$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/5f43d8ea-a799-3228-8d97-6979d43cd812.roa File: 5f43d8ea-a799-3228-8d97-6979d43cd812.roa (raw, json) Hash identifier: Sx/vdKWijV3QTucHSwkV1t6CQrlmxbWe4caGpzpAi4I= Subject key identifier: B6:90:4B:A8:FD:9C:8E:44:7D:4A:09:67:41:D6:63:12:EC:52:4C:81 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584AF68693B562DF80BB41ADCD00 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/5f43d8ea-a799-3228-8d97-6979d43cd812.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 1403 IP address blocks: 205.210.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:93:b5:62:df:80:bb:41:ad:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=749fd29c-90ed-4f03-9c4d-4d830794ba05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:f8:dc:ce:06:af:3b:01:1e:ce:f0:63:08: a1:61:42:95:dd:fa:47:3e:4e:4a:e3:b7:9d:12:d7: 10:b1:ad:69:a1:55:13:c0:fb:5a:cc:b5:5e:d8:89: a0:5c:45:8e:80:6d:41:60:e0:79:08:c6:91:82:d3: 44:f7:48:88:09:92:2e:9e:bc:60:89:d5:0b:2b:d6: 7a:4d:d8:40:19:25:5d:3b:70:f9:9a:ff:b2:52:db: 0a:39:e4:09:09:15:12:bf:26:83:b7:d1:71:d1:83: b0:a8:d5:f5:5c:15:b2:ca:77:f6:19:e2:40:56:07: 33:0c:71:25:38:e1:e0:8d:d8:27:a1:9e:6e:6d:78: fe:b2:f3:d0:31:32:bc:11:d1:98:29:26:06:15:94: 29:7e:f2:9f:24:7e:b0:00:01:84:7a:21:cd:0c:0a: 27:8f:62:2d:a3:db:4e:2d:54:ff:95:9b:5c:b6:74: 84:c8:99:e1:d8:88:15:a9:68:79:c4:74:bc:07:2f: bc:2f:c8:a6:e1:f4:f6:a3:9e:06:62:c9:78:7f:13: c1:c5:b2:cd:c9:b7:e5:cd:1d:cf:41:81:7a:0e:de: 19:a6:96:c9:12:b7:8a:09:1e:62:a9:32:60:a1:ed: 19:d1:1f:89:85:43:c1:82:b0:e4:36:f4:01:1d:56: 0f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:90:4B:A8:FD:9C:8E:44:7D:4A:09:67:41:D6:63:12:EC:52:4C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/5f43d8ea-a799-3228-8d97-6979d43cd812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 205.210.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ec:6d:99:45:68:99:72:3c:ed:45:f3:4b:52:d7:43:e8:49: 91:1b:78:4d:91:49:42:74:89:46:26:9c:f4:07:f6:39:1d:c3: b8:f1:80:a5:36:5c:ca:04:4d:f2:57:27:e4:0c:e8:e3:31:ef: 64:36:52:38:0c:51:24:48:a2:50:5d:9b:bc:59:af:3e:0f:63: 43:f7:f9:6d:63:35:6d:ba:7d:e1:15:a3:a3:90:ce:b0:96:ac: 8f:1a:35:62:91:91:03:38:fc:4a:ab:16:12:1c:fb:c3:09:4c: 43:fd:40:3c:4f:58:1a:db:39:a6:26:56:fd:1e:22:3f:4a:b6: d9:22:04:99:57:ae:15:93:08:55:5d:02:43:03:75:7e:ae:ac: 77:f1:53:94:7e:20:7b:70:68:23:9c:87:b9:4f:62:61:70:05: 3d:38:c5:64:8b:7c:ad:15:10:62:62:57:f4:74:d5:c0:ae:77: 3f:d9:5e:1e:c0:f9:ff:19:44:f8:c3:82:d4:22:45:83:04:89: b3:6d:4e:a7:75:f8:d6:8f:18:bb:32:6a:1f:8c:95:57:79:6b: 58:8e:ed:a3:9a:22:52:d3:ed:4e:8c:40:b4:21:fb:a7:b9:2e: 5b:66:41:dd:f0:bc:3e:96:e5:5a:bb:70:27:5b:02:73:bf:9f: 3b:7a:3f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpO1Yt+Au0GtzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NzQ5ZmQyOWMtOTBlZC00ZjAzLTljNGQtNGQ4MzA3OTRiYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6343M4GrzsBHs7wYwihYUKV3fpHPk5K47ed EtcQsa1poVUTwPtazLVe2ImgXEWOgG1BYOB5CMaRgtNE90iICZIunrxgidULK9Z6 TdhAGSVdO3D5mv+yUtsKOeQJCRUSvyaDt9Fx0YOwqNX1XBWyynf2GeJAVgczDHEl OOHgjdgnoZ5ubXj+svPQMTK8EdGYKSYGFZQpfvKfJH6wAAGEeiHNDAonj2Ito9tO LVT/lZtctnSEyJnh2IgVqWh5xHS8By+8L8im4fT2o54GYsl4fxPBxbLNybflzR3P QYF6Dt4ZppbJEreKCR5iqTJgoe0Z0R+JhUPBgrDkNvQBHVYP7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaQS6j9nI5EfUoJZ0HWYxLsUkyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvNWY0M2Q4ZWEtYTc5OS0z MjI4LThkOTctNjk3OWQ0M2NkODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7sbZlFaJlyPO1F80tS10PoSZEbeE2RSUJ0iUYmnPQH9jkdw7jxgKU2 XMoETfJXJ+QM6OMx72Q2UjgMUSRIolBdm7xZrz4PY0P3+W1jNW26feEVo6OQzrCW rI8aNWKRkQM4/EqrFhIc+8MJTEP9QDxPWBrbOaYmVv0eIj9KttkiBJlXrhWTCFVd AkMDdX6urHfxU5R+IHtwaCOch7lPYmFwBT04xWSLfK0VEGJiV/R01cCudz/ZXh7A +f8ZRPjDgtQiRYMEibNtTqd1+NaPGLsyah+MlVd5a1iO7aOaIlLT7U6MQLQh+6e5 LltmQd3wvD6W5Vq7cCdbAnO/nzt6P0k= -----END CERTIFICATE-----Generated at Fri Oct 10 09:55:37 2025 by rpki-client