$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa File: 43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa (raw, json) Hash identifier: fNnEOzQs8r/zcKawAaN9gCrbdXjY9mleVCebIrfs0As= Subject key identifier: 6E:61:CA:37:67:0C:09:F4:1C:07:E9:A2:F4:8C:FD:CF:BB:72:BF:A4 Certificate issuer: /CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Certificate serial: 010D0C9F4328584B1AD18DC5E0F2C31C19854780 Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40628 IP address blocks: 204.62.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8d:c5:e0:f2:c3:1c:19:85:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=fae22f9a-e865-4006-8007-fcf5397f6774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:f8:7c:75:f6:df:50:f8:b5:d6:30:d4:db: 13:48:3e:9e:19:69:c7:a2:54:08:bc:58:ad:6a:c1: 6c:0e:40:5d:42:22:0e:f6:9b:ef:ea:2c:ef:33:bf: c0:19:07:1f:9f:b8:62:95:46:fd:9f:06:3b:8b:b5: b9:71:76:55:4a:0a:f1:2d:5e:1a:75:77:9d:fd:7f: ca:28:ca:3f:cc:d6:7d:e5:86:48:bc:34:af:7f:15: 25:37:6e:3b:04:5e:89:60:f1:21:3e:10:9b:d4:43: 33:7a:34:84:6f:6c:b5:0f:9f:2f:f8:28:ff:9b:e5: a3:d1:cb:aa:f0:f4:04:ea:f0:57:b4:40:2f:f8:13: fd:a2:60:f0:09:7d:3d:fb:f3:d3:99:78:9a:f9:2c: 60:d5:09:ac:36:ef:f2:9c:ea:f0:fe:94:14:06:4b: 40:3e:d6:d0:64:e6:8b:c0:04:19:9f:90:10:0c:98: b3:8b:7c:88:42:84:4d:6a:38:d9:45:6e:f0:05:34: 8b:1e:60:2e:26:4c:a0:44:47:e3:9d:ac:2e:80:81: bf:b9:16:cd:8b:9f:a6:bd:10:e8:7d:3a:09:0c:a2: b4:01:07:9d:5b:21:3c:9f:ca:bb:7f:4d:36:74:ca: a8:b1:ee:88:1c:7a:90:8a:c8:d9:20:7a:20:c8:26: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:CA:37:67:0C:09:F4:1C:07:E9:A2:F4:8C:FD:CF:BB:72:BF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl X509v3 Authority Key Identifier: keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer sbgp-ipAddrBlock: critical IPv4: 204.62.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:64:09:1b:6f:7a:a8:53:1f:ba:c9:d0:f2:1c:7b:46:0a:ed: 62:95:70:2c:8e:ef:fa:f9:bb:7a:c4:84:48:ea:f6:4a:b5:5a: b9:90:85:43:09:fb:1f:8f:0d:4f:34:55:97:2d:0b:9e:c3:6e: 48:d5:ec:99:a2:33:78:61:2d:7a:68:51:83:f0:51:ec:ba:31: 5e:a3:3d:d1:65:d6:92:44:a2:df:d6:1f:13:45:c2:8e:ef:3d: 68:69:cd:a5:36:e1:90:be:a5:eb:83:2c:6d:39:90:c5:e1:d1: 6c:a2:9f:9d:85:a2:4d:8e:44:e0:18:8f:89:30:e7:ce:c5:a5: ec:50:7a:6c:91:b7:f8:7c:d6:2c:6f:7b:c7:58:99:bc:d6:bb: be:fd:2b:72:bf:e2:b7:e5:06:76:92:c7:a4:e8:1b:32:1f:45: f8:a5:f6:29:3c:ca:28:b1:30:0b:45:ba:09:87:db:37:95:7e: 29:b2:c5:bf:15:55:6e:96:32:2a:a4:38:d4:ca:ee:4a:81:2e: 8d:1d:5b:35:49:62:6d:b9:83:dc:37:aa:85:8d:06:f9:6a:72: 07:4b:48:02:19:b7:29:4b:91:35:a0:5e:2f:9e:67:18:30:76: 11:92:41:82:b6:8b:a7:5f:80:6d:31:51:f3:67:50:33:0f:a3: 0b:98:b6:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Y3F4PLDHBmFR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4 YTU3MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZmFlMjJmOWEtZTg2NS00MDA2LTgwMDctZmNmNTM5N2Y2Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr34fHX231D4tdYw1NsTSD6eGWnHolQIvFit asFsDkBdQiIO9pvv6izvM7/AGQcfn7hilUb9nwY7i7W5cXZVSgrxLV4adXed/X/K KMo/zNZ95YZIvDSvfxUlN247BF6JYPEhPhCb1EMzejSEb2y1D58v+Cj/m+Wj0cuq 8PQE6vBXtEAv+BP9omDwCX09+/PTmXia+Sxg1QmsNu/ynOrw/pQUBktAPtbQZOaL wAQZn5AQDJizi3yIQoRNajjZRW7wBTSLHmAuJkygREfjnawugIG/uRbNi5+mvRDo fToJDKK0AQedWyE8n8q7f002dMqose6IHHqQisjZIHogyCY4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5hyjdnDAn0HAfpovSM/c+7cr+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFm ODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvNDM5NDBkY2MtMmRkYy0z OTZlLWI5ZWEtMTM0MWRjZmNkNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTkxZjgxZmYtNTMxNy00MGY0LWE1 NDQtNWRmMmUzMzU4YTU3L2E5MWY4MWZmLTUzMTctNDBmNC1hNTQ0LTVkZjJlMzM1 OGE1Ny5jcmwwHwYDVR0jBBgwFoAUNAcTZw8RHbNMsi51vbBuS9RfIl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYy ZTMzNThhNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzD4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtkCRtveqhTH7rJ0PIce0YK7WKVcCyO7/r5u3rEhEjq9kq1WrmQhUMJ +x+PDU80VZctC57DbkjV7JmiM3hhLXpoUYPwUey6MV6jPdFl1pJEot/WHxNFwo7v PWhpzaU24ZC+peuDLG05kMXh0Wyin52Fok2OROAYj4kw587FpexQemyRt/h81ixv e8dYmbzWu779K3K/4rflBnaSx6ToGzIfRfil9ik8yiixMAtFugmH2zeVfimyxb8V VW6WMiqkONTK7kqBLo0dWzVJYm25g9w3qoWNBvlqcgdLSAIZtylLkTWgXi+eZxgw dhGSQYK2i6dfgG0xUfNnUDMPowuYtpM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:27:44 2025 by rpki-client