$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/d4a8d1d0-6799-3faf-a551-2fa890450f17.roa File: d4a8d1d0-6799-3faf-a551-2fa890450f17.roa (raw, json) Hash identifier: ++Mwh3I89nuB7YE7osQS9sQ4pKJBLGYdKbokeZDDpbQ= Subject key identifier: 9D:69:8A:FD:70:0B:5A:D7:6D:74:45:17:6D:D7:10:6D:5B:B6:58:35 Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Certificate serial: 010D0C9F4328584B72542E3252388E780E0E0580 Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/d4a8d1d0-6799-3faf-a551-2fa890450f17.roa Signing time: Tue 07 Oct 2025 21:19:28 +0000 ROA not before: Tue 07 Oct 2025 21:19:28 +0000 ROA not after: Mon 05 Jan 2026 22:19:28 +0000 asID: 400110 IP address blocks: 184.169.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:54:2e:32:52:38:8e:78:0e:0e:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Validity Not Before: Oct 7 21:19:28 2025 GMT Not After : Jan 5 22:19:28 2026 GMT Subject: CN=a9cf9059-283b-4731-9a45-a4c6b4258c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:f2:e9:df:30:18:5c:b3:8e:df:1c:45:f0: 11:91:41:54:d3:39:26:92:f9:25:d4:36:4a:d2:97: 6e:ba:18:76:49:78:bf:64:b9:80:21:66:70:0a:b9: 87:4e:74:43:75:e1:36:fc:43:a1:0b:fc:47:b2:9e: 80:82:f7:dc:35:d9:72:40:fa:5a:a3:d4:3c:31:ab: bd:ff:56:c1:7e:b0:66:4e:c6:ae:48:22:64:39:b0: 74:f1:68:52:4b:a2:64:66:63:1e:6c:a9:e7:6c:44: 1d:5f:dc:55:a9:d9:89:da:b5:97:7c:5b:67:04:43: 48:06:c3:a9:8a:f8:c4:27:b5:a1:57:3c:b8:80:46: 38:bf:72:d2:ed:83:32:c7:98:f6:dd:76:1d:a4:2c: 65:d0:93:c7:b2:77:4d:4c:b8:4f:30:35:79:07:63: 64:82:2b:94:54:5f:ac:bf:a6:01:37:04:0f:fa:cd: c8:29:10:ac:72:b8:88:f4:10:b0:10:75:37:09:05: ae:9e:ce:ea:95:14:9d:4b:16:cc:20:a0:5c:b2:8d: 38:8d:bb:5a:46:14:58:f7:8b:c5:e7:1d:86:32:2f: cb:74:c4:0e:6b:1d:00:a1:ca:2d:1f:84:fa:89:82: df:87:f4:1c:7a:8b:dd:b5:14:5e:8b:bf:b2:54:c3: 2a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:69:8A:FD:70:0B:5A:D7:6D:74:45:17:6D:D7:10:6D:5B:B6:58:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/d4a8d1d0-6799-3faf-a551-2fa890450f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl X509v3 Authority Key Identifier: keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer sbgp-ipAddrBlock: critical IPv4: 184.169.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5a:59:c1:a1:8e:e2:7f:11:b0:e9:f4:d2:fb:73:d7:f7:8d: b3:e9:79:74:b4:99:69:23:a6:22:04:a4:d7:22:90:35:2e:d3: 0c:f6:a5:3c:3d:d9:da:e5:02:70:7f:d0:c2:93:ac:8d:6e:6f: c6:ff:c7:6b:66:34:ce:cc:0f:bd:2d:b5:5b:f9:97:88:4c:91: ae:31:32:9f:43:e2:52:ae:67:3d:8b:5b:e8:65:a6:d3:10:c8: 30:5d:48:1d:25:e0:18:f4:81:82:6d:2e:b2:3e:f3:bd:17:24: 14:8a:25:fb:80:22:7e:45:b6:24:08:a6:2a:7e:ab:b0:96:ed: 92:96:a6:81:db:f0:1e:49:b1:fd:9f:46:5e:ff:04:35:93:5d: de:a5:87:90:c1:5d:bb:7e:d7:ff:d6:21:67:59:a7:eb:1c:6f: 4d:cf:a3:62:92:06:be:fe:49:d7:10:a2:64:ef:6c:4c:95:13: 28:fa:d1:8a:31:65:c0:b0:16:62:50:22:91:e9:15:f9:74:79: 9f:fa:da:a2:fc:6c:6b:2d:fe:f0:53:b5:89:31:7f:fe:dd:da: 14:d0:de:c7:64:0f:9b:89:4e:be:32:ee:0e:4c:3f:86:08:bb: 51:5e:90:8a:20:67:a3:33:ac:ce:34:0d:17:70:90:87:df:c3: 71:3c:c2:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtyVC4yUjiOeA4OBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk Mjk4MB4XDTI1MTAwNzIxMTkyOFoXDTI2MDEwNTIyMTkyOFowLzEtMCsGA1UEAxMk YTljZjkwNTktMjgzYi00NzMxLTlhNDUtYTRjNmI0MjU4YzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAry6d8wGFyzjt8cRfARkUFU0zkmkvkl1DZK 0pduuhh2SXi/ZLmAIWZwCrmHTnRDdeE2/EOhC/xHsp6AgvfcNdlyQPpao9Q8Mau9 /1bBfrBmTsauSCJkObB08WhSS6JkZmMebKnnbEQdX9xVqdmJ2rWXfFtnBENIBsOp ivjEJ7WhVzy4gEY4v3LS7YMyx5j23XYdpCxl0JPHsndNTLhPMDV5B2NkgiuUVF+s v6YBNwQP+s3IKRCscriI9BCwEHU3CQWuns7qlRSdSxbMIKBcso04jbtaRhRY94vF 5x2GMi/LdMQOax0AocotH4T6iYLfh/QceovdtRRei7+yVMMqNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1piv1wC1rXbXRFF23XEG1btlg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvZDRhOGQxZDAtNjc5OS0z ZmFmLWE1NTEtMmZhODkwNDUwZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuKklMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1aWcGhjuJ/EbDp9NL7c9f3jbPpeXS0mWkjpiIEpNcikDUu0wz2pTw9 2drlAnB/0MKTrI1ub8b/x2tmNM7MD70ttVv5l4hMka4xMp9D4lKuZz2LW+hlptMQ yDBdSB0l4Bj0gYJtLrI+870XJBSKJfuAIn5FtiQIpip+q7CW7ZKWpoHb8B5Jsf2f Rl7/BDWTXd6lh5DBXbt+1//WIWdZp+scb03Po2KSBr7+SdcQomTvbEyVEyj60Yox ZcCwFmJQIpHpFfl0eZ/62qL8bGst/vBTtYkxf/7d2hTQ3sdkD5uJTr4y7g5MP4YI u1FekIogZ6MzrM40DRdwkIffw3E8wu0= -----END CERTIFICATE-----Generated at Mon Oct 20 22:00:21 2025 by rpki-client