$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa File: 8443b0db-29e2-35db-b8e1-34359b0b5e82.roa (raw, json) Hash identifier: u6UWFPcKkdV1+R9pxxjtT07GnQmoHevEywIzv8T+h5Q= Subject key identifier: 54:63:B0:5C:23:17:CF:4D:85:5C:8A:69:5E:41:11:CC:29:57:67:86 Certificate issuer: /CN=a38ff47f-825f-4455-b429-60f899d42ec6 Certificate serial: 010D0C9F4328584AC2E104ECA72BA4C2369F5980 Authority key identifier: 5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 399840 IP address blocks: 192.43.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:04:ec:a7:2b:a4:c2:36:9f:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38ff47f-825f-4455-b429-60f899d42ec6 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=468aaf55-7b4c-42f5-a0f0-347bfcb70beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:f4:ab:a7:29:1e:0a:df:2a:b9:d5:8c:a0: 40:f4:f1:8a:62:24:8f:6f:31:85:a8:14:bd:f7:11: 37:f6:a2:1a:cd:3f:a6:f1:b0:35:c4:69:ad:da:ad: 4e:cc:95:98:7f:ce:11:35:e6:23:9e:f6:33:0c:25: bb:dd:ea:bd:94:66:75:42:7b:a2:e0:50:d9:0d:36: 45:b9:03:f1:4e:0e:55:00:42:bb:de:39:07:75:69: f0:07:7b:ef:22:0f:6a:04:51:f5:a7:51:50:a2:dd: e1:80:f0:12:62:7b:0b:2f:a8:7d:92:b8:52:3f:bf: ba:de:72:3d:d4:a5:a4:b7:6e:d9:a2:ed:98:5f:a2: e2:aa:d6:a9:9f:73:60:35:bc:6d:70:1d:be:6e:30: 5c:7a:9b:f0:e9:e0:f6:ce:52:48:c6:36:5b:5e:50: 7d:7e:46:aa:82:1e:35:f9:39:b0:f9:0f:6a:62:54: 0d:c1:8f:21:49:2b:52:80:60:66:1d:40:dc:b9:bd: d1:82:ef:84:ab:47:a4:81:b9:61:a0:67:42:99:74: 3a:f9:e0:07:96:df:77:c8:a7:10:a6:e9:17:56:f1: 21:31:46:f4:d0:69:e7:4b:4c:25:ee:f5:27:49:a5: d7:75:e8:a8:dd:7b:15:6e:e6:e3:7e:b9:75:ea:3e: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:63:B0:5C:23:17:CF:4D:85:5C:8A:69:5E:41:11:CC:29:57:67:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.crl X509v3 Authority Key Identifier: keyid:5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer sbgp-ipAddrBlock: critical IPv4: 192.43.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:21:bc:01:f2:14:c5:89:78:75:3d:93:ab:e7:f8:9a:7a:2e: 65:17:3b:82:ed:88:39:e1:ea:76:5e:8d:99:7a:9b:bf:71:fe: 0f:2e:85:ed:66:d0:99:50:40:06:84:a0:c5:29:1d:38:4c:ed: 9e:4a:4e:6d:46:94:ef:f3:ed:29:be:8b:97:1e:d9:e9:39:e9: da:f0:6a:42:3a:b4:e8:73:34:b2:82:6d:22:d1:7d:e1:6b:c3: 66:c7:ec:6f:81:f6:63:92:5b:94:cd:07:d7:82:f7:01:a2:18: f9:64:a3:10:c7:30:4d:68:7c:9d:f4:7e:8b:80:9e:84:e2:6c: 87:ee:c8:28:54:a7:72:ad:88:a3:44:38:a9:20:e5:8d:90:09: 22:4a:a9:08:05:1f:96:08:f4:a9:39:43:f2:50:b2:e1:ef:06: 8e:ca:17:81:d3:81:63:37:a2:ed:c8:c1:5c:ee:ec:61:28:98: d9:e9:71:cb:20:be:f2:58:1e:2b:6e:ad:b9:79:5d:84:d3:e1: df:ae:bc:c4:0f:4b:a8:90:67:da:0a:74:5b:7f:d4:ac:19:8a: 9a:c0:d6:c1:eb:86:ab:20:51:3d:c5:d0:ba:f8:1f:59:be:7a: b7:5f:b9:f2:17:18:90:bf:92:cd:fd:d5:70:35:d7:e8:25:c7: 54:ea:3a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QTspyukwjafWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM4ZmY0N2YtODI1Zi00NDU1LWI0MjktNjBmODk5ZDQy ZWM2MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDY4YWFmNTUtN2I0Yy00MmY1LWEwZjAtMzQ3YmZjYjcwYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRP0q6cpHgrfKrnVjKBA9PGKYiSPbzGFqBS9 9xE39qIazT+m8bA1xGmt2q1OzJWYf84RNeYjnvYzDCW73eq9lGZ1Qnui4FDZDTZF uQPxTg5VAEK73jkHdWnwB3vvIg9qBFH1p1FQot3hgPASYnsLL6h9krhSP7+63nI9 1KWkt27Zou2YX6Liqtapn3NgNbxtcB2+bjBcepvw6eD2zlJIxjZbXlB9fkaqgh41 +Tmw+Q9qYlQNwY8hSStSgGBmHUDcub3Rgu+Eq0ekgblhoGdCmXQ6+eAHlt93yKcQ pukXVvEhMUb00GnnS0wl7vUnSaXXdeio3XsVbubjfrl16j5n6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRjsFwjF89NhVyKaV5BEcwpV2eGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMzhm ZjQ3Zi04MjVmLTQ0NTUtYjQyOS02MGY4OTlkNDJlYzYvODQ0M2IwZGItMjllMi0z NWRiLWI4ZTEtMzQzNTliMGI1ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTM4ZmY0N2YtODI1Zi00NDU1LWI0 MjktNjBmODk5ZDQyZWM2L2EzOGZmNDdmLTgyNWYtNDQ1NS1iNDI5LTYwZjg5OWQ0 MmVjNi5jcmwwHwYDVR0jBBgwFoAUWzyP2EiFClYUqC5lRFnJvaAUW2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMzhmZjQ3Zi04MjVmLTQ0NTUtYjQyOS02MGY4 OTlkNDJlYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwhvAHyFMWJeHU9k6vn+Jp6LmUXO4LtiDnh6nZejZl6m79x/g8uhe1m 0JlQQAaEoMUpHThM7Z5KTm1GlO/z7Sm+i5ce2ek56drwakI6tOhzNLKCbSLRfeFr w2bH7G+B9mOSW5TNB9eC9wGiGPlkoxDHME1ofJ30fouAnoTibIfuyChUp3KtiKNE OKkg5Y2QCSJKqQgFH5YI9Kk5Q/JQsuHvBo7KF4HTgWM3ou3IwVzu7GEomNnpccsg vvJYHiturbl5XYTT4d+uvMQPS6iQZ9oKdFt/1KwZiprA1sHrhqsgUT3F0Lr4H1m+ erdfufIXGJC/ks391XA11+glx1TqOrg= -----END CERTIFICATE-----Generated at Sun Aug 24 00:27:36 2025 by rpki-client