$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa File: 2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa (raw, json) Hash identifier: L6YFJGM538ooRbenmZW4u1jkurwn+xjN4Yr4mn5xgoQ= Subject key identifier: 5C:0E:63:FD:49:A9:E3:C8:0D:E8:1B:3B:39:52:F1:63:AC:7E:14:48 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584A9636055FF22B4FC20AD1EB30 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 398156 IP address blocks: 158.120.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:05:5f:f2:2b:4f:c2:0a:d1:eb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7f39da8d-aeec-4a83-bfb7-e6c42de64cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:9c:bb:d6:61:15:13:52:20:23:ab:ea:27: 55:42:69:7f:ef:56:3e:82:28:0c:35:35:ce:37:0f: 1f:b0:f0:37:e0:8d:e4:fe:90:00:bd:b1:12:bb:1a: d0:29:3c:1a:01:a9:72:1f:0b:f3:b1:75:1e:df:ca: 35:55:cc:45:0a:ea:c7:d8:b9:6d:95:37:cd:61:bf: bb:14:cd:0c:00:82:58:5a:73:2f:42:e0:d2:65:35: 78:e6:26:90:ba:c9:aa:74:0b:e3:b4:0b:c6:e3:3c: da:da:c6:d0:ed:56:a6:70:52:5e:d6:2e:fc:cf:54: ae:b3:6b:36:9d:3f:62:35:c4:87:af:a8:59:d6:e3: ef:35:3f:f5:71:25:fa:44:1b:1a:cb:92:37:ce:53: 21:9f:44:ba:a0:2f:0c:7b:b4:7e:ff:d8:3e:ca:74: 61:21:29:ec:35:38:9d:e9:05:98:97:b9:3b:24:96: a1:91:2f:f4:f8:1c:cc:ea:2f:a3:36:b9:c6:73:88: b7:19:d5:80:d2:91:56:39:e0:76:70:53:ae:bf:e8: c0:d6:84:2c:27:34:a9:17:d0:e4:15:d6:ca:28:23: bf:52:0c:0b:ea:95:be:a4:48:58:48:d6:1d:9f:95: c6:27:d1:dc:df:e1:7d:05:2d:b1:12:ea:2d:52:a4: 80:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0E:63:FD:49:A9:E3:C8:0D:E8:1B:3B:39:52:F1:63:AC:7E:14:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/2d7fe67f-3732-3c11-b3e0-f3f2939be1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2d:3a:16:7a:c3:b6:23:89:ef:4a:e3:9e:d1:49:aa:4f:6e: ad:6e:27:f9:1c:1e:13:2e:62:89:6f:9b:8b:c3:1c:83:0b:e1: 90:6a:b7:c9:76:66:59:4c:21:0e:a1:6c:01:eb:24:a9:96:b4: 93:a5:b5:e4:79:d6:f4:a9:53:d6:e4:22:dd:5b:1c:ae:34:ad: d7:3f:0f:23:80:f0:29:a6:f5:5d:7e:bb:ca:ac:87:d2:5a:22: e5:1e:3f:4f:ac:8b:d0:af:cd:d3:63:0b:cb:64:d5:5c:e1:c6: 40:4c:90:85:0b:d0:86:62:5b:42:cb:27:0c:06:f4:bc:d0:b1: eb:10:9d:41:0c:f5:a9:e5:a1:25:4b:04:9d:32:04:38:34:c0: 27:a2:a1:2f:41:a3:2a:08:83:26:d5:8d:b7:ef:ef:7d:16:51: 98:b0:59:ef:1c:27:98:85:93:49:9e:5b:df:1f:54:e0:67:3f: bc:6d:bc:94:6d:25:6b:7c:cd:8e:35:3e:6c:9b:4e:be:d5:bb: f0:c5:5a:37:c0:4d:f6:52:d3:bf:b4:7b:39:79:99:2f:f2:c2: dd:c1:f3:bb:8d:3f:99:59:10:d5:8e:d4:07:df:07:e7:6e:c1: 10:c2:6d:6e:c8:0f:1e:c3:2f:ca:15:50:8a:9b:c2:00:48:67: 91:bc:97:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgVf8itPwgrR6zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2YzOWRhOGQtYWVlYy00YTgzLWJmYjctZTZjNDJkZTY0Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX+cu9ZhFRNSICOr6idVQml/71Y+gigMNTXO Nw8fsPA34I3k/pAAvbESuxrQKTwaAalyHwvzsXUe38o1VcxFCurH2LltlTfNYb+7 FM0MAIJYWnMvQuDSZTV45iaQusmqdAvjtAvG4zza2sbQ7VamcFJe1i78z1Sus2s2 nT9iNcSHr6hZ1uPvNT/1cSX6RBsay5I3zlMhn0S6oC8Me7R+/9g+ynRhISnsNTid 6QWYl7k7JJahkS/0+BzM6i+jNrnGc4i3GdWA0pFWOeB2cFOuv+jA1oQsJzSpF9Dk FdbKKCO/UgwL6pW+pEhYSNYdn5XGJ9Hc3+F9BS2xEuotUqSABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwOY/1JqePIDegbOzlS8WOsfhRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMmQ3ZmU2N2YtMzczMi0z YzExLWIzZTAtZjNmMjkzOWJlMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEstOhZ6w7Yjie9K457RSapPbq1uJ/kcHhMuYolvm4vDHIML4ZBqt8l2 ZllMIQ6hbAHrJKmWtJOlteR51vSpU9bkIt1bHK40rdc/DyOA8Cmm9V1+u8qsh9Ja IuUeP0+si9CvzdNjC8tk1VzhxkBMkIUL0IZiW0LLJwwG9LzQsesQnUEM9anloSVL BJ0yBDg0wCeioS9BoyoIgybVjbfv730WUZiwWe8cJ5iFk0meW98fVOBnP7xtvJRt JWt8zY41PmybTr7Vu/DFWjfATfZS07+0ezl5mS/ywt3B87uNP5lZENWO1AffB+du wRDCbW7IDx7DL8oVUIqbwgBIZ5G8l7s= -----END CERTIFICATE-----Generated at Thu Aug 7 00:44:38 2025 by rpki-client