$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa File: 3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa (raw, json) Hash identifier: zy8f3nQndxCToIqZ2oDue6QMNzPJmQtJjVvo2rhuhjI= Subject key identifier: 1B:7A:1F:B9:36:45:35:B7:5A:D1:D7:71:86:DA:56:1C:99:9E:EC:24 Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Certificate serial: 010D0C9F4328584B6E91FA83B32BE249122F0EC0 Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 397453 IP address blocks: 143.223.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:fa:83:b3:2b:e2:49:12:2f:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=44f2bb81-ade0-4c9a-ace7-b9536020daff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:d1:36:e4:16:ab:9f:0c:7c:68:67:ba:77: 85:51:e9:9a:44:0d:5d:23:69:de:bc:3c:67:f4:67: a9:53:3f:0a:19:e4:2a:d5:72:97:b5:40:ce:17:ac: 0c:1c:52:7c:97:15:1e:c5:d6:7a:01:9f:9a:82:06: 7a:b9:4e:03:19:66:c5:ce:32:5c:33:3a:b2:40:66: e6:e4:89:bb:50:4b:f9:84:c7:7e:87:a1:66:67:48: 60:c8:a3:7c:4a:40:1a:d3:4c:84:19:c4:a0:9a:11: 27:a5:c1:7a:7a:08:01:80:1e:10:04:07:85:a2:27: 86:1d:82:99:7b:cc:a5:6f:b6:28:4f:a3:6c:6f:b1: 5e:1f:65:ad:ca:3b:16:83:65:cd:03:c4:4d:05:fb: ed:f8:31:e0:b0:f3:8c:42:9f:25:6b:f4:74:2f:b0: c9:59:98:f3:ca:90:fa:c8:0d:74:23:27:92:79:99: c0:c6:98:f6:25:9b:2f:a9:c9:2c:d6:78:44:b4:77: 25:3a:e6:1d:49:ca:58:78:74:ec:16:6d:9d:d7:f1: b4:0f:2f:50:07:07:64:e2:be:31:3d:5d:99:2a:5c: 8f:b6:21:ad:d7:93:b9:79:95:09:d1:d2:75:ab:cf: 81:a4:a9:5d:2d:a7:b2:7e:8d:93:7f:9b:ba:c7:51: 9a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:1F:B9:36:45:35:B7:5A:D1:D7:71:86:DA:56:1C:99:9E:EC:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/3dd9312b-0b44-3178-a2d7-c6ad8886f840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl X509v3 Authority Key Identifier: keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer sbgp-ipAddrBlock: critical IPv4: 143.223.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a1:41:cb:8d:f5:c2:3a:2c:ff:b1:f1:0d:74:63:99:c2:07: b7:14:17:13:ae:88:9e:01:68:ca:fc:c0:0b:98:3a:ee:a6:5d: fd:94:26:11:df:21:97:6c:25:04:44:53:3a:f9:a8:cf:1a:e6: da:3d:fb:ae:ac:cb:10:bc:0f:a7:15:fc:11:b7:65:c5:73:0b: 25:ff:50:75:d9:24:90:c3:6f:40:96:27:87:33:49:3c:d4:92: 05:27:5d:c8:1b:a8:64:97:55:f1:5e:77:5f:ab:d2:37:3d:5c: 7b:5f:4a:b5:1a:6c:aa:e7:64:a4:d3:ae:8c:4a:c3:ad:76:03: e2:51:b1:51:e2:51:ec:6e:88:63:52:64:d2:5a:c6:7c:6d:49: 15:98:74:6e:f4:6f:28:f9:71:fd:8b:20:9f:4c:7e:92:24:af: 3b:58:80:76:d8:2a:bd:a1:b8:13:d3:3f:f9:90:f2:bb:75:15: a6:77:cc:56:30:6a:65:58:37:58:78:8a:84:a9:eb:05:e9:d4: 16:92:0f:c5:6c:0b:ed:41:59:7a:61:ad:f5:a5:ed:f5:f0:0e: e8:32:e6:53:1a:0b:59:db:a6:2c:4d:c1:cd:6f:f8:a5:8b:e7: bb:6f:ec:cf:cc:20:e7:78:a1:08:18:d8:f0:62:08:38:6d:d9: 0c:0d:4b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfqDsyviSRIvDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz NTgzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk NDRmMmJiODEtYWRlMC00YzlhLWFjZTctYjk1MzYwMjBkYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrLRNuQWq58MfGhnuneFUemaRA1dI2nevDxn 9GepUz8KGeQq1XKXtUDOF6wMHFJ8lxUexdZ6AZ+aggZ6uU4DGWbFzjJcMzqyQGbm 5Im7UEv5hMd+h6FmZ0hgyKN8SkAa00yEGcSgmhEnpcF6eggBgB4QBAeFoieGHYKZ e8ylb7YoT6Nsb7FeH2WtyjsWg2XNA8RNBfvt+DHgsPOMQp8la/R0L7DJWZjzypD6 yA10IyeSeZnAxpj2JZsvqcks1nhEtHclOuYdScpYeHTsFm2d1/G0Dy9QBwdk4r4x PV2ZKlyPtiGt15O5eZUJ0dJ1q8+BpKldLaeyfo2Tf5u6x1GadQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt6H7k2RTW3WtHXcYbaVhyZnuwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvM2RkOTMxMmItMGI0NC0z MTc4LWEyZDctYzZhZDg4ODZmODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0 ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0 MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj9/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWhQcuN9cI6LP+x8Q10Y5nCB7cUFxOuiJ4BaMr8wAuYOu6mXf2UJhHf IZdsJQREUzr5qM8a5to9+66syxC8D6cV/BG3ZcVzCyX/UHXZJJDDb0CWJ4czSTzU kgUnXcgbqGSXVfFed1+r0jc9XHtfSrUabKrnZKTTroxKw612A+JRsVHiUexuiGNS ZNJaxnxtSRWYdG70byj5cf2LIJ9MfpIkrztYgHbYKr2huBPTP/mQ8rt1FaZ3zFYw amVYN1h4ioSp6wXp1BaSD8VsC+1BWXphrfWl7fXwDugy5lMaC1nbpixNwc1v+KWL 57tv7M/MIOd4oQgY2PBiCDht2QwNS3c= -----END CERTIFICATE-----Generated at Wed Oct 22 00:11:50 2025 by rpki-client