$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/42321e29-98ec-3d33-a59d-35f73ae16b53.roa File: 42321e29-98ec-3d33-a59d-35f73ae16b53.roa (raw, json) Hash identifier: lggzKH6qOUyqMHuaqfZwTqwGL39bpTT7Jg9BWKeJQ6c= Subject key identifier: AE:97:F7:C2:21:4F:81:60:74:41:28:F2:87:15:C6:DD:B4:FF:28:84 Certificate issuer: /CN=12380a37-68ce-4e9c-9585-53cd09071ada Certificate serial: 010D0C9F4328584AFAB68A373623BF7452FE2A80 Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/42321e29-98ec-3d33-a59d-35f73ae16b53.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 395597 IP address blocks: 100.43.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:8a:37:36:23:bf:74:52:fe:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=c3c3d2ed-a85a-4381-bc7a-5b2eba432009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9e:d4:fa:20:01:0f:d5:3e:c2:53:25:a5:87: 23:f8:38:fb:a9:2f:b9:be:8d:29:b2:42:c3:0e:3e: f7:8d:ef:a7:cc:0b:58:55:51:b7:a2:d1:18:90:7c: 87:0d:88:8a:a5:da:bb:50:c7:83:c6:15:b3:8e:f5: 4f:86:83:18:4f:57:c9:d2:61:69:2a:50:a5:76:63: 52:2c:b1:79:48:e0:4f:c0:43:f2:2c:5b:50:7f:c0: b6:46:54:34:77:0b:5e:6b:e4:55:05:f3:b1:8c:ff: 54:ce:e4:3a:63:29:a2:19:61:b2:df:13:4e:e0:fd: 55:3f:27:65:e8:05:96:f3:b0:cc:ee:9d:67:eb:98: 1f:15:a1:33:0e:ad:bf:cf:74:e7:d7:99:67:22:3a: 80:46:0d:10:d1:51:7d:a2:b2:17:5f:e1:bb:d8:f2: 02:94:5b:27:4c:29:6e:0c:80:bf:ab:69:2a:b3:e9: e9:60:e4:8c:ca:60:18:1b:85:aa:a4:30:5b:11:71: 27:40:a2:eb:65:b5:e4:3a:94:24:c6:9f:17:39:8f: 50:a7:d7:07:5e:0e:ba:e1:1b:2b:fa:63:b2:35:19: b3:f4:a5:5b:1b:14:1e:b6:b6:bb:50:e2:50:19:0e: 90:24:65:21:df:ec:ba:8a:92:b4:eb:86:28:70:fe: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:97:F7:C2:21:4F:81:60:74:41:28:F2:87:15:C6:DD:B4:FF:28:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/42321e29-98ec-3d33-a59d-35f73ae16b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl X509v3 Authority Key Identifier: keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer sbgp-ipAddrBlock: critical IPv4: 100.43.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:e4:3e:26:71:1d:b8:51:b2:fa:b2:ce:8b:aa:15:fd:29:07: ca:76:fa:f5:69:b7:3d:62:33:ce:e2:35:f6:5e:d7:77:45:54: 23:2e:1c:52:57:e3:0b:c2:a0:a2:d4:6e:e1:9c:17:15:33:72: 82:af:04:3a:bf:f5:5a:aa:8c:8a:ad:0b:f0:a9:1f:db:5f:4b: c2:2f:66:07:bc:20:24:54:d3:b6:ed:22:05:e1:81:7d:50:d0: e3:ba:63:70:b0:66:5a:a3:af:ff:7d:da:32:23:70:8a:26:83: c5:d5:fc:9e:35:68:69:55:69:3d:37:11:9e:47:68:f6:4d:0e: 3d:80:b1:ae:bd:5b:20:49:fc:01:40:ac:47:88:b2:90:40:5a: 36:d0:65:9c:cd:98:c9:30:c8:63:3f:b4:ed:e8:9f:45:ce:e1: af:f5:ad:ac:a5:f2:6a:fa:9f:27:c5:15:b5:59:54:a2:fe:fd: cc:0a:de:5e:a0:e6:93:d0:71:27:41:59:5e:9d:84:f1:fd:48: 4d:11:47:75:c0:83:ff:48:8e:c4:93:65:14:78:fc:44:8a:51: 94:7a:f2:7a:fd:47:98:ab:e3:7b:fe:d7:b6:8b:23:03:1d:c7: ce:e7:be:3f:c2:1d:13:45:91:28:c8:46:aa:53:28:d2:7a:55: 11:cc:98:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6too3NiO/dFL+KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx YWRhMB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk YzNjM2QyZWQtYTg1YS00MzgxLWJjN2EtNWIyZWJhNDMyMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ7U+iABD9U+wlMlpYcj+Dj7qS+5vo0pskLD Dj73je+nzAtYVVG3otEYkHyHDYiKpdq7UMeDxhWzjvVPhoMYT1fJ0mFpKlCldmNS LLF5SOBPwEPyLFtQf8C2RlQ0dwtea+RVBfOxjP9UzuQ6YymiGWGy3xNO4P1VPydl 6AWW87DM7p1n65gfFaEzDq2/z3Tn15lnIjqARg0Q0VF9orIXX+G72PIClFsnTClu DIC/q2kqs+npYOSMymAYG4WqpDBbEXEnQKLrZbXkOpQkxp8XOY9Qp9cHXg664Rsr +mOyNRmz9KVbGxQetra7UOJQGQ6QJGUh3+y6ipK064YocP5OJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6X98IhT4FgdEEo8ocVxt20/yiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4 MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvNDIzMjFlMjktOThlYy0z ZDMzLWE1OWQtMzVmNzNhZTE2YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1 ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3 MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZCsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzkPiZxHbhRsvqyzouqFf0pB8p2+vVptz1iM87iNfZe13dFVCMuHFJX 4wvCoKLUbuGcFxUzcoKvBDq/9VqqjIqtC/CpH9tfS8IvZge8ICRU07btIgXhgX1Q 0OO6Y3CwZlqjr/992jIjcIomg8XV/J41aGlVaT03EZ5HaPZNDj2Asa69WyBJ/AFA rEeIspBAWjbQZZzNmMkwyGM/tO3on0XO4a/1rayl8mr6nyfFFbVZVKL+/cwK3l6g 5pPQcSdBWV6dhPH9SE0RR3XAg/9IjsSTZRR4/ESKUZR68nr9R5ir43v+17aLIwMd x87nvj/CHRNFkSjIRqpTKNJ6VRHMmAk= -----END CERTIFICATE-----Generated at Wed Sep 17 08:17:44 2025 by rpki-client