$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa File: 25344a92-d984-3f4f-9efb-16ae44e8eac7.roa (raw, json) Hash identifier: uiE27Xja6indd+Ko8Niyqukwnp22O6BkTrtcuoIk7Yk= Subject key identifier: 74:64:6F:43:70:D5:8D:99:67:3E:78:03:12:4A:7A:44:88:55:7F:12 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584AE5C675A823198B324CF44B80 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 398156 IP address blocks: 168.220.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:75:a8:23:19:8b:32:4c:f4:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=c3ebe6aa-fa90-4009-9ad7-fddc408fde57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3d:c6:3d:c2:41:bb:87:23:22:20:a2:81:1c: 89:51:a1:56:0a:7a:5a:15:1e:c6:70:b8:ba:a0:84: 94:4f:ab:c1:7f:a3:92:4c:1b:2d:58:9a:53:a3:ae: 5a:f4:9f:4a:62:6d:a9:16:98:60:26:47:f4:3b:be: 30:32:c1:24:15:e1:9b:f9:a0:59:cf:03:26:53:17: 14:07:ae:c7:be:9c:bc:9d:89:f1:e9:d1:e3:7e:86: fa:4f:7c:5e:b6:7d:d2:f7:96:22:48:bd:d1:92:0c: e2:a9:be:86:56:3c:4c:06:d3:2a:5a:c5:f9:40:6a: 62:30:36:bb:6f:80:97:67:52:84:81:17:e9:0d:46: f2:b2:81:f5:e3:b6:5f:d7:f8:23:30:8f:23:14:b1: 20:b5:0a:26:a9:b5:20:a8:86:e6:0f:f7:fd:fc:35: 98:df:48:9b:94:f0:7c:db:2d:f1:9e:17:d3:a2:be: 35:96:cc:29:aa:88:68:8a:ad:a4:5a:88:b3:ad:f7: ab:f7:a4:6d:aa:de:d3:ac:12:58:af:95:01:b4:0f: 56:6d:55:b4:95:8b:ac:18:fd:17:9a:21:5a:2a:fa: f4:4c:b9:f8:f0:13:fd:dd:1b:0d:e0:2d:1a:ce:fe: 81:39:d4:e4:b1:e2:c5:a3:9b:d6:b4:cf:7a:ee:14: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:64:6F:43:70:D5:8D:99:67:3E:78:03:12:4A:7A:44:88:55:7F:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/25344a92-d984-3f4f-9efb-16ae44e8eac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e3:4a:b6:fb:31:73:38:98:b4:ca:3d:f0:a5:3d:c2:bd:25: ce:85:13:3f:71:94:d2:52:9e:a6:c5:14:a2:df:00:07:5c:56: 86:aa:cc:f1:40:d8:4f:73:16:f1:fc:67:0b:e5:79:6b:d2:ee: 5d:ac:bd:47:42:b9:ea:73:46:11:54:94:c2:94:6c:99:eb:1a: be:c7:b6:22:13:5c:1c:f5:b2:7e:a4:c9:03:4f:89:15:09:f6: 11:21:7e:6e:d3:c1:fe:e8:27:fa:44:3f:af:62:4e:ae:7f:ef: c4:8a:60:4e:11:88:6f:de:5a:33:1a:c3:d1:d1:a2:35:24:4d: 76:6f:a9:34:c9:28:60:d1:30:93:14:c5:82:02:bc:20:a6:28: 4c:8f:b4:9a:bb:43:67:2d:0e:2c:62:83:b3:64:c6:ef:ce:af: dc:75:94:ec:dc:a0:b5:63:28:1a:e0:7f:af:cc:1d:5d:b5:e9: b6:5f:1d:3d:34:a6:75:38:db:ab:28:c4:df:d1:d0:8d:df:b2: a0:8c:b5:be:ce:1f:a9:42:87:49:22:9f:75:d5:43:82:32:c1: 44:8b:9e:0e:8e:2d:34:49:b8:77:b0:af:e6:d8:b1:05:f0:ab: aa:8d:4c:40:68:c4:e4:a3:98:86:a4:05:0a:7e:f4:c9:82:64: e1:dd:a1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnWoIxmLMkz0S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk YzNlYmU2YWEtZmE5MC00MDA5LTlhZDctZmRkYzQwOGZkZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj3GPcJBu4cjIiCigRyJUaFWCnpaFR7GcLi6 oISUT6vBf6OSTBstWJpTo65a9J9KYm2pFphgJkf0O74wMsEkFeGb+aBZzwMmUxcU B67Hvpy8nYnx6dHjfob6T3xetn3S95YiSL3Rkgziqb6GVjxMBtMqWsX5QGpiMDa7 b4CXZ1KEgRfpDUbysoH147Zf1/gjMI8jFLEgtQomqbUgqIbmD/f9/DWY30iblPB8 2y3xnhfTor41lswpqohoiq2kWoizrfer96Rtqt7TrBJYr5UBtA9WbVW0lYusGP0X miFaKvr0TLn48BP93RsN4C0azv6BOdTkseLFo5vWtM967hTdPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRkb0Nw1Y2ZZz54AxJKekSIVX8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMjUzNDRhOTItZDk4NC0z ZjRmLTllZmItMTZhZTQ0ZThlYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbjSrb7MXM4mLTKPfClPcK9Jc6FEz9xlNJSnqbFFKLfAAdcVoaqzPFA 2E9zFvH8ZwvleWvS7l2svUdCuepzRhFUlMKUbJnrGr7HtiITXBz1sn6kyQNPiRUJ 9hEhfm7Twf7oJ/pEP69iTq5/78SKYE4RiG/eWjMaw9HRojUkTXZvqTTJKGDRMJMU xYICvCCmKEyPtJq7Q2ctDixig7Nkxu/Or9x1lOzcoLVjKBrgf6/MHV216bZfHT00 pnU426soxN/R0I3fsqCMtb7OH6lCh0kin3XVQ4IywUSLng6OLTRJuHewr+bYsQXw q6qNTEBoxOSjmIakBQp+9MmCZOHdocg= -----END CERTIFICATE-----Generated at Wed Nov 5 16:07:26 2025 by rpki-client