$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa File: f6064a69-8e2a-30ff-a4e0-a91669f30752.roa (raw, json) Hash identifier: zhY3Tgj4ntlFRpy1Lezr5xcffQd3tfWLPltshmd289Y= Subject key identifier: 67:A4:FE:E4:5B:F0:1F:07:E7:1D:F6:4E:2A:F8:0D:BB:CF:93:22:22 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584A050A77EE8E7989DB6309AC40 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 398156 IP address blocks: 158.120.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:77:ee:8e:79:89:db:63:09:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=d8fd1ed5-b6bd-42cc-87b8-ee0c12a96409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:31:ff:00:d6:43:e4:e4:5e:46:8a:1d:ad: 09:d6:36:25:b3:f8:a4:f6:28:f0:fa:5e:4d:d1:64: 32:a6:08:0a:90:01:ed:3d:4e:67:06:72:f9:6f:6a: ab:c8:5c:3a:32:02:cb:66:82:26:50:f0:89:81:7b: 4d:19:e0:f8:ba:9d:9f:38:07:10:0b:e7:27:4f:41: 01:d7:e3:d6:44:a2:dc:4c:7f:85:62:f4:a7:3b:56: aa:24:b2:db:5c:8f:6d:ef:31:68:80:1e:46:b4:53: 23:8f:77:f1:7c:b8:ee:19:13:df:7a:db:7c:c8:57: 8f:11:7d:e9:85:e3:8d:a3:b4:d4:1a:aa:a3:4a:fd: 0a:ef:cc:75:47:7d:a5:5e:a1:f7:bb:13:73:58:70: d3:41:f2:fe:31:41:bf:b3:a1:4d:4f:76:5a:f1:b3: 4e:8f:b2:46:41:d5:39:53:f5:bc:0c:88:2a:47:74: 98:ab:c5:31:35:96:16:26:4d:bc:fc:32:f0:ee:07: 39:ab:8b:49:22:a8:7d:1a:ed:10:ad:24:91:07:ce: a2:d2:ee:66:a0:07:d2:be:ab:ac:35:3c:a6:8c:e4: 94:ec:86:eb:29:41:8b:72:81:68:de:60:c0:06:9c: 37:0f:59:58:89:19:db:6b:cc:28:5e:e4:e5:8f:eb: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A4:FE:E4:5B:F0:1F:07:E7:1D:F6:4E:2A:F8:0D:BB:CF:93:22:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/f6064a69-8e2a-30ff-a4e0-a91669f30752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4c:2f:61:53:7d:6b:24:a9:0e:72:e4:72:fd:1c:88:de:59: 6f:1d:93:11:7c:4e:39:6d:de:f7:7c:52:e0:fd:de:1b:9d:83: 81:d2:0a:96:21:e1:36:62:7c:03:fc:10:6b:59:23:b9:c5:26: b5:1c:f3:30:ec:c7:ee:47:9c:b4:f9:7f:74:e6:e0:21:de:fa: e9:0b:b3:4a:ae:1e:53:2d:d5:66:ac:d6:eb:d2:eb:67:a6:5d: 68:55:b2:43:c9:03:2e:00:2a:a2:52:6c:aa:87:08:17:a6:5b: c6:ab:c9:0c:37:3e:ab:eb:14:f9:1b:64:9a:e5:86:57:05:73: dd:68:6b:d8:33:5a:4b:b4:31:c2:49:26:2a:94:29:47:5f:ee: aa:57:65:6b:4e:e9:cb:b3:e7:5f:c2:c3:df:dd:61:a0:27:05: dc:d8:b3:a4:51:44:12:d9:5e:76:fe:9e:52:9e:9c:eb:9e:15: b9:05:c2:0f:2f:ff:0c:b2:f5:9a:a3:1d:57:cc:29:be:0e:2c: 36:4b:e8:c0:5b:e9:74:93:c4:72:89:8d:68:90:f5:40:29:56: d5:80:79:e3:06:fd:14:c6:06:af:ad:a0:ed:ed:08:4f:d5:21: 32:f9:95:73:e2:1d:8c:ff:75:66:ca:17:46:3a:2f:3b:24:85: 34:bb:88:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnfujnmJ22MJrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk ZDhmZDFlZDUtYjZiZC00MmNjLTg3YjgtZWUwYzEyYTk2NDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZUx/wDWQ+TkXkaKHa0J1jYls/ik9ijw+l5N 0WQypggKkAHtPU5nBnL5b2qryFw6MgLLZoImUPCJgXtNGeD4up2fOAcQC+cnT0EB 1+PWRKLcTH+FYvSnO1aqJLLbXI9t7zFogB5GtFMjj3fxfLjuGRPfett8yFePEX3p heONo7TUGqqjSv0K78x1R32lXqH3uxNzWHDTQfL+MUG/s6FNT3Za8bNOj7JGQdU5 U/W8DIgqR3SYq8UxNZYWJk28/DLw7gc5q4tJIqh9Gu0QrSSRB86i0u5moAfSvqus NTymjOSU7IbrKUGLcoFo3mDABpw3D1lYiRnba8woXuTlj+t80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGek/uRb8B8H5x32Tir4DbvPkyIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZjYwNjRhNjktOGUyYS0z MGZmLWE0ZTAtYTkxNjY5ZjMwNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZML2FTfWskqQ5y5HL9HIjeWW8dkxF8Tjlt3vd8UuD93hudg4HSCpYh 4TZifAP8EGtZI7nFJrUc8zDsx+5HnLT5f3Tm4CHe+ukLs0quHlMt1Was1uvS62em XWhVskPJAy4AKqJSbKqHCBemW8aryQw3PqvrFPkbZJrlhlcFc91oa9gzWku0McJJ JiqUKUdf7qpXZWtO6cuz51/Cw9/dYaAnBdzYs6RRRBLZXnb+nlKenOueFbkFwg8v /wyy9ZqjHVfMKb4OLDZL6MBb6XSTxHKJjWiQ9UApVtWAeeMG/RTGBq+toO3tCE/V ITL5lXPiHYz/dWbKF0Y6LzskhTS7iJI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:01:11 2025 by rpki-client