$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/e095fafa-e6ab-3346-9058-b4e2a79d0db7.roa File: e095fafa-e6ab-3346-9058-b4e2a79d0db7.roa (raw, json) Hash identifier: bF0amF3bNkjV/WoYSfDyiZi2ZPgvInGFW27DEAy0ciA= Subject key identifier: E3:F8:6E:06:DF:88:16:26:96:17:07:D7:1A:9C:28:90:45:BA:05:94 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584A963605CF195AD0DF3AD9B880 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/e095fafa-e6ab-3346-9058-b4e2a79d0db7.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 398156 IP address blocks: 158.120.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:05:cf:19:5a:d0:df:3a:d9:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=bcadb4de-9019-418c-a446-c22c63c81431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:7e:94:41:8e:b9:1d:9a:ca:85:bb:a3:43: bd:a6:0f:80:51:16:b1:45:1b:09:c3:c0:d7:78:81: c4:ca:20:63:8a:69:89:3b:6e:80:a4:28:21:09:12: bd:4c:80:61:f6:38:00:45:dc:a5:81:92:3a:0a:5a: d7:1e:74:17:61:6c:aa:13:91:cb:f5:db:13:b1:c0: 4f:73:b4:8a:e2:2b:78:1c:8b:f0:97:9d:8e:e4:a4: 1d:df:bf:a3:9e:d0:8c:b4:23:4f:5d:1c:b0:08:a3: 01:e0:5e:6d:c6:ae:9f:8f:44:59:05:c3:6b:37:9f: 4e:41:dc:1b:0d:d0:37:d3:d7:e6:0c:94:9b:d0:80: 61:70:03:8c:a5:f6:ee:af:2d:1a:44:7e:e2:d7:88: 6d:e4:70:31:be:51:3d:68:47:27:db:f7:69:93:bd: 81:23:e0:42:80:c8:25:7e:ae:75:8e:67:0b:ee:7b: ea:33:0b:a4:b5:9e:f6:ac:33:64:d2:da:5d:1f:bb: 2c:1a:28:28:a9:56:1a:90:6f:ab:fb:eb:c6:2a:75: 5c:f5:3b:60:df:b9:5c:00:3b:fb:1b:f0:da:a3:1a: cb:64:5b:ec:f4:f1:a2:4e:f8:06:ce:12:c1:95:d5: 0b:c1:6e:2e:0a:0c:f3:91:3d:bb:80:a7:26:03:58: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F8:6E:06:DF:88:16:26:96:17:07:D7:1A:9C:28:90:45:BA:05:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/e095fafa-e6ab-3346-9058-b4e2a79d0db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1b:24:85:c7:5d:31:9d:0c:4a:73:8b:6f:f4:ec:8f:3b:19: a3:31:0c:41:ee:17:0b:1c:2a:61:8b:f8:16:bd:9e:01:6d:ec: 4a:74:57:78:72:2a:5a:01:86:00:d8:09:58:58:b5:f3:27:5e: 2d:ae:d1:6c:53:d2:91:72:ce:52:63:37:1d:d0:f4:ae:2e:e2: f8:c4:36:a0:a7:90:e6:6f:b0:27:de:c0:16:ad:a1:77:3c:9b: 17:c5:e4:76:94:8e:ac:0a:24:4b:70:10:55:ca:b4:72:0f:16: a8:3f:4f:e8:c1:28:54:bb:65:a1:7b:e7:8f:c8:86:5f:03:b9: 7f:2b:24:7f:08:70:fa:03:4a:f7:9a:b5:26:88:fb:bc:19:32: 0c:38:a6:d4:f2:92:c4:e4:30:5d:d5:b0:0b:a3:4e:03:e4:20: 48:5b:31:e3:17:25:af:7e:aa:23:00:3c:f5:3f:af:2b:2b:2d: 2c:61:3c:7b:87:76:b6:f0:25:15:84:ea:bd:08:d7:48:cc:1c: 84:53:8b:e4:4e:fd:75:ac:a8:4c:4e:06:5e:05:45:b4:b4:03: 0d:1b:87:33:53:2d:cb:7e:fe:81:92:53:f4:23:06:86:4c:65: c7:7a:4f:c9:a6:46:21:29:1c:1a:a6:23:5a:3c:c4:cc:48:6d: bc:97:d5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgXPGVrQ3zrZuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmNhZGI0ZGUtOTAxOS00MThjLWE0NDYtYzIyYzYzYzgxNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1B+lEGOuR2ayoW7o0O9pg+AURaxRRsJw8DX eIHEyiBjimmJO26ApCghCRK9TIBh9jgARdylgZI6ClrXHnQXYWyqE5HL9dsTscBP c7SK4it4HIvwl52O5KQd37+jntCMtCNPXRywCKMB4F5txq6fj0RZBcNrN59OQdwb DdA309fmDJSb0IBhcAOMpfbury0aRH7i14ht5HAxvlE9aEcn2/dpk72BI+BCgMgl fq51jmcL7nvqMwuktZ72rDNk0tpdH7ssGigoqVYakG+r++vGKnVc9Ttg37lcADv7 G/DaoxrLZFvs9PGiTvgGzhLBldULwW4uCgzzkT27gKcmA1i/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP4bgbfiBYmlhcH1xqcKJBFugWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZTA5NWZhZmEtZTZhYi0z MzQ2LTkwNTgtYjRlMmE3OWQwZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEbJIXHXTGdDEpzi2/07I87GaMxDEHuFwscKmGL+Ba9ngFt7Ep0V3hy KloBhgDYCVhYtfMnXi2u0WxT0pFyzlJjNx3Q9K4u4vjENqCnkOZvsCfewBatoXc8 mxfF5HaUjqwKJEtwEFXKtHIPFqg/T+jBKFS7ZaF754/Ihl8DuX8rJH8IcPoDSvea tSaI+7wZMgw4ptTyksTkMF3VsAujTgPkIEhbMeMXJa9+qiMAPPU/rysrLSxhPHuH drbwJRWE6r0I10jMHIRTi+RO/XWsqExOBl4FRbS0Aw0bhzNTLct+/oGSU/QjBoZM Zcd6T8mmRiEpHBqmI1o8xMxIbbyX1Vc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:24:31 2025 by rpki-client