$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/dcf95846-6a90-3029-aed6-381d9852d4c9.roa File: dcf95846-6a90-3029-aed6-381d9852d4c9.roa (raw, json) Hash identifier: VlkifwRkIei+W8NMg+RxdYRTd891ETQZs4+CQwEIloE= Subject key identifier: F7:25:88:B4:F0:B8:43:FA:3E:A7:AC:E7:61:42:10:52:F7:37:57:52 Certificate issuer: /CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Certificate serial: 010D0C9F4328584B715D132218263D777A7B8F40 Authority key identifier: E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/dcf95846-6a90-3029-aed6-381d9852d4c9.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 3257 IP address blocks: 23.140.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:13:22:18:26:3d:77:7a:7b:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=54d72235-7c2a-4c8f-ab5d-fe871d61965f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:1e:74:92:0f:e3:5e:c1:93:4f:a4:da:eb: 3b:ea:d3:07:44:41:dc:82:e3:68:8d:5e:ac:97:49: 36:23:77:cb:0d:54:c2:8c:79:fd:b9:43:9a:52:6f: 6e:75:ea:f7:e8:04:37:d9:51:ad:1f:34:2c:1c:f7: 23:2e:f8:06:cb:b9:f8:99:ed:8a:45:3d:48:06:10: 6a:08:3a:86:82:9e:66:11:67:27:81:0d:54:d8:03: 25:29:be:ac:ba:bc:aa:57:bc:ff:68:6b:3b:09:1f: 36:a4:76:3d:87:7f:91:0f:d9:a0:02:39:13:e6:5d: 77:c6:95:50:f4:da:55:7b:eb:79:37:6e:23:b6:b2: fb:2c:fc:f7:f9:b9:46:96:c4:83:c2:bc:1c:25:76: 86:a0:98:f8:9d:c1:ed:86:d2:6e:de:c6:a6:33:31: 9d:5c:e6:8d:99:43:01:82:c7:a5:78:bf:58:2f:a7: 80:54:ac:f9:e9:56:e6:8b:74:13:b7:3d:3a:fd:d4: 74:5f:f7:a9:3e:d6:0e:9c:61:e0:ea:4e:2d:54:d3: b1:0c:00:98:f6:b8:dd:be:28:d7:51:d9:a0:8d:b1: 67:d5:13:c7:8c:5f:35:14:c3:09:fd:0a:92:1f:72: aa:13:62:63:21:29:3c:1b:4d:dd:db:e7:13:40:a3: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:25:88:B4:F0:B8:43:FA:3E:A7:AC:E7:61:42:10:52:F7:37:57:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/dcf95846-6a90-3029-aed6-381d9852d4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.crl X509v3 Authority Key Identifier: keyid:E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer sbgp-ipAddrBlock: critical IPv4: 23.140.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:50:7c:fb:21:7e:01:fe:d8:7e:64:87:bc:23:87:04:9c:e5: 04:a2:bc:b4:cc:e6:b0:76:6d:63:a3:a8:fb:fa:9f:af:20:7e: 5e:86:87:56:16:8e:24:35:ce:3b:e5:49:fe:c4:e6:12:56:73: 2a:4d:89:ab:f6:46:2b:26:ef:05:7e:3c:9c:a6:79:13:82:8e: 57:aa:19:30:c8:0b:7b:94:08:8f:30:61:9f:8f:78:7b:63:1c: 3c:7b:a1:e8:a1:10:0b:32:90:01:b2:d6:7e:a3:be:9e:de:ac: ba:bf:ae:26:4b:11:1d:07:6f:08:2b:b6:01:6f:79:41:25:d6: 62:da:0f:55:0c:6b:76:52:0d:39:ce:33:e9:d1:8a:56:f0:fc: 05:1f:67:b7:65:e7:f4:4e:9d:a2:95:65:4b:2c:e6:20:9f:35: d1:ce:a4:ee:59:ec:63:08:10:20:cc:e9:31:a6:0b:0c:5b:fb: f7:de:19:0a:4b:3b:54:0e:12:6e:00:0c:ad:41:85:77:a9:ce: cc:51:92:54:5a:90:ce:f2:f8:a2:64:12:66:be:aa:c5:ab:e3: a3:89:b8:b4:8f:b5:76:16:9c:68:29:a0:2d:db:49:13:3d:85: ca:7e:00:5d:80:7e:bd:cb:73:a1:e5:78:39:1d:46:9f:a2:44: b4:da:64:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXRMiGCY9d3p7j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNiYTI5MjgtOGI5OS00ZTk1LTg2NWMtYjgyZDI2ZGU3 YmU5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTRkNzIyMzUtN2MyYS00YzhmLWFiNWQtZmU4NzFkNjE5NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutAedJIP417Bk0+k2us76tMHREHcguNojV6s l0k2I3fLDVTCjHn9uUOaUm9uder36AQ32VGtHzQsHPcjLvgGy7n4me2KRT1IBhBq CDqGgp5mEWcngQ1U2AMlKb6suryqV7z/aGs7CR82pHY9h3+RD9mgAjkT5l13xpVQ 9NpVe+t5N24jtrL7LPz3+blGlsSDwrwcJXaGoJj4ncHthtJu3samMzGdXOaNmUMB gseleL9YL6eAVKz56Vbmi3QTtz06/dR0X/epPtYOnGHg6k4tVNOxDACY9rjdvijX UdmgjbFn1RPHjF81FMMJ/QqSH3KqE2JjISk8G03d2+cTQKMnvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcliLTwuEP6Pqes52FCEFL3N1dSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80M2Jh MjkyOC04Yjk5LTRlOTUtODY1Yy1iODJkMjZkZTdiZTkvZGNmOTU4NDYtNmE5MC0z MDI5LWFlZDYtMzgxZDk4NTJkNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDNiYTI5MjgtOGI5OS00ZTk1LTg2 NWMtYjgyZDI2ZGU3YmU5LzQzYmEyOTI4LThiOTktNGU5NS04NjVjLWI4MmQyNmRl N2JlOS5jcmwwHwYDVR0jBBgwFoAU4SMPHRB3y0V1qF81Vj5Ar7gZwoEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80M2JhMjkyOC04Yjk5LTRlOTUtODY1Yy1iODJk MjZkZTdiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4x8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9QfPshfgH+2H5kh7wjhwSc5QSivLTM5rB2bWOjqPv6n68gfl6Gh1YW jiQ1zjvlSf7E5hJWcypNiav2Rism7wV+PJymeROCjleqGTDIC3uUCI8wYZ+PeHtj HDx7oeihEAsykAGy1n6jvp7erLq/riZLER0HbwgrtgFveUEl1mLaD1UMa3ZSDTnO M+nRilbw/AUfZ7dl5/ROnaKVZUss5iCfNdHOpO5Z7GMIECDM6TGmCwxb+/feGQpL O1QOEm4ADK1BhXepzsxRklRakM7y+KJkEma+qsWr46OJuLSPtXYWnGgpoC3bSRM9 hcp+AF2Afr3Lc6HleDkdRp+iRLTaZBk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:18 2025 by rpki-client