$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa File: fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa (raw, json) Hash identifier: OxNhPQp531sKxwjvUF8qhF7u8E2BSiqZL4OoaFX0Fm4= Subject key identifier: 40:F7:A3:E5:9E:50:EE:37:64:32:28:05:EF:40:9F:CB:90:FB:03:FB Certificate issuer: /CN=4d6573b2-9f3e-43b9-a710-eaee606df226 Certificate serial: 010D0C9F4328584B13D6C75F83BE264D30238780 Authority key identifier: 20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 3128 IP address blocks: 143.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c7:5f:83:be:26:4d:30:23:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d6573b2-9f3e-43b9-a710-eaee606df226 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=7bf185fb-9827-431f-9488-2c13994ee957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7b:5b:05:cb:d3:7d:d7:73:6b:45:40:53:50: af:a3:d6:9f:6a:d5:bd:79:b6:81:74:b8:08:02:a8: ac:c7:7f:90:a5:3e:00:c3:be:9a:e6:82:fb:ee:5d: da:75:e0:24:54:e8:fa:1a:03:17:e4:e7:37:2b:f6: 36:89:c6:7e:49:fd:b6:69:13:39:ff:13:10:f5:e5: f8:72:da:b4:2b:aa:3d:21:09:71:92:3e:61:39:c8: 06:86:f6:f1:67:c2:f5:2e:96:4c:14:8a:f2:9c:d2: 31:01:67:ff:5a:20:40:af:91:e6:3d:bb:32:a5:8d: 61:30:22:b7:92:34:64:43:57:74:8b:5e:0c:86:8b: a6:03:b9:a1:a2:36:43:c0:f3:9e:42:8a:b5:81:21: 92:52:ca:d7:9c:0d:5c:12:a2:22:8f:55:64:12:7e: 56:f0:7f:87:68:28:6d:1f:8d:5a:55:e4:72:6f:9e: 9a:17:45:0f:9a:0f:a9:ce:a2:ca:8a:60:02:9d:ac: 5b:94:ed:a2:b9:28:8d:52:23:a4:e0:c9:d5:99:32: c9:a3:6b:bb:32:7e:60:17:61:c1:98:f3:cc:91:24: 43:85:b0:04:51:f8:bf:ee:41:c8:3d:03:58:38:43: 21:e8:01:f9:94:4e:d4:55:c2:cb:60:3d:ec:fe:dd: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F7:A3:E5:9E:50:EE:37:64:32:28:05:EF:40:9F:CB:90:FB:03:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl X509v3 Authority Key Identifier: keyid:20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer sbgp-ipAddrBlock: critical IPv4: 143.200.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:58:1f:c8:2b:e1:06:05:65:dd:3c:ea:c9:24:31:20:4d:63: dd:0c:cf:d2:6d:24:cd:c6:91:f7:54:6a:19:36:db:b7:b0:e2: 78:e4:f8:b3:a1:c8:04:6b:78:34:c7:55:cf:bd:41:aa:2b:22: 8d:06:00:6b:73:1c:43:d6:5d:e5:07:1d:26:d1:cc:98:c8:df: 26:c0:fd:85:bc:36:2c:9c:f2:4d:93:3c:ec:8d:3b:54:24:6e: bb:50:6d:ab:c9:20:28:74:bb:ed:d1:b8:de:02:02:ab:e5:f7: 9e:26:41:0b:e0:9c:16:a9:58:d3:7d:01:b1:3a:50:71:ae:19: 3b:d3:5d:ce:e1:42:c0:3a:d5:39:f6:94:9b:cc:ea:1f:e2:63: db:00:ad:b2:1e:48:0e:4f:c7:8b:6c:e2:5e:fe:c5:25:46:ff: 3b:9c:8c:48:55:6f:0a:59:42:92:c0:ae:74:f2:0a:76:e3:dc: 10:fc:c2:84:89:93:b3:2b:a3:7e:fb:88:a8:d0:64:aa:2a:dc: 2a:9f:6f:5e:8f:a9:06:4f:94:bd:9b:20:bf:f3:74:d7:8c:94: 52:10:1c:ca:e5:84:75:3e:45:33:70:c5:af:08:62:43:24:fd: a1:f5:47:a2:6c:7d:69:cb:5c:cd:c4:ba:2c:d8:cf:97:8e:f0: e7:e6:48:69 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsT1sdfg74mTTAjh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ2NTczYjItOWYzZS00M2I5LWE3MTAtZWFlZTYwNmRm MjI2MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk N2JmMTg1ZmItOTgyNy00MzFmLTk0ODgtMmMxMzk5NGVlOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXtbBcvTfddza0VAU1Cvo9afatW9ebaBdLgI Aqisx3+QpT4Aw76a5oL77l3adeAkVOj6GgMX5Oc3K/Y2icZ+Sf22aRM5/xMQ9eX4 ctq0K6o9IQlxkj5hOcgGhvbxZ8L1LpZMFIrynNIxAWf/WiBAr5HmPbsypY1hMCK3 kjRkQ1d0i14MhoumA7mhojZDwPOeQoq1gSGSUsrXnA1cEqIij1VkEn5W8H+HaCht H41aVeRyb56aF0UPmg+pzqLKimACnaxblO2iuSiNUiOk4MnVmTLJo2u7Mn5gF2HB mPPMkSRDhbAEUfi/7kHIPQNYOEMh6AH5lE7UVcLLYD3s/t3eQwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFED3o+WeUO43ZDIoBe9An8uQ+wP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZDY1 NzNiMi05ZjNlLTQzYjktYTcxMC1lYWVlNjA2ZGYyMjYvZmNhNWQwYmQtOGNlZi0z YmJhLWJjNWYtNTc4OWNiNGIzN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGQ2NTczYjItOWYzZS00M2I5LWE3 MTAtZWFlZTYwNmRmMjI2LzRkNjU3M2IyLTlmM2UtNDNiOS1hNzEwLWVhZWU2MDZk ZjIyNi5jcmwwHwYDVR0jBBgwFoAUIGP8w86qMlYmvVnAcbAWhEPjBaowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZDY1NzNiMi05ZjNlLTQzYjktYTcxMC1lYWVl NjA2ZGYyMjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj8gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZFgfyCvhBgVl3TzqySQxIE1j3QzP0m0kzcaR91RqGTbbt7DieOT4s6HI BGt4NMdVz71BqisijQYAa3McQ9Zd5QcdJtHMmMjfJsD9hbw2LJzyTZM87I07VCRu u1Btq8kgKHS77dG43gICq+X3niZBC+CcFqlY030BsTpQca4ZO9NdzuFCwDrVOfaU m8zqH+Jj2wCtsh5IDk/Hi2ziXv7FJUb/O5yMSFVvCllCksCudPIKduPcEPzChImT syujfvuIqNBkqircKp9vXo+pBk+UvZsgv/N014yUUhAcyuWEdT5FM3DFrwhiQyT9 ofVHomx9actczcS6LNjPl47w5+ZIaQ== -----END CERTIFICATE-----Generated at Fri Oct 10 14:03:41 2025 by rpki-client