$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/4320149a-1d15-329e-9e7b-b61e5d89e602.roa File: 4320149a-1d15-329e-9e7b-b61e5d89e602.roa (raw, json) Hash identifier: /KEw+UC8MyasnxwIJa6hHBZylYh8Xj1+H/VBsuw7aog= Subject key identifier: 87:F8:C5:EB:F5:8C:78:85:84:8B:E3:BB:89:60:F6:E1:0B:2C:2C:D8 Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Certificate serial: 010D0C9F4328584F4974BE8163CB4DB2FD217580 Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/4320149a-1d15-329e-9e7b-b61e5d89e602.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400110 IP address blocks: 184.169.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:be:81:63:cb:4d:b2:fd:21:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35a1c33b-2e76-4536-a96b-2c05e3efc271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:af:53:c7:28:71:8d:3c:1f:99:cb:23:40: 2d:69:56:89:26:64:4b:b5:00:5b:46:91:ef:aa:b4: 8c:37:aa:d5:0a:9e:3a:b5:b3:9c:27:1b:12:68:40: 96:ae:cc:c8:c4:c4:02:23:89:bb:49:5e:ef:28:50: 0a:7f:f9:4d:d8:ad:ad:da:a0:4c:56:ab:b1:ae:e5: f9:88:d3:5c:24:14:07:7b:5c:83:8b:1f:ef:01:87: 7e:9e:67:4f:66:89:b9:dd:88:04:e4:03:46:d9:e5: 57:47:c5:f4:24:9f:a9:c6:b7:df:6b:a2:58:6b:33: 0f:f7:0d:07:9f:8c:8d:2f:fc:d4:59:b8:f0:59:42: 43:c7:ef:d9:0f:49:bd:64:da:31:98:2e:c1:df:cd: 71:49:65:f7:54:af:ff:0d:4a:58:d4:9c:00:a9:42: d2:e6:f9:6c:91:88:9f:75:3d:48:aa:80:51:5e:42: 90:78:9b:8e:b8:c9:24:a6:12:5f:a2:ab:4c:d9:c7: cf:d8:e2:fd:eb:9c:3b:2a:2e:e6:c6:d6:90:a3:1f: d2:e4:19:2f:9e:9b:86:4b:5f:4f:54:2a:da:ab:64: d7:5d:c0:82:f7:98:27:a8:2f:68:0c:ae:36:d6:bd: c3:b6:8d:89:66:95:8e:ae:e5:4d:c3:4e:01:9e:91: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F8:C5:EB:F5:8C:78:85:84:8B:E3:BB:89:60:F6:E1:0B:2C:2C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/4320149a-1d15-329e-9e7b-b61e5d89e602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl X509v3 Authority Key Identifier: keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer sbgp-ipAddrBlock: critical IPv4: 184.169.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:70:6e:6a:47:62:1b:43:78:4d:86:1b:58:0d:9b:8e:df:b9: 48:8e:9e:b1:d5:8d:4f:de:a1:f9:a9:19:29:94:91:2d:5f:f8: e2:61:fc:40:4b:2e:aa:f4:8a:8a:ab:f5:ec:a4:c5:d1:67:ac: f6:99:12:8b:55:42:a5:17:c2:8d:17:d2:58:24:44:6d:6d:36: d1:df:6d:26:d2:18:de:57:2c:63:bb:ac:74:7e:58:4c:33:f8: 52:4d:0a:ef:76:eb:9a:d6:19:98:b3:bb:9a:fb:cc:89:ca:4c: 15:69:81:bd:fb:8a:9d:2a:dc:46:c5:99:0b:39:30:49:7f:a8: bc:a3:13:3d:6e:3a:ed:bf:50:47:b1:c0:91:65:af:4f:f5:7f: b4:68:12:7f:6c:05:a7:21:61:90:99:5e:63:7f:e9:c7:f0:be: 7a:b5:df:a8:45:6d:45:68:e2:ec:36:89:b5:3a:80:65:f2:06: 2c:01:b9:2a:7b:10:9a:45:24:23:0d:bb:cd:4a:b3:43:6f:0a: d9:00:58:5b:84:8a:55:b8:50:f7:a9:68:09:ea:d4:ff:cc:33: c4:fd:8b:f4:09:15:57:74:54:1d:9e:2b:eb:47:f4:a0:57:72: 55:e5:91:3c:8c:dc:e8:18:bc:00:ac:bc:dc:07:3b:3c:03:b5: 7d:33:32:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdL6BY8tNsv0hdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk Mjk4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVhMWMzM2ItMmU3Ni00NTM2LWE5NmItMmMwNWUzZWZjMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutavU8cocY08H5nLI0AtaVaJJmRLtQBbRpHv qrSMN6rVCp46tbOcJxsSaECWrszIxMQCI4m7SV7vKFAKf/lN2K2t2qBMVquxruX5 iNNcJBQHe1yDix/vAYd+nmdPZom53YgE5ANG2eVXR8X0JJ+pxrffa6JYazMP9w0H n4yNL/zUWbjwWUJDx+/ZD0m9ZNoxmC7B381xSWX3VK//DUpY1JwAqULS5vlskYif dT1IqoBRXkKQeJuOuMkkphJfoqtM2cfP2OL965w7Ki7mxtaQox/S5BkvnpuGS19P VCraq2TXXcCC95gnqC9oDK421r3Dto2JZpWOruVNw04BnpHeeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf4xev1jHiFhIvju4lg9uELLCzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvNDMyMDE0OWEtMWQxNS0z MjllLTllN2ItYjYxZTVkODllNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuKkeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9wbmpHYhtDeE2GG1gNm47fuUiOnrHVjU/eofmpGSmUkS1f+OJh/EBL Lqr0ioqr9eykxdFnrPaZEotVQqUXwo0X0lgkRG1tNtHfbSbSGN5XLGO7rHR+WEwz +FJNCu9265rWGZizu5r7zInKTBVpgb37ip0q3EbFmQs5MEl/qLyjEz1uOu2/UEex wJFlr0/1f7RoEn9sBachYZCZXmN/6cfwvnq136hFbUVo4uw2ibU6gGXyBiwBuSp7 EJpFJCMNu81Ks0NvCtkAWFuEilW4UPepaAnq1P/MM8T9i/QJFVd0VB2eK+tH9KBX clXlkTyM3OgYvACsvNwHOzwDtX0zMgE= -----END CERTIFICATE-----Generated at Tue Sep 29 17:51:20 2026 by rpki-client