$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c673b11-f8fe-3f57-bd0d-55b5b5096f16.roa File: 3c673b11-f8fe-3f57-bd0d-55b5b5096f16.roa (raw, json) Hash identifier: UWbdyXYz10U+p8kHVXofVAM0hVpKpKYZfN8+uiMqd4g= Subject key identifier: 69:FE:42:59:4E:66:35:0D:6B:6B:E9:D2:45:5B:F9:E2:70:59:75:F9 Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Certificate serial: 010D0C9F4328584F698D7624B98742A8394C3A80 Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c673b11-f8fe-3f57-bd0d-55b5b5096f16.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 400110 IP address blocks: 184.169.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:76:24:b9:87:42:a8:39:4c:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=893c3bce-6646-4fdc-ac0e-5ec8a40a2cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7b:8e:a8:4d:0c:43:f6:95:92:b5:56:13:11: b1:c5:03:ff:e5:45:0d:2e:d7:a7:ea:87:bd:d9:f8: ba:ee:2b:a7:4d:86:a2:48:52:5c:2f:4a:f5:cf:32: df:06:83:bf:98:29:53:32:bb:d7:91:c0:9b:9a:cc: 61:fe:c2:09:a0:1e:10:d0:90:26:4e:f3:0b:20:e1: 4c:cf:5f:03:7e:7e:a7:9d:25:05:0b:4c:2f:21:bb: 08:5b:17:1a:77:5e:85:9d:e9:fe:a1:83:61:19:d4: d4:63:7d:da:d4:76:a1:94:e0:72:c4:cd:68:96:15: 3d:ff:10:d0:f1:33:9e:8a:b4:03:0f:ad:fc:23:21: c8:71:0a:16:b3:94:98:60:e5:13:e8:c0:b1:58:40: d4:d5:8b:3e:de:58:84:e4:51:df:cc:3e:11:6b:58: 19:88:ff:fe:69:1e:28:05:1a:b6:4d:49:3c:d8:33: 0e:64:b8:ea:b5:ca:56:48:5b:b3:11:74:46:f3:01: 54:0d:85:c9:fd:75:91:9d:71:f8:79:79:5b:fa:c5: 3c:8a:14:fc:d6:8a:ff:17:b6:17:94:3d:d4:de:01: 90:39:79:00:3e:66:7f:01:d6:a5:54:51:ea:0c:56: 7e:7a:71:16:2f:92:2a:65:bb:7d:83:97:d0:19:ac: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FE:42:59:4E:66:35:0D:6B:6B:E9:D2:45:5B:F9:E2:70:59:75:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c673b11-f8fe-3f57-bd0d-55b5b5096f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl X509v3 Authority Key Identifier: keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer sbgp-ipAddrBlock: critical IPv4: 184.169.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d3:9b:28:c0:60:1f:8d:7a:40:b1:92:5f:3b:3a:d5:15:f8: 96:f4:ab:ba:56:8f:0e:c5:76:66:b1:8b:ae:54:c0:35:e3:15: b2:04:cb:dd:2d:d1:25:cc:48:62:64:e6:fc:fa:f7:78:16:35: 67:9e:61:fc:d7:36:26:03:91:57:9f:c5:ec:10:90:31:eb:48: c5:ba:f4:3e:b9:7b:5c:13:bd:ed:b9:b5:a0:f4:eb:c0:a7:56: bb:f8:69:05:05:da:87:25:46:80:b2:a5:15:9a:38:51:01:e9: 22:1a:d7:d9:d2:f4:d3:90:ea:31:92:e1:cd:67:f9:10:23:81: 7c:f6:a4:7c:8f:60:f2:0b:76:ac:67:3e:40:03:6e:a3:56:52: 7f:a5:5b:af:5c:61:7d:5f:aa:73:6f:68:69:76:bd:da:42:5c: 59:ba:a4:18:8a:39:af:81:41:e8:f6:86:44:65:5a:e8:2d:08: 97:e1:d5:a4:03:94:69:28:a1:a6:c3:8a:12:e2:9d:f3:89:c6: a0:d7:5d:08:79:94:a4:b2:7a:41:7e:56:89:01:c9:dd:09:a2: 6e:b0:af:26:d6:42:a2:be:fa:bf:eb:d8:f0:2a:55:b3:c1:39: 22:d0:b6:fe:cb:44:44:25:83:4f:f1:8a:2f:ef:f1:1b:e3:46: c3:ad:89:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXYkuYdCqDlMOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk Mjk4MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ODkzYzNiY2UtNjY0Ni00ZmRjLWFjMGUtNWVjOGE0MGEyY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63uOqE0MQ/aVkrVWExGxxQP/5UUNLten6oe9 2fi67iunTYaiSFJcL0r1zzLfBoO/mClTMrvXkcCbmsxh/sIJoB4Q0JAmTvMLIOFM z18Dfn6nnSUFC0wvIbsIWxcad16Fnen+oYNhGdTUY33a1HahlOByxM1olhU9/xDQ 8TOeirQDD638IyHIcQoWs5SYYOUT6MCxWEDU1Ys+3liE5FHfzD4Ra1gZiP/+aR4o BRq2TUk82DMOZLjqtcpWSFuzEXRG8wFUDYXJ/XWRnXH4eXlb+sU8ihT81or/F7YX lD3U3gGQOXkAPmZ/AdalVFHqDFZ+enEWL5IqZbt9g5fQGayIoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn+QllOZjUNa2vp0kVb+eJwWXX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvM2M2NzNiMTEtZjhmZS0z ZjU3LWJkMGQtNTViNWI1MDk2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuKkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7TmyjAYB+NekCxkl87OtUV+Jb0q7pWjw7Fdmaxi65UwDXjFbIEy90t 0SXMSGJk5vz693gWNWeeYfzXNiYDkVefxewQkDHrSMW69D65e1wTve25taD068Cn Vrv4aQUF2oclRoCypRWaOFEB6SIa19nS9NOQ6jGS4c1n+RAjgXz2pHyPYPILdqxn PkADbqNWUn+lW69cYX1fqnNvaGl2vdpCXFm6pBiKOa+BQej2hkRlWugtCJfh1aQD lGkooabDihLinfOJxqDXXQh5lKSyekF+VokByd0Jom6wrybWQqK++r/r2PAqVbPB OSLQtv7LREQlg0/xii/v8RvjRsOtiU4= -----END CERTIFICATE-----Generated at Thu Oct 8 08:34:45 2026 by rpki-client