$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9173c854-62ba-38f9-973d-5944843c3ad7.roa File: 9173c854-62ba-38f9-973d-5944843c3ad7.roa (raw, json) Hash identifier: 7TtO5EPzLFy3AynVEX2Pqc6eTykJm/aIFpL1PD5DSY8= Subject key identifier: AB:C9:A5:F6:6E:A0:FB:7D:E3:FD:56:7A:9D:8B:6C:9E:D4:B5:C3:1C Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584A050A7C5730C46F9DE7AB34A0 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9173c854-62ba-38f9-973d-5944843c3ad7.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 398156 IP address blocks: 158.120.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:7c:57:30:c4:6f:9d:e7:ab:34:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=b92e1784-0bcf-445f-b206-2cbac359054a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:cc:e9:e8:b8:f2:51:97:9e:b9:96:2f:6d: 37:f5:0a:7f:9b:f2:13:a4:ef:dc:59:fc:28:d5:82: 79:47:45:d7:16:d8:03:69:20:31:e0:ed:88:8b:2c: 68:0c:1b:cb:92:95:09:4d:b7:81:82:d9:d1:50:bc: c6:7f:6c:b4:03:d2:af:7b:3a:80:3e:09:da:bd:8a: d9:7e:aa:8c:b2:61:79:36:8e:a2:15:e0:fa:ab:8e: f6:a8:c1:55:50:8b:f6:08:a6:58:d2:63:99:d4:23: 87:4b:0f:6c:a8:0a:eb:45:99:1a:4f:eb:35:eb:6d: db:88:1d:15:45:78:6e:09:f9:8a:d6:3f:71:db:73: 4c:05:b1:70:1a:a8:11:6d:79:15:ca:6d:c8:ed:27: 53:63:ef:9d:44:a4:ba:53:c9:42:23:37:d8:1c:f4: 18:ad:2b:ba:0a:64:72:b9:a3:24:6e:63:17:16:6d: 7a:b7:c4:8d:5e:42:b5:1f:66:cc:58:4f:ea:9a:8f: 9c:f3:a3:78:51:78:95:15:e6:4c:f9:ec:2b:6b:7d: 66:c0:8e:5c:32:a9:b9:df:f5:05:99:d3:9f:de:bf: 20:b1:88:3f:fb:7f:4e:92:d7:aa:02:22:31:5c:f6: af:cc:5f:7d:21:c9:3d:d5:98:3a:a4:64:47:b6:b8: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C9:A5:F6:6E:A0:FB:7D:E3:FD:56:7A:9D:8B:6C:9E:D4:B5:C3:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/9173c854-62ba-38f9-973d-5944843c3ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:77:e7:0a:74:2e:e2:d8:00:c6:9f:f4:aa:af:53:07:f0:3b: 3b:b4:d3:89:0c:94:9e:e9:f2:de:4e:52:6e:8d:53:19:f8:43: c1:32:56:33:a6:d9:74:22:73:46:c2:0c:d9:33:40:2a:eb:ac: 54:24:a5:ae:4c:f0:72:cc:fc:d3:18:43:8b:a9:2f:0d:64:08: 3d:26:f6:00:6f:56:ca:af:d4:f4:88:ba:ea:1c:00:2d:8f:95: 48:75:d8:0b:d3:a8:98:a6:69:22:c1:bb:52:c5:4b:75:61:c4: 39:3f:f3:5f:3b:7d:c6:38:e3:b2:f9:a3:12:b8:ea:cc:9a:23: 21:c5:f9:07:c5:58:5a:d7:6e:57:15:e4:2b:72:e6:4b:a9:f0: 61:fc:2d:fb:ac:78:a0:90:4e:a7:de:ef:bc:e4:8d:b7:d2:26: 92:9d:fa:4b:15:ec:4d:37:97:cb:05:59:53:cf:08:13:2c:30: 3e:14:a7:89:05:50:ca:99:dc:ee:e5:b1:57:b2:15:37:60:a9: ed:57:0b:a7:d3:7a:89:30:a6:2e:e1:26:47:97:4e:c0:c9:4c: 2e:00:ba:41:48:6d:22:a3:0b:d4:40:a9:f0:1e:e6:fc:80:72: bb:cd:cc:bd:8e:49:17:bf:1c:24:88:fa:41:27:46:b9:0f:fc: a6:52:4e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnxXMMRvneerNKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk YjkyZTE3ODQtMGJjZi00NDVmLWIyMDYtMmNiYWMzNTkwNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHPM6ei48lGXnrmWL2039Qp/m/ITpO/cWfwo 1YJ5R0XXFtgDaSAx4O2IiyxoDBvLkpUJTbeBgtnRULzGf2y0A9KvezqAPgnavYrZ fqqMsmF5No6iFeD6q472qMFVUIv2CKZY0mOZ1COHSw9sqArrRZkaT+s1623biB0V RXhuCfmK1j9x23NMBbFwGqgRbXkVym3I7SdTY++dRKS6U8lCIzfYHPQYrSu6CmRy uaMkbmMXFm16t8SNXkK1H2bMWE/qmo+c86N4UXiVFeZM+ewra31mwI5cMqm53/UF mdOf3r8gsYg/+39OkteqAiIxXPavzF99Ick91Zg6pGRHtriQlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvJpfZuoPt94/1Wep2LbJ7UtcMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvOTE3M2M4NTQtNjJiYS0z OGY5LTk3M2QtNTk0NDg0M2MzYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt35wp0LuLYAMaf9KqvUwfwOzu004kMlJ7p8t5OUm6NUxn4Q8EyVjOm 2XQic0bCDNkzQCrrrFQkpa5M8HLM/NMYQ4upLw1kCD0m9gBvVsqv1PSIuuocAC2P lUh12AvTqJimaSLBu1LFS3VhxDk/8187fcY447L5oxK46syaIyHF+QfFWFrXblcV 5Cty5kup8GH8LfuseKCQTqfe77zkjbfSJpKd+ksV7E03l8sFWVPPCBMsMD4Up4kF UMqZ3O7lsVeyFTdgqe1XC6fTeokwpi7hJkeXTsDJTC4AukFIbSKjC9RAqfAe5vyA crvNzL2OSRe/HCSI+kEnRrkP/KZSTvA= -----END CERTIFICATE-----Generated at Mon Jun 16 14:33:19 2025 by rpki-client