$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/43d86503-0205-3354-af7e-4594223a45bf.roa File: 43d86503-0205-3354-af7e-4594223a45bf.roa (raw, json) Hash identifier: iowB/PAy4INVbGYkNTIAicxZKXHuEdKJYiFd6Zk/XiU= Subject key identifier: 7A:D0:92:A0:44:A6:2F:10:26:87:B8:B2:FA:D1:29:F0:F2:03:D4:E4 Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Certificate serial: 010D0C9F4328584B821CB767B4139A96299F3500 Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/43d86503-0205-3354-af7e-4594223a45bf.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 834 IP address blocks: 199.101.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:b7:67:b4:13:9a:96:29:9f:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=8b0ed30b-4d80-486d-baea-54d7200b1ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:86:d1:d1:51:06:ae:46:4a:82:7c:7c:a4: 00:37:10:9a:01:31:66:38:fe:ae:43:8d:83:e0:3c: d3:59:13:1c:84:e3:05:3f:43:ce:7a:79:de:49:45: 9d:6d:0d:16:da:28:ab:1f:00:91:b9:f1:17:79:f0: 34:88:4f:4f:1c:f7:03:d6:94:08:b9:b1:9b:84:f9: 3e:ce:8c:66:cd:38:59:52:0b:70:43:1c:7b:bc:c3: 8e:f2:64:1e:84:77:1f:e8:aa:fe:0f:80:4c:9c:a8: 39:02:ba:3a:d6:20:06:1f:3a:26:d7:d5:f4:2d:d4: 8f:a7:07:14:86:36:da:37:24:7f:a2:9d:ce:c0:dc: 96:0b:14:64:e8:da:f4:b9:37:19:77:df:54:95:bc: 59:fc:65:4f:e0:de:b1:33:30:18:20:81:b4:7e:26: 2d:fd:79:26:8f:ee:53:ea:c9:57:78:02:fa:58:b9: 4f:b0:88:fc:1e:61:7b:67:c0:49:27:0d:ae:e2:3c: 69:3f:7a:dc:14:f6:da:ee:89:84:b2:f0:4c:bc:8e: 42:58:5b:80:47:6c:18:fd:1e:12:2f:cc:27:57:a0: 3b:75:37:c9:14:cd:3d:5a:42:df:f7:c2:13:4c:92: 2c:69:99:4b:63:bc:3a:2f:c4:fb:c5:c1:11:7d:7a: 15:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D0:92:A0:44:A6:2F:10:26:87:B8:B2:FA:D1:29:F0:F2:03:D4:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/43d86503-0205-3354-af7e-4594223a45bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl X509v3 Authority Key Identifier: keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer sbgp-ipAddrBlock: critical IPv4: 199.101.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:85:ff:6b:4b:72:00:8a:df:25:c6:67:6b:91:59:5e:42:8c: 26:53:15:59:eb:ae:f8:ab:86:63:65:13:0a:4f:30:cb:21:dd: 7e:e4:87:fb:f1:fd:54:fa:a8:16:01:b2:3d:e1:83:f3:93:1b: 81:97:b9:cd:db:f4:ed:fa:22:da:4c:fe:5f:ef:aa:f4:ff:ad: 2a:70:12:62:9a:35:ac:bd:91:d2:af:8e:33:f6:9b:d4:a5:78: 2f:21:cd:9f:23:27:50:ea:a9:38:9b:4f:77:5c:92:78:e0:05: a1:09:6a:86:96:95:79:8d:90:04:0f:7d:db:dc:ec:d7:61:bd: 9f:f9:2c:c1:f0:b5:c0:10:92:a9:57:5c:9f:ed:9f:81:e8:8f: 2b:00:ea:58:94:59:14:e7:63:f8:28:55:f5:eb:48:06:df:95: 3c:73:0a:0f:38:72:29:20:be:c6:93:99:2e:2a:49:57:ee:7a: f8:2c:9d:c0:2c:3c:08:24:12:a7:94:35:c4:21:9b:42:3f:bf: 05:71:05:ed:4c:b8:e4:03:02:58:86:c2:29:4d:55:74:f6:56: e0:ff:d0:a8:3a:df:0f:c0:12:25:4f:9a:37:db:89:f6:49:11: 21:bc:0f:11:59:53:50:ea:2f:05:f6:c4:08:98:28:75:24:51: 30:26:ac:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHLdntBOalimfNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZGUxZmUtNzUyNS00OWUzLTk3MTgtNDEyYzEzY2Q0 MmNhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OGIwZWQzMGItNGQ4MC00ODZkLWJhZWEtNTRkNzIwMGIxYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypqG0dFRBq5GSoJ8fKQANxCaATFmOP6uQ42D 4DzTWRMchOMFP0POenneSUWdbQ0W2iirHwCRufEXefA0iE9PHPcD1pQIubGbhPk+ zoxmzThZUgtwQxx7vMOO8mQehHcf6Kr+D4BMnKg5Aro61iAGHzom19X0LdSPpwcU hjbaNyR/op3OwNyWCxRk6Nr0uTcZd99UlbxZ/GVP4N6xMzAYIIG0fiYt/Xkmj+5T 6slXeAL6WLlPsIj8HmF7Z8BJJw2u4jxpP3rcFPba7omEsvBMvI5CWFuAR2wY/R4S L8wnV6A7dTfJFM09WkLf98ITTJIsaZlLY7w6L8T7xcERfXoVIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrQkqBEpi8QJoe4svrRKfDyA9TkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRk ZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJjMTNjZDQyY2EvNDNkODY1MDMtMDIwNS0z MzU0LWFmN2UtNDU5NDIyM2E0NWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRkZGUxZmUtNzUyNS00OWUzLTk3 MTgtNDEyYzEzY2Q0MmNhLzVkZGRlMWZlLTc1MjUtNDllMy05NzE4LTQxMmMxM2Nk NDJjYS5jcmwwHwYDVR0jBBgwFoAUPyEX+C90LrvdwcZoG6YcjoqBYSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGRkZTFmZS03NTI1LTQ5ZTMtOTcxOC00MTJj MTNjZDQyY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2XCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuF/2tLcgCK3yXGZ2uRWV5CjCZTFVnrrvirhmNlEwpPMMsh3X7kh/vx /VT6qBYBsj3hg/OTG4GXuc3b9O36ItpM/l/vqvT/rSpwEmKaNay9kdKvjjP2m9Sl eC8hzZ8jJ1DqqTibT3dcknjgBaEJaoaWlXmNkAQPfdvc7NdhvZ/5LMHwtcAQkqlX XJ/tn4HojysA6liUWRTnY/goVfXrSAbflTxzCg84cikgvsaTmS4qSVfuevgsncAs PAgkEqeUNcQhm0I/vwVxBe1MuOQDAliGwilNVXT2VuD/0Kg63w/AEiVPmjfbifZJ ESG8DxFZU1DqLwX2xAiYKHUkUTAmrJI= -----END CERTIFICATE-----Generated at Sun Oct 19 14:47:44 2025 by rpki-client