$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa File: ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa (raw, json) Hash identifier: fkWWJUkk7oMI1SF9072ieI95uE4JQaFxFMq0q4sa2pY= Subject key identifier: 35:3E:C0:20:10:C7:BA:E5:55:B6:BA:98:E8:00:94:23:E0:85:CD:89 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584A963605EC5FF03B6FBB3A6780 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 398156 IP address blocks: 158.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:05:ec:5f:f0:3b:6f:bb:3a:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=217ea7a7-ae0f-4a39-8c8b-4cca73223820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7d:9e:92:aa:68:66:05:6a:ad:45:e3:6e:e8: 27:49:dd:3b:68:1d:63:29:02:c7:28:0e:1b:7e:f3: 55:e0:dd:5f:a4:b1:35:2e:cd:dc:64:ee:a2:70:69: 03:61:a6:64:58:b2:a5:e0:38:ad:0a:95:4c:54:b2: 51:90:2a:db:6a:41:4d:d2:02:02:0a:f2:0e:b9:d4: 82:f3:eb:2b:7a:29:93:2f:77:d2:5b:3f:8c:ac:fa: d5:9c:a2:49:08:f3:b2:c5:67:3f:e1:01:1f:11:38: bb:1b:85:99:d7:ba:ef:ad:eb:9a:60:6d:00:45:06: fa:cc:45:2c:79:cb:73:9f:63:e8:4f:20:ff:c5:76: 38:ba:ac:25:ad:86:1b:08:d5:08:43:b5:69:81:e8: af:f3:9f:e1:14:cd:7d:f7:fd:a1:ad:e0:a7:14:44: ac:d8:eb:a6:21:0c:de:82:93:9f:56:2c:3a:3f:a3: 5f:45:03:d0:af:d1:cc:40:c6:39:f4:03:33:7a:e2: 2b:c6:0e:27:f1:d8:22:2b:27:18:c8:fe:94:0d:69: ce:b6:c7:52:de:f7:10:6f:c2:b7:da:e9:24:4b:6a: f1:69:c3:2a:67:6c:63:de:25:0f:5f:86:69:3e:cc: 51:0c:22:5a:c7:7e:ad:b7:d3:dc:80:0b:72:ce:a1: 4c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3E:C0:20:10:C7:BA:E5:55:B6:BA:98:E8:00:94:23:E0:85:CD:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ab:cd:84:ab:ad:a0:60:b3:b5:c5:de:7d:1f:3d:99:29:24: 54:66:14:b0:04:e7:de:45:89:3c:3c:3d:1a:a9:0a:14:5d:9d: 83:e7:02:a0:ea:40:cd:1f:89:a6:01:25:13:fe:b4:98:cc:fb: db:ae:df:77:83:aa:fe:c7:62:bf:1b:19:c2:6e:1d:f2:71:23: c7:e3:5e:a3:2f:52:52:ed:3d:ae:5b:f1:01:aa:13:c3:1a:f5: 0e:a6:7b:8b:62:c1:15:e2:e2:a8:64:a4:82:00:40:4a:dd:11: 4e:8d:0a:4e:80:47:44:dc:1a:f1:06:f3:c2:93:c2:3d:80:40: 23:89:68:07:37:59:c4:96:81:c3:ec:e3:33:b0:43:4d:f7:47: 84:94:43:ba:bc:16:ae:86:a1:28:26:5c:c2:e6:cf:31:bc:de: c5:15:c5:83:db:e7:2c:c6:b2:72:a0:38:3e:d7:65:6d:4b:64: 9f:db:23:44:95:a7:be:bd:af:4d:15:60:ab:56:d4:df:b9:28: 40:ef:b0:51:bf:1a:78:91:35:04:6d:ce:1a:2b:b2:dd:26:4c: 5d:17:bf:81:f9:b8:7d:43:88:c9:56:b6:c0:c8:20:4a:c0:35: 82:96:95:50:05:8a:12:8d:4d:27:e3:64:af:a4:4e:07:fd:2c: 1f:8a:9a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgXsX/A7b7s6Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MjE3ZWE3YTctYWUwZi00YTM5LThjOGItNGNjYTczMjIzODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX2ekqpoZgVqrUXjbugnSd07aB1jKQLHKA4b fvNV4N1fpLE1Ls3cZO6icGkDYaZkWLKl4DitCpVMVLJRkCrbakFN0gICCvIOudSC 8+sreimTL3fSWz+MrPrVnKJJCPOyxWc/4QEfETi7G4WZ17rvreuaYG0ARQb6zEUs ectzn2PoTyD/xXY4uqwlrYYbCNUIQ7Vpgeiv85/hFM199/2hreCnFESs2OumIQze gpOfViw6P6NfRQPQr9HMQMY59AMzeuIrxg4n8dgiKycYyP6UDWnOtsdS3vcQb8K3 2ukkS2rxacMqZ2xj3iUPX4ZpPsxRDCJax36tt9PcgAtyzqFMZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU+wCAQx7rlVba6mOgAlCPghc2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvY2E4MTUwODctMDYyMC0z YjJlLTljZTctZmViYzc3YTVkNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+rzYSrraBgs7XF3n0fPZkpJFRmFLAE595FiTw8PRqpChRdnYPnAqDq QM0fiaYBJRP+tJjM+9uu33eDqv7HYr8bGcJuHfJxI8fjXqMvUlLtPa5b8QGqE8Ma 9Q6me4tiwRXi4qhkpIIAQErdEU6NCk6AR0TcGvEG88KTwj2AQCOJaAc3WcSWgcPs 4zOwQ033R4SUQ7q8Fq6GoSgmXMLmzzG83sUVxYPb5yzGsnKgOD7XZW1LZJ/bI0SV p769r00VYKtW1N+5KEDvsFG/GniRNQRtzhorst0mTF0Xv4H5uH1DiMlWtsDIIErA NYKWlVAFihKNTSfjZK+kTgf9LB+KmqE= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:33 2025 by rpki-client