$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/43f90493-d8a1-3901-918e-9cb84795016c.roa File: 43f90493-d8a1-3901-918e-9cb84795016c.roa (raw, json) Hash identifier: QFWJSCZJgxKZlpd2urVzNHSWGJ5gnHat4/UbfejsAUc= Subject key identifier: 34:FB:69:74:3D:99:C1:4E:CB:48:43:74:27:02:7B:6E:64:39:2A:A1 Certificate issuer: /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Certificate serial: 010D0C9F4328584B4A471FAAD95E4955DD152F80 Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/43f90493-d8a1-3901-918e-9cb84795016c.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 8075 IP address blocks: 138.32.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1f:aa:d9:5e:49:55:dd:15:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=23b3dfc4-f411-437c-8559-15df82f09376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:90:ea:97:6d:fc:3f:5b:dd:40:aa:47:a4:05: b6:2d:06:ca:70:02:53:44:17:35:c4:63:96:06:cc: ab:51:7b:84:f8:60:3d:56:66:fe:b0:87:f4:b6:62: 08:bc:07:e4:f2:e4:aa:24:ce:f4:28:98:5f:a3:48: ca:9e:2c:0c:82:51:38:ad:1e:f0:e0:4e:47:a3:8a: 26:91:5f:7e:38:47:c5:9f:ab:ec:57:7b:08:f9:0b: 41:f7:09:48:25:8f:3b:92:13:31:2b:3e:26:32:eb: 48:14:c0:c8:90:33:39:04:68:6b:94:69:0d:a4:ac: d6:cb:2a:f7:71:d7:3e:b7:47:e7:f2:78:d3:a3:9d: ab:2a:03:ce:cb:e4:8d:ee:c9:c7:2b:7a:7a:54:c3: de:4c:65:a5:84:a0:40:59:3a:6c:0c:bb:75:8d:b2: 65:e0:f2:9f:c9:b5:9d:28:a3:47:db:7e:b9:5e:08: a2:c7:99:52:76:79:72:2a:68:17:db:89:8c:04:4d: 00:50:24:ef:b5:c5:1e:a1:0d:eb:39:23:06:6c:ac: bc:38:34:ea:80:09:49:7a:8d:a8:6d:26:4a:9c:82: b9:44:4b:5f:60:7b:17:61:58:5f:cf:39:02:cc:51: 8d:22:3b:b7:b1:3e:75:b2:4c:f6:44:37:57:21:d2: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FB:69:74:3D:99:C1:4E:CB:48:43:74:27:02:7B:6E:64:39:2A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/43f90493-d8a1-3901-918e-9cb84795016c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl X509v3 Authority Key Identifier: keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer sbgp-ipAddrBlock: critical IPv4: 138.32.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1d:f0:1d:02:b4:15:a1:04:2c:cc:a9:0b:b5:d0:a6:b5:bd: ad:4e:84:c0:7a:5b:67:b7:09:9c:48:0f:8e:b0:9d:b0:d2:e0: 5f:be:e7:a7:69:fa:60:d7:58:cc:85:44:eb:51:c9:d6:6f:ae: e7:64:9f:e8:ad:bf:da:8e:18:61:eb:ba:1b:c1:3c:65:73:fd: ff:dd:06:e3:5f:4f:9f:bd:4e:5c:cc:9c:29:d3:c9:dc:ae:cd: 38:1e:72:19:70:bc:75:c7:51:f6:0f:9a:78:42:80:0d:3d:17: 07:1e:5e:c2:03:dc:81:2a:f5:da:79:16:a5:ec:0d:c2:f1:fe: ba:c7:91:e0:af:42:a9:21:13:94:11:13:72:e3:e9:2c:68:c5: b8:73:26:f1:0a:50:1e:2b:c2:91:71:2c:02:f2:fa:54:b1:f7: c5:2d:e1:d9:e8:c0:20:90:80:21:57:33:49:b6:fe:f6:b7:0f: b2:68:5c:a5:65:6b:2d:03:40:be:21:5d:2e:75:c3:da:b1:bc: 91:18:03:b7:cf:62:99:8f:b4:22:af:0d:ea:9d:c9:6f:1f:1e: 57:6c:72:05:ef:0e:a4:80:b8:9e:47:b5:14:c7:18:74:4c:36: fd:7d:79:38:73:bd:3f:f1:2e:93:ea:c3:47:c7:58:bd:b1:ea: 09:dd:cf:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRx+q2V5JVd0VL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2 NmYzMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MjNiM2RmYzQtZjQxMS00MzdjLTg1NTktMTVkZjgyZjA5Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pDql238P1vdQKpHpAW2LQbKcAJTRBc1xGOW BsyrUXuE+GA9Vmb+sIf0tmIIvAfk8uSqJM70KJhfo0jKniwMglE4rR7w4E5Ho4om kV9+OEfFn6vsV3sI+QtB9wlIJY87khMxKz4mMutIFMDIkDM5BGhrlGkNpKzWyyr3 cdc+t0fn8njTo52rKgPOy+SN7snHK3p6VMPeTGWlhKBAWTpsDLt1jbJl4PKfybWd KKNH2365Xgiix5lSdnlyKmgX24mMBE0AUCTvtcUeoQ3rOSMGbKy8ODTqgAlJeo2o bSZKnIK5REtfYHsXYVhfzzkCzFGNIju3sT51skz2RDdXIdIZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT7aXQ9mcFOy0hDdCcCe25kOSqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvNDNmOTA0OTMtZDhhMS0z OTAxLTkxOGUtOWNiODQ3OTUwMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiiBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEod8B0CtBWhBCzMqQu10Ka1va1OhMB6W2e3CZxID46wnbDS4F++56dp +mDXWMyFROtRydZvrudkn+itv9qOGGHruhvBPGVz/f/dBuNfT5+9TlzMnCnTydyu zTgechlwvHXHUfYPmnhCgA09FwceXsID3IEq9dp5FqXsDcLx/rrHkeCvQqkhE5QR E3Lj6SxoxbhzJvEKUB4rwpFxLALy+lSx98Ut4dnowCCQgCFXM0m2/va3D7JoXKVl ay0DQL4hXS51w9qxvJEYA7fPYpmPtCKvDeqdyW8fHldscgXvDqSAuJ5HtRTHGHRM Nv19eThzvT/xLpPqw0fHWL2x6gndz+I= -----END CERTIFICATE-----Generated at Sun Oct 19 23:06:43 2025 by rpki-client