:B9:31:53:88:9F:7D:DD:97 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584D869557583D6642BB26E68D40 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 398156 IP address blocks: 168.220.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:57:58:3d:66:42:bb:26:e6:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=65549421-8cbd-4fcd-88c5-c8ea8c8cae03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:37:78:5c:07:67:8e:fa:1a:82:8d:97:5a:6f: 90:18:3d:9f:48:5b:3a:5e:e3:94:04:18:53:30:c3: d7:d0:f1:c5:7a:d8:dc:40:f3:5c:29:21:af:86:56: 30:a4:2c:51:c1:28:51:f4:34:db:ab:82:8d:9e:fb: 1e:70:de:6a:fe:c8:b9:e9:98:b6:a9:30:f5:88:45: f9:6a:2a:6e:af:7b:6b:e3:ce:9c:b7:f1:18:86:85: 82:d2:d8:0d:89:b3:ab:b8:e5:a9:f7:d9:55:91:75: f0:85:2c:51:f7:ff:e2:e8:58:f0:dc:53:be:00:03: bc:89:75:bd:60:aa:0f:a9:7a:27:b4:e3:44:e0:0e: f7:d7:8e:6e:d0:63:d1:e4:e2:a3:df:ea:60:ef:ac: 7e:9d:55:0c:f2:d5:21:da:4a:df:c6:50:6d:f5:b2: 1d:71:86:e1:6a:68:40:02:c7:4d:be:ad:46:23:2e: dd:93:14:7c:d4:4c:4e:c6:03:5f:b6:ea:7e:6f:d6: 53:03:30:55:5f:2d:ac:3f:97:c6:f2:7b:3e:ac:55: 54:5b:e2:4b:80:66:9d:ac:11:ca:fb:cd:7d:ef:5c: 0e:fe:14:8a:14:15:da:c4:50:95:7b:3a:45:7f:d0: 56:c8:36:1f:05:83:79:62:e0:79:2e:10:af:f0:cf: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:0D:40:86:40:A7:6C:FE:8D:CD:F4:B9:31:53:88:9F:7D:DD:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9e:0f:dc:1c:f7:6b:15:87:18:14:d2:b5:d3:cd:b2:94:40: 08:db:13:e0:65:af:fa:54:e5:84:82:21:7e:2a:73:9d:0a:e2: 99:76:b3:7c:09:65:c8:f3:70:80:05:6b:9b:42:27:2a:2d:36: 9e:79:8c:d0:97:86:6e:82:28:f8:b6:27:ad:f4:bd:2b:5d:30: 78:0f:2c:97:5d:a4:0b:c0:fc:7a:6c:39:da:a7:da:46:e9:6a: 04:5c:0a:2f:f6:cf:68:29:5b:70:56:db:2e:24:c1:52:29:05: eb:a6:34:a2:2b:f8:da:81:07:ac:35:bc:ff:42:f9:7f:47:7c: a5:87:65:1b:78:c5:50:4a:56:bc:a1:26:50:37:5e:f3:0d:50: 9c:8c:9a:0c:a0:1d:7b:33:8d:23:56:6c:9e:ca:e4:52:52:72: ef:50:18:70:4f:19:8b:2d:25:a6:81:ed:ab:0d:72:2f:87:b6: f7:e3:33:33:cd:06:3a:6c:52:5c:1e:05:e7:0e:95:0d:72:4b: 46:c0:4b:f1:61:6c:bf:b1:4e:22:64:31:da:0a:79:0d:13:eb: aa:4f:29:8e:0c:ae:83:0e:e9:94:f4:37:67:0f:2e:0e:00:0d: eb:4f:b7:05:7f:28:26:22:8c:24:4b:01:fe:60:7a:69:23:b9: 86:fd:e6:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVdYPWZCuybmjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NjU1NDk0MjEtOGNiZC00ZmNkLTg4YzUtYzhlYThjOGNhZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDd4XAdnjvoago2XWm+QGD2fSFs6XuOUBBhT MMPX0PHFetjcQPNcKSGvhlYwpCxRwShR9DTbq4KNnvsecN5q/si56Zi2qTD1iEX5 aipur3tr486ct/EYhoWC0tgNibOruOWp99lVkXXwhSxR9//i6Fjw3FO+AAO8iXW9 YKoPqXontONE4A73145u0GPR5OKj3+pg76x+nVUM8tUh2krfxlBt9bIdcYbhamhA AsdNvq1GIy7dkxR81ExOxgNftup+b9ZTAzBVXy2sP5fG8ns+rFVUW+JLgGadrBHK +81971wO/hSKFBXaxFCVezpFf9BWyDYfBYN5YuB5LhCv8M9nJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhvDUCGQKds/o3N9LkxU4iffd2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMjUzNDRhOTItZDk4NC0z ZjRmLTllZmItMTZhZTQ0ZThlYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOeD9wc92sVhxgU0rXTzbKUQAjbE+Blr/pU5YSCIX4qc50K4pl2s3wJ ZcjzcIAFa5tCJyotNp55jNCXhm6CKPi2J630vStdMHgPLJddpAvA/HpsOdqn2kbp agRcCi/2z2gpW3BW2y4kwVIpBeumNKIr+NqBB6w1vP9C+X9HfKWHZRt4xVBKVryh JlA3XvMNUJyMmgygHXszjSNWbJ7K5FJScu9QGHBPGYstJaaB7asNci+HtvfjMzPN BjpsUlweBecOlQ1yS0bAS/FhbL+xTiJkMdoKeQ0T66pPKY4MroMO6ZT0N2cPLg4A DetPtwV/KCYijCRLAf5gemkjuYb95iE= -----END CERTIFICATE-----Generated at Fri Apr 17 12:59:57 2026 by rpki-client