$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c673b11-f8fe-3f57-bd0d-55b5b5096f16.roa File: 3c673b11-f8fe-3f57-bd0d-55b5b5096f16.roa (raw, json) Hash identifier: CAVDXoapfJASjWC+A6KyFRH/Azg5/lNiCE+/vzioy5A= Subject key identifier: B3:A3:85:31:B6:FA:36:BB:F1:47:63:04:29:D3:C1:5E:94:A0:C7:7D Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Certificate serial: 010D0C9F4328584B852577D4107C8FFEA1FBD8C0 Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c673b11-f8fe-3f57-bd0d-55b5b5096f16.roa Signing time: Tue 14 Oct 2025 15:05:42 +0000 ROA not before: Tue 14 Oct 2025 15:05:42 +0000 ROA not after: Mon 12 Jan 2026 16:05:42 +0000 asID: 400110 IP address blocks: 184.169.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:25:77:d4:10:7c:8f:fe:a1:fb:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Validity Not Before: Oct 14 15:05:42 2025 GMT Not After : Jan 12 16:05:42 2026 GMT Subject: CN=9506150d-4efe-4143-9e10-e33e10bec7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:e5:a5:d7:26:0e:a3:30:73:95:34:fa:96: 33:5e:78:83:6c:d2:1e:77:c3:5e:f9:10:ca:13:a5: 93:52:f8:6f:59:5d:3f:9f:70:2f:9d:f3:fd:2d:9e: a9:df:29:d6:5d:fa:e1:ae:d9:74:90:4f:0c:f9:00: 40:16:c4:f1:fc:01:fd:47:87:2f:6a:96:d1:ce:d2: 53:ba:fe:f6:f8:1f:35:8e:db:e4:c9:95:db:6e:fb: ff:a7:83:e5:a6:e9:b7:10:62:ae:54:86:84:6a:07: 4a:1f:5a:ff:d1:ed:12:ea:12:b7:2d:cf:e0:97:8a: 98:7c:ae:ae:93:58:9b:3a:e5:d7:21:5c:69:a6:dc: 30:ed:44:22:b3:f3:98:39:03:51:7e:1e:da:6c:36: 66:be:83:ba:7f:04:3a:c4:d6:14:05:d6:0b:5d:c4: 56:9b:36:84:38:ae:81:d9:24:20:96:de:d3:9d:4d: fb:7f:5a:5b:51:21:f7:b8:7d:01:72:b3:de:46:4c: d7:6b:d8:0f:c0:76:63:51:64:2d:81:17:14:44:df: 12:f0:23:9f:ac:04:e9:b9:42:a6:cc:31:be:27:2f: 0e:43:6b:24:82:c2:28:cd:4f:65:2d:e4:1e:a9:fe: 09:e8:f8:12:cb:42:aa:c2:cb:2f:6b:6e:d5:78:b8: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A3:85:31:B6:FA:36:BB:F1:47:63:04:29:D3:C1:5E:94:A0:C7:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/3c673b11-f8fe-3f57-bd0d-55b5b5096f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl X509v3 Authority Key Identifier: keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer sbgp-ipAddrBlock: critical IPv4: 184.169.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f5:75:ee:12:bd:2c:a4:70:a1:eb:29:4c:e0:af:76:db:75: 33:91:b1:88:68:02:2c:0f:7b:d2:fb:e5:9c:8e:b9:b3:48:21: 29:05:5f:fb:90:6c:65:a8:e8:89:44:da:37:04:97:74:5a:37: bb:79:5c:d6:36:2b:30:00:f5:fd:1b:1d:9c:47:8c:8a:19:f7: c4:4f:ad:13:8d:66:6a:1d:84:00:41:6a:91:87:6c:68:6b:a1: 45:4d:04:06:ff:2f:8a:12:02:d1:23:1e:71:44:01:8f:24:fa: c7:db:55:ac:6b:99:df:ff:9e:36:5c:8e:01:fc:f6:48:e3:84: 84:ed:d0:0e:94:76:34:2b:42:28:2c:cc:f9:36:4a:7b:1d:29: 81:3c:29:53:49:f2:a6:b5:b7:75:07:97:88:f2:91:89:19:b7: 0c:f0:c2:ae:63:78:2e:e8:35:ff:42:55:b7:f5:58:ec:4f:47: 41:f8:96:75:91:b9:1c:22:42:ad:f5:9d:72:ba:90:21:39:20: 83:4c:f1:bb:5e:78:65:49:13:7b:98:a9:31:51:24:87:68:1e: 03:f3:e3:26:4d:e5:58:a3:84:34:6b:a5:66:81:0f:84:83:9c: e8:49:7b:da:e9:f6:aa:c3:2f:53:97:ed:15:52:f1:b3:99:b2: 4e:58:c2:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFJXfUEHyP/qH72MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk Mjk4MB4XDTI1MTAxNDE1MDU0MloXDTI2MDExMjE2MDU0MlowLzEtMCsGA1UEAxMk OTUwNjE1MGQtNGVmZS00MTQzLTllMTAtZTMzZTEwYmVjN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N3lpdcmDqMwc5U0+pYzXniDbNIed8Ne+RDK E6WTUvhvWV0/n3AvnfP9LZ6p3ynWXfrhrtl0kE8M+QBAFsTx/AH9R4cvapbRztJT uv72+B81jtvkyZXbbvv/p4Plpum3EGKuVIaEagdKH1r/0e0S6hK3Lc/gl4qYfK6u k1ibOuXXIVxpptww7UQis/OYOQNRfh7abDZmvoO6fwQ6xNYUBdYLXcRWmzaEOK6B 2SQglt7TnU37f1pbUSH3uH0BcrPeRkzXa9gPwHZjUWQtgRcURN8S8COfrATpuUKm zDG+Jy8OQ2skgsIozU9lLeQeqf4J6PgSy0Kqwssva27VeLgulQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOjhTG2+ja78UdjBCnTwV6UoMd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvM2M2NzNiMTEtZjhmZS0z ZjU3LWJkMGQtNTViNWI1MDk2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuKkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj1de4SvSykcKHrKUzgr3bbdTORsYhoAiwPe9L75ZyOubNIISkFX/uQ bGWo6IlE2jcEl3RaN7t5XNY2KzAA9f0bHZxHjIoZ98RPrRONZmodhABBapGHbGhr oUVNBAb/L4oSAtEjHnFEAY8k+sfbVaxrmd//njZcjgH89kjjhITt0A6UdjQrQigs zPk2SnsdKYE8KVNJ8qa1t3UHl4jykYkZtwzwwq5jeC7oNf9CVbf1WOxPR0H4lnWR uRwiQq31nXK6kCE5IINM8bteeGVJE3uYqTFRJIdoHgPz4yZN5VijhDRrpWaBD4SD nOhJe9rp9qrDL1OX7RVS8bOZsk5Ywlc= -----END CERTIFICATE-----Generated at Mon Oct 20 22:00:21 2025 by rpki-client