$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa File: d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa (raw, json) Hash identifier: IC400MiwqjCrH1uKsjwZGi9IoxzhYLhQBzeGdS0Cw08= Subject key identifier: C8:95:56:51:FA:E0:A7:2D:B0:49:8D:87:D1:52:18:E8:93:CA:69:19 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584F5A32EE973BE062BFF05C1E00 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 398156 IP address blocks: 158.120.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:ee:97:3b:e0:62:bf:f0:5c:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9a843bbf-81ac-4823-83e1-8ee059ce6c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:22:39:35:ea:e2:cf:bb:e3:8a:aa:21:23:10: 3d:0e:33:dd:6a:eb:cf:e2:53:46:d2:43:00:8f:1b: f9:1b:2b:35:07:74:49:d0:c6:62:c1:6b:80:5b:91: 2e:09:2b:e3:d5:13:3d:f9:65:0d:16:06:41:67:55: c9:7d:d3:87:7a:8c:13:71:18:01:17:45:77:87:1a: d4:f2:d3:f5:fa:ce:24:34:5d:75:3d:b6:68:61:0a: fc:66:b5:6d:0f:8a:a6:71:c3:5b:f6:e8:88:d9:8a: ac:a2:e3:41:9d:f2:07:3d:a4:35:76:05:66:50:db: f9:6b:35:45:45:2c:e7:cb:a7:c3:41:28:23:71:8e: ee:d3:f3:8a:96:fd:a3:34:f2:32:bd:57:7d:86:da: 23:cf:85:a9:e0:73:4e:cf:89:08:4d:ef:6e:b3:d9: 55:bc:cb:b6:5d:42:d2:21:fe:8d:c9:08:30:f8:e7: 1a:4a:fe:4f:36:69:ce:1c:48:05:2a:50:f8:a0:39: 5f:65:40:26:ab:b8:bf:11:ab:b4:69:1e:47:7f:af: 54:ed:44:17:33:7a:5a:af:1a:8d:1d:7d:51:74:59: e1:0c:c9:a1:b5:b4:12:e6:e3:83:72:4b:e1:b1:05: 00:7e:5d:46:34:dd:17:30:82:df:3b:c6:6b:32:8d: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:95:56:51:FA:E0:A7:2D:B0:49:8D:87:D1:52:18:E8:93:CA:69:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:cc:d6:dc:90:65:03:22:d3:3c:63:54:00:3c:c7:90:81:2d: c6:c1:04:09:15:86:a8:4f:07:80:45:15:97:75:65:7f:a1:2c: 40:0b:6c:a7:ac:00:40:75:1b:40:69:74:f7:5e:21:12:fc:02: 5d:93:a0:f3:65:1a:36:5a:6e:63:d0:c8:61:0f:8f:3d:78:ac: 5f:75:6d:fd:e9:58:70:39:cc:4e:52:1a:9c:29:61:1d:ca:f2: 05:37:a7:00:15:6e:13:b0:4b:29:b8:90:49:43:4f:4a:fa:5f: 39:33:44:bc:72:1a:3f:3d:35:86:32:b6:d6:c8:4d:4f:67:60: 70:5d:6a:db:cf:bd:75:84:48:4c:20:56:55:76:cc:50:a2:19: 3e:31:5f:bb:43:34:65:3b:e6:15:d5:4e:aa:08:72:1f:48:af: e1:fb:62:dc:65:6b:be:97:df:b9:f7:f0:4f:9a:e4:22:e3:0b: 23:14:70:bf:87:67:8d:ad:7e:98:f6:5b:95:43:9d:6b:cc:39: 21:9a:3d:3b:82:2f:25:f2:5c:c2:fd:81:ca:7a:e6:b3:49:89: 83:12:4e:7e:5c:6b:48:f6:ab:c9:eb:23:e7:f3:51:b0:f0:f4: c4:ef:24:8b:2c:31:9c:ae:c2:03:93:ca:6d:cb:8e:30:99:13: a1:49:24:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMu6XO+Biv/BcHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWE4NDNiYmYtODFhYy00ODIzLTgzZTEtOGVlMDU5Y2U2YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyI5Neriz7vjiqohIxA9DjPdauvP4lNG0kMA jxv5Gys1B3RJ0MZiwWuAW5EuCSvj1RM9+WUNFgZBZ1XJfdOHeowTcRgBF0V3hxrU 8tP1+s4kNF11PbZoYQr8ZrVtD4qmccNb9uiI2YqsouNBnfIHPaQ1dgVmUNv5azVF RSzny6fDQSgjcY7u0/OKlv2jNPIyvVd9htojz4Wp4HNOz4kITe9us9lVvMu2XULS If6NyQgw+OcaSv5PNmnOHEgFKlD4oDlfZUAmq7i/Eau0aR5Hf69U7UQXM3parxqN HX1RdFnhDMmhtbQS5uODckvhsQUAfl1GNN0XMILfO8ZrMo1IqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiVVlH64KctsEmNh9FSGOiTymkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZDIzZjliMmYtODJiNC0z OWU4LWFiNzEtMWRhNjdhZTFjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzM1tyQZQMi0zxjVAA8x5CBLcbBBAkVhqhPB4BFFZd1ZX+hLEALbKes AEB1G0BpdPdeIRL8Al2ToPNlGjZabmPQyGEPjz14rF91bf3pWHA5zE5SGpwpYR3K 8gU3pwAVbhOwSym4kElDT0r6XzkzRLxyGj89NYYyttbITU9nYHBdatvPvXWESEwg VlV2zFCiGT4xX7tDNGU75hXVTqoIch9Ir+H7Ytxla76X37n38E+a5CLjCyMUcL+H Z42tfpj2W5VDnWvMOSGaPTuCLyXyXML9gcp65rNJiYMSTn5ca0j2q8nrI+fzUbDw 9MTvJIssMZyuwgOTym3LjjCZE6FJJFU= -----END CERTIFICATE-----Generated at Mon Oct 5 11:02:29 2026 by rpki-client