$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa File: 43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa (raw, json) Hash identifier: exNxdTSrfkv34Mh8JF7Gj3kZWtX5svRxTeTVgbob2uA= Subject key identifier: 56:2B:C4:10:CC:FF:A6:7E:44:30:52:29:71:53:CF:F9:85:A3:0A:B5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B4A4731F6A1406C67B0A65200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 17119 IP address blocks: 209.4.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:31:f6:a1:40:6c:67:b0:a6:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=f71e3a76-bf6e-4da6-ba67-eee4fe9da005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:fa:cf:0c:d5:22:bc:81:77:77:8a:51:c2: e8:69:76:af:30:a0:ca:df:30:e8:03:81:ec:41:8d: 59:42:2d:d7:9e:ed:da:5f:77:80:2a:e2:7e:30:14: 2a:14:7e:1e:fb:7c:16:6f:25:17:7b:5e:51:4b:33: f8:9c:7a:d9:2d:f3:01:42:7b:5f:77:c6:5f:04:81: 70:12:ab:64:38:0c:a2:f2:a7:f5:2b:5e:20:21:a6: 45:ce:6f:33:e5:f6:98:20:d7:71:fc:ec:35:4f:73: b2:fd:cc:05:e5:5b:c2:3c:27:c1:78:69:90:02:cb: 19:46:08:42:a8:6b:67:08:7a:e7:44:e3:e2:3c:9c: 52:0d:66:43:6c:bf:4b:c7:48:51:b7:1b:06:23:fe: 07:75:9c:30:f3:d5:3b:6e:b9:03:75:22:7e:33:56: 77:9a:a5:43:e5:5c:b1:36:7a:38:a4:8a:5f:6c:7f: 53:13:aa:9f:43:06:68:c7:53:aa:ea:6e:65:a8:09: 73:ae:90:11:89:3d:65:f1:08:94:c1:38:0d:d0:28: f1:e9:84:a3:35:f8:22:f8:5a:4f:1b:b4:ac:d9:a4: 83:38:2e:67:b8:17:23:f7:b4:c7:87:7e:de:b3:d4: 46:69:31:b1:2e:00:68:cd:40:8c:c7:cf:44:48:91: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2B:C4:10:CC:FF:A6:7E:44:30:52:29:71:53:CF:F9:85:A3:0A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.4.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:84:79:f2:50:ef:d8:f7:c4:a8:36:6f:61:4d:c1:23:a3:92: 32:6d:47:3a:db:16:00:c3:c2:7c:e2:7e:93:04:21:40:8a:be: 2d:68:59:0d:22:0f:84:4b:0c:dd:c4:0d:a2:16:6d:8e:60:b0: a8:d8:24:78:d7:76:84:93:a2:53:0f:8a:36:c1:de:d8:36:7f: ba:ce:9d:f0:85:09:92:34:7a:b3:3c:29:2e:16:f2:7c:80:d6: 9c:87:4a:eb:dc:df:a0:e3:73:c2:a8:48:8f:b0:f0:b0:06:2e: a7:ec:5c:8d:3e:03:4f:c1:6b:8b:f3:80:cb:34:43:1a:c1:31: 78:6e:7d:8a:19:75:25:0f:13:de:e9:16:2c:3e:38:d8:b5:72: 1e:16:09:39:1c:d0:a2:ff:7a:28:54:8d:0a:0a:6b:bc:b2:a6: b2:0a:b1:86:df:cd:82:4d:22:62:53:ec:a7:44:a2:d5:80:3f: dc:98:3d:cd:ee:f8:30:66:3f:d3:5f:f4:61:df:6d:bd:65:5f: a5:5d:15:c4:f9:cb:80:95:68:48:d5:a2:4a:77:90:d4:8d:10: ac:fc:8c:b3:55:b4:d0:de:30:0f:5a:66:c2:66:3a:0d:d5:b7: 10:b0:24:ab:11:e6:9a:57:09:2a:56:60:70:04:2a:83:28:3d: a4:c6:a7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzH2oUBsZ7CmUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZjcxZTNhNzYtYmY2ZS00ZGE2LWJhNjctZWVlNGZlOWRhMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRv6zwzVIryBd3eKUcLoaXavMKDK3zDoA4Hs QY1ZQi3Xnu3aX3eAKuJ+MBQqFH4e+3wWbyUXe15RSzP4nHrZLfMBQntfd8ZfBIFw EqtkOAyi8qf1K14gIaZFzm8z5faYINdx/Ow1T3Oy/cwF5VvCPCfBeGmQAssZRghC qGtnCHrnROPiPJxSDWZDbL9Lx0hRtxsGI/4HdZww89U7brkDdSJ+M1Z3mqVD5Vyx Nno4pIpfbH9TE6qfQwZox1Oq6m5lqAlzrpARiT1l8QiUwTgN0Cjx6YSjNfgi+FpP G7Ss2aSDOC5nuBcj97THh37es9RGaTGxLgBozUCMx89ESJEonwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYrxBDM/6Z+RDBSKXFTz/mFowq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDNiZWJhOGEtZTQ1My0z Y2IwLWE3N2QtYWFiZDZjMWFkMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0QS7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiEefJQ79j3xKg2b2FNwSOjkjJtRzrbFgDDwnzifpMEIUCKvi1oWQ0i D4RLDN3EDaIWbY5gsKjYJHjXdoSTolMPijbB3tg2f7rOnfCFCZI0erM8KS4W8nyA 1pyHSuvc36Djc8KoSI+w8LAGLqfsXI0+A0/Ba4vzgMs0QxrBMXhufYoZdSUPE97p Fiw+ONi1ch4WCTkc0KL/eihUjQoKa7yyprIKsYbfzYJNImJT7KdEotWAP9yYPc3u +DBmP9Nf9GHfbb1lX6VdFcT5y4CVaEjVokp3kNSNEKz8jLNVtNDeMA9aZsJmOg3V txCwJKsR5ppXCSpWYHAEKoMoPaTGp70= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:47 2025 by rpki-client