$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa File: 43318d43-107a-3c35-937c-35cc2520acca.roa (raw, json) Hash identifier: 3tCm38rM9/2dMLjwTOcofeIX9gU/CUyYvthuh/814BY= Subject key identifier: 63:08:8A:D7:16:55:74:03:35:A0:3D:51:D2:A9:72:F6:EB:C7:0E:77 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584B79BCB048FEA2564A4AEBF080 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 12119 IP address blocks: 142.204.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b0:48:fe:a2:56:4a:4a:eb:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=4672432b-d3c8-4c71-830e-5f0f2a621ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:e4:03:6b:a0:46:1e:61:00:80:0c:cb:51: 02:ea:ee:4d:ac:ab:20:58:05:5f:f1:10:17:cb:78: 5e:12:a2:1c:b9:1d:88:1f:5b:e1:cb:26:a7:a1:49: fb:e5:45:32:0f:1c:56:26:e3:18:4a:c7:8c:87:0a: 8b:10:43:72:22:86:bc:52:1a:3b:32:47:1d:17:e7: db:d0:a7:d7:ae:20:c5:d4:8e:65:a1:02:59:81:ac: 9b:96:3d:4c:f3:00:58:28:24:36:ff:a5:1a:59:10: 2d:3d:8c:eb:de:b9:70:98:c8:ac:d7:01:8d:73:bb: 4d:b5:54:a3:b6:33:47:ba:d0:97:0a:f1:84:a6:51: f6:8e:83:60:d1:9b:3d:b4:90:6e:4a:0e:e6:78:e4: 36:65:f4:34:b2:e1:7c:84:62:0e:b6:0e:c4:65:00: 81:85:34:c7:bf:fa:97:14:f8:53:91:42:02:d2:d0: 74:09:70:24:61:3d:f6:0b:ae:6e:bc:d6:b7:13:b0: b7:fd:60:3e:83:48:06:17:fb:a8:bd:5d:05:c6:f2: a7:cb:a9:6d:17:38:f2:2b:f8:b1:22:46:74:4c:69: e3:bf:d5:ac:54:65:08:2b:b1:13:91:65:2e:97:09: 9a:e0:ab:54:8d:6a:c6:b4:08:62:8b:d3:87:be:ea: 55:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:08:8A:D7:16:55:74:03:35:A0:3D:51:D2:A9:72:F6:EB:C7:0E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 142.204.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8f:39:f1:08:be:bb:bc:2f:3a:ba:75:65:00:35:53:91:a7: 01:92:4d:8d:7d:f9:9a:70:cd:88:2e:49:c3:f1:fb:7b:1c:8e: dc:37:97:58:79:14:42:7e:c9:b8:38:ae:90:e4:c0:0e:a5:e6: 9f:f7:b2:ee:92:2e:b0:2d:9b:19:f6:f8:f0:a2:f9:ea:15:bb: bd:d7:e3:05:45:f9:ec:8e:af:4e:8b:7e:bc:b9:1d:ce:be:c5: 4f:f1:d1:8a:79:5c:4f:78:a9:a5:42:bd:83:47:ae:dd:e7:53: 9e:89:cf:79:29:e2:13:8b:d9:6f:69:3b:2b:0c:9c:9c:7f:ec: 9d:7b:25:e3:cb:0e:e6:bd:41:25:ea:79:ee:1a:62:42:49:2f: da:f3:da:21:7d:8b:f1:1e:94:26:08:30:fc:bd:7a:f3:aa:be: ae:55:b6:3e:47:46:12:d8:52:72:bb:53:b1:b1:7a:38:ba:58: fd:af:5d:7b:83:25:a7:11:d0:7e:5c:0a:15:0b:6a:a2:9a:17: c8:38:54:b4:33:e5:43:a5:ac:fa:04:ac:03:32:56:25:f5:bf: 5c:7b:68:50:79:ae:d1:4e:8e:4a:f2:32:90:ce:91:5b:c8:17: ea:e8:0e:35:7d:c6:1f:d1:fa:b9:67:01:0a:ff:aa:f1:bb:82: e1:f5:c8:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLBI/qJWSkrr8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDY3MjQzMmItZDNjOC00YzcxLTgzMGUtNWYwZjJhNjIxZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta/kA2ugRh5hAIAMy1EC6u5NrKsgWAVf8RAX y3heEqIcuR2IH1vhyyanoUn75UUyDxxWJuMYSseMhwqLEENyIoa8Uho7MkcdF+fb 0KfXriDF1I5loQJZgayblj1M8wBYKCQ2/6UaWRAtPYzr3rlwmMis1wGNc7tNtVSj tjNHutCXCvGEplH2joNg0Zs9tJBuSg7meOQ2ZfQ0suF8hGIOtg7EZQCBhTTHv/qX FPhTkUIC0tB0CXAkYT32C65uvNa3E7C3/WA+g0gGF/uovV0FxvKny6ltFzjyK/ix IkZ0TGnjv9WsVGUIK7ETkWUulwma4KtUjWrGtAhii9OHvupVcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMIitcWVXQDNaA9UdKpcvbrxw53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNDMzMThkNDMtMTA3YS0z YzM1LTkzN2MtMzVjYzI1MjBhY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjsxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuPOfEIvru8Lzq6dWUANVORpwGSTY19+ZpwzYguScPx+3scjtw3l1h5 FEJ+ybg4rpDkwA6l5p/3su6SLrAtmxn2+PCi+eoVu73X4wVF+eyOr06Lfry5Hc6+ xU/x0Yp5XE94qaVCvYNHrt3nU56Jz3kp4hOL2W9pOysMnJx/7J17JePLDua9QSXq ee4aYkJJL9rz2iF9i/EelCYIMPy9evOqvq5Vtj5HRhLYUnK7U7Gxeji6WP2vXXuD JacR0H5cChULaqKaF8g4VLQz5UOlrPoErAMyViX1v1x7aFB5rtFOjkryMpDOkVvI F+roDjV9xh/R+rlnAQr/qvG7guH1yC0= -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:00 2025 by rpki-client