$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa File: 10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa (raw, json) Hash identifier: wkPqp3fR2ahPpliVn18wHbUyGhMxSlNn3LEekQZ1AwY= Subject key identifier: 7E:2C:50:19:46:7D:39:B5:D0:EE:42:F2:91:1B:F3:06:63:30:8E:27 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B7F52118FB3E7B74A3AC8BA00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 204670 IP address blocks: 168.143.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:11:8f:b3:e7:b7:4a:3a:c8:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a2063480-69aa-4b58-8c6f-4c9e87f83444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:29:b3:30:2c:b1:bc:fa:3e:a3:f7:1e:4f:42: 6c:f1:72:d7:16:31:7b:2e:70:59:e8:55:9e:ab:87: d1:f8:f4:cf:f8:f5:7f:99:fb:ca:b3:7c:39:3d:df: 34:01:91:5b:ab:b3:9f:ba:61:4c:90:fd:6c:97:40: 91:9e:a5:3b:23:b8:c4:2b:34:ea:ff:70:6d:cf:ac: 01:8a:f2:91:33:14:3d:1d:25:b9:37:b8:8e:7d:b1: 49:65:bd:c3:ee:3a:d8:f4:af:e2:dc:f1:a7:28:dc: 50:45:ff:2e:15:18:48:13:7e:e8:b0:20:30:0f:77: 1d:a6:8b:02:f4:f9:bc:5c:5b:c7:62:4b:07:fc:37: 6d:f7:2e:bc:83:a5:11:8c:24:aa:99:b3:60:67:bb: 09:0f:cb:cc:04:3a:6a:86:9f:d5:22:7f:8a:71:16: 9d:cf:80:34:2c:8b:be:42:ed:f3:bb:fb:f1:5c:42: 56:64:9b:a9:70:84:93:1a:de:e7:ca:88:95:38:17: cb:f6:b1:ab:e4:6c:fd:3a:3d:94:fe:5d:83:eb:f4: e3:68:ce:b1:2f:c0:5e:29:0b:2e:9f:21:e5:2b:e8: fa:96:8c:fe:5f:2f:52:05:67:6d:6b:45:ab:0c:f7: b7:78:36:f7:99:78:d5:20:9b:60:4a:80:ee:b0:03: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2C:50:19:46:7D:39:B5:D0:EE:42:F2:91:1B:F3:06:63:30:8E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/10f4aeae-e3e5-3d73-a8ed-0f5c01b0148c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:88:fe:af:ec:51:5d:ba:7b:7c:d4:6d:52:c9:d0:29:12:93: 32:ec:39:a7:74:7d:7a:7b:e9:05:c3:00:8f:af:7c:00:fa:02: 9e:11:22:fa:65:e0:8f:7b:5d:4a:62:96:e5:ea:19:21:93:de: b1:a1:85:36:c0:ee:97:98:86:71:01:3d:ad:64:05:bb:21:8d: 46:cc:c4:21:06:30:03:a5:06:fb:4a:00:99:2c:27:9d:48:62: 30:7e:78:16:f8:bc:21:33:bd:9a:0c:85:2f:c5:55:34:63:1b: 97:6f:13:c8:de:67:bc:56:f8:11:df:f3:08:ea:76:62:2e:dd: d0:aa:38:2e:e0:b8:c2:43:50:0b:c1:70:c5:4b:06:4c:af:47: 1a:a3:ac:92:47:1f:f3:32:15:86:47:3a:81:ce:5c:48:f8:c3: 65:2f:48:18:11:b2:ac:bd:0e:63:8f:b3:05:9a:46:dd:77:2b: 5a:b9:1b:9b:f1:5b:d4:e6:f2:2e:af:50:08:0b:25:d9:73:39: 46:8e:bb:4e:04:4c:2d:62:ae:c2:3d:41:f4:34:1a:63:58:04: 49:9c:4f:6a:84:41:e4:03:88:7b:c3:fe:4e:f3:7f:bc:42:c8: fe:27:1f:b3:0a:fd:3a:c4:a5:38:81:1c:4f:32:c2:48:c8:88: b8:79:e7:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhGPs+e3SjrIugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTIwNjM0ODAtNjlhYS00YjU4LThjNmYtNGM5ZTg3ZjgzNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgymzMCyxvPo+o/ceT0Js8XLXFjF7LnBZ6FWe q4fR+PTP+PV/mfvKs3w5Pd80AZFbq7OfumFMkP1sl0CRnqU7I7jEKzTq/3Btz6wB ivKRMxQ9HSW5N7iOfbFJZb3D7jrY9K/i3PGnKNxQRf8uFRhIE37osCAwD3cdposC 9Pm8XFvHYksH/Ddt9y68g6URjCSqmbNgZ7sJD8vMBDpqhp/VIn+KcRadz4A0LIu+ Qu3zu/vxXEJWZJupcISTGt7nyoiVOBfL9rGr5Gz9Oj2U/l2D6/TjaM6xL8BeKQsu nyHlK+j6loz+Xy9SBWdta0WrDPe3eDb3mXjVIJtgSoDusAOFwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4sUBlGfTm10O5C8pEb8wZjMI4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTBmNGFlYWUtZTNlNS0z ZDczLWE4ZWQtMGY1YzAxYjAxNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqI+zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaI/q/sUV26e3zUbVLJ0CkSkzLsOad0fXp76QXDAI+vfAD6Ap4RIvpl 4I97XUpiluXqGSGT3rGhhTbA7peYhnEBPa1kBbshjUbMxCEGMAOlBvtKAJksJ51I YjB+eBb4vCEzvZoMhS/FVTRjG5dvE8jeZ7xW+BHf8wjqdmIu3dCqOC7guMJDUAvB cMVLBkyvRxqjrJJHH/MyFYZHOoHOXEj4w2UvSBgRsqy9DmOPswWaRt13K1q5G5vx W9Tm8i6vUAgLJdlzOUaOu04ETC1irsI9QfQ0GmNYBEmcT2qEQeQDiHvD/k7zf7xC yP4nH7MK/TrEpTiBHE8ywkjIiLh555w= -----END CERTIFICATE-----Generated at Mon Oct 20 05:13:05 2025 by rpki-client