$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa File: d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa (raw, json) Hash identifier: 57iehMitWsWilvBpLAWzdK91bHFEyNI6VOCxVEdIdNc= Subject key identifier: 89:B5:F8:13:0C:9C:6D:03:38:CE:73:BF:2C:28:AB:6B:4C:14:F6:A9 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584E15E45D5145E5A1E900FD3AC0 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 398156 IP address blocks: 158.120.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:5d:51:45:e5:a1:e9:00:fd:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=2f689a86-1c3e-44ae-9cc7-92ca8138039d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ba:b8:26:d8:06:7a:32:b8:d1:5f:0f:9b:00: e3:6a:4c:12:0d:ab:c0:f7:1d:ee:72:04:56:a9:38: 98:89:de:45:92:6b:c8:28:8e:0a:d9:0f:74:fc:02: a2:e2:7f:7a:32:2d:5f:66:dc:86:13:36:63:d8:c8: ff:5a:4c:39:36:85:ab:e0:4f:53:a9:b7:41:a6:90: 40:d4:98:a3:e8:7d:1b:33:75:a5:1a:f9:47:d7:e9: 64:29:f1:8a:f0:bf:92:f1:e8:0a:2c:a4:21:ec:e7: 1a:af:65:36:3a:b4:ab:78:96:67:26:cc:03:92:10: 04:4a:05:d7:36:48:17:0f:8c:6f:43:00:e3:74:dc: 0b:b8:10:6c:b2:71:07:5e:75:5f:e5:1c:80:b1:78: af:01:75:21:2a:f4:c3:9c:48:98:d8:69:1d:66:21: 8a:17:b8:c8:d7:83:2b:3f:3e:b0:29:a9:fb:fd:b6: 92:ca:26:fd:f4:1a:6c:65:54:a2:92:a1:b5:85:71: d6:05:6d:87:f2:b2:46:a5:19:94:85:9b:01:99:da: 17:77:a3:fb:28:77:8e:ee:a3:24:ea:12:b8:b0:94: 9e:df:19:16:95:3b:63:b8:ca:eb:cd:71:d9:8e:40: d3:52:02:d5:02:c9:12:ff:18:0b:b2:a2:5b:2d:2f: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B5:F8:13:0C:9C:6D:03:38:CE:73:BF:2C:28:AB:6B:4C:14:F6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ac:8e:25:ce:ba:e7:a6:81:04:44:53:01:d5:4b:3a:94:be: 87:71:78:b3:57:a8:05:cd:b0:ae:5b:57:9e:83:77:25:86:90: 6f:fe:03:c7:4c:6c:62:99:e4:0f:61:c4:e6:d7:19:47:c9:d6: a1:aa:d1:82:bf:c4:86:ea:89:b1:19:7a:c5:ab:57:8c:70:51: 66:7b:12:a8:52:07:f4:23:f0:7b:0b:02:f9:e4:15:f1:e1:ae: 01:4e:58:47:b8:d3:34:c7:fe:5d:fa:31:8c:08:bc:b0:74:35: f9:a3:cb:2a:1d:92:87:c4:42:82:ad:0c:f4:5a:86:28:6b:a5: f6:e5:9f:bb:c8:00:7d:d8:6b:fc:09:e9:52:21:03:d7:71:52: 14:32:67:91:be:8d:67:ac:85:61:8e:22:b6:4a:c6:59:8b:91: 82:cd:a6:ec:11:0c:ef:ae:2b:ec:d0:c8:2a:e7:34:de:bc:a6: 75:87:61:13:65:41:fc:56:6e:d1:66:49:45:34:eb:e3:ff:31: 88:8d:92:8e:ff:47:ad:ac:2d:18:82:43:e9:18:3a:e2:46:e2: b8:ec:73:ff:f5:f9:c8:1d:07:cf:b4:2a:19:aa:76:35:54:c6: 1d:1d:da:52:b2:61:dc:e8:85:ef:cc:03:b2:b5:eb:b0:d9:76: c9:c2:66:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5F1RReWh6QD9OsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk MmY2ODlhODYtMWMzZS00NGFlLTljYzctOTJjYTgxMzgwMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7q4JtgGejK40V8PmwDjakwSDavA9x3ucgRW qTiYid5FkmvIKI4K2Q90/AKi4n96Mi1fZtyGEzZj2Mj/Wkw5NoWr4E9TqbdBppBA 1Jij6H0bM3WlGvlH1+lkKfGK8L+S8egKLKQh7Ocar2U2OrSreJZnJswDkhAESgXX NkgXD4xvQwDjdNwLuBBssnEHXnVf5RyAsXivAXUhKvTDnEiY2GkdZiGKF7jI14Mr Pz6wKan7/baSyib99BpsZVSikqG1hXHWBW2H8rJGpRmUhZsBmdoXd6P7KHeO7qMk 6hK4sJSe3xkWlTtjuMrrzXHZjkDTUgLVAskS/xgLsqJbLS+WBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm1+BMMnG0DOM5zvywoq2tMFPapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZDIzZjliMmYtODJiNC0z OWU4LWFiNzEtMWRhNjdhZTFjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKsjiXOuuemgQREUwHVSzqUvodxeLNXqAXNsK5bV56DdyWGkG/+A8dM bGKZ5A9hxObXGUfJ1qGq0YK/xIbqibEZesWrV4xwUWZ7EqhSB/Qj8HsLAvnkFfHh rgFOWEe40zTH/l36MYwIvLB0NfmjyyodkofEQoKtDPRahihrpfbln7vIAH3Ya/wJ 6VIhA9dxUhQyZ5G+jWeshWGOIrZKxlmLkYLNpuwRDO+uK+zQyCrnNN68pnWHYRNl QfxWbtFmSUU06+P/MYiNko7/R62sLRiCQ+kYOuJG4rjsc//1+cgdB8+0KhmqdjVU xh0d2lKyYdzohe/MA7K167DZdsnCZlw= -----END CERTIFICATE-----Generated at Sat Jun 13 19:08:17 2026 by rpki-client