$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7/2fe09953-921a-3161-a00a-964a3b67c81a.roa File: 2fe09953-921a-3161-a00a-964a3b67c81a.roa (raw, json) Hash identifier: kqIQ215ePZkUWKSU9ll9HxoPKbYkqNKSx5opULuwako= Subject key identifier: E2:06:03:C2:79:93:21:76:D8:0D:86:1C:DC:72:DD:0D:78:96:2B:7C Certificate issuer: /CN=743c1d49-1fc4-4e1f-a5ff-83dece73acd7 Certificate serial: 010D0C9F4328584B5E5C0F29D21AE3C73AAD6A80 Authority key identifier: 83:2A:34:D6:74:FB:C0:02:82:6B:E9:46:A3:C6:A6:F6:6A:2B:B9:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7/2fe09953-921a-3161-a00a-964a3b67c81a.roa Signing time: Tue 30 Sep 2025 17:39:10 +0000 ROA not before: Tue 30 Sep 2025 17:39:10 +0000 ROA not after: Mon 29 Dec 2025 18:39:10 +0000 asID: 53883 IP address blocks: 204.44.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7/743c1d49-1fc4-4e1f-a5ff-83dece73acd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7/743c1d49-1fc4-4e1f-a5ff-83dece73acd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:5c:0f:29:d2:1a:e3:c7:3a:ad:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743c1d49-1fc4-4e1f-a5ff-83dece73acd7 Validity Not Before: Sep 30 17:39:10 2025 GMT Not After : Dec 29 18:39:10 2025 GMT Subject: CN=c7f95c7a-17bf-4154-b9f1-fdd1b70689db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:41:26:65:04:65:80:f9:cf:4f:60:45:cf:c9: 6a:89:31:91:89:8b:c7:cd:58:8f:db:8e:de:99:4e: dc:19:18:b4:26:eb:7b:6a:bd:39:73:59:25:1a:5d: 1a:68:7e:78:18:d9:f9:03:59:4b:77:62:a6:69:07: 34:00:67:dc:76:5a:9a:b9:f3:98:0e:53:f8:33:5e: 14:21:d4:0e:4f:b1:cd:73:64:7e:3d:6e:d4:b1:66: 23:96:17:86:78:c9:4f:e9:66:2b:aa:e7:12:80:62: 15:b9:76:8e:d6:e9:6c:db:09:cd:31:dc:aa:76:38: ba:25:26:e3:aa:90:d8:c0:7e:2a:bb:66:ef:8c:23: 9c:5c:6a:4a:e2:39:df:18:72:85:e2:68:f4:2c:29: 8a:30:f4:15:d8:b0:b0:b8:20:ab:40:9d:87:74:a0: cf:69:8e:8e:86:20:9a:cc:bf:49:36:58:53:1b:e7: c2:ef:10:6a:d3:fb:41:7b:af:69:75:9c:d9:c9:4b: 60:22:7a:08:16:0d:fa:3e:67:f2:4c:21:3a:73:9c: 86:22:8c:38:ba:0e:3e:25:60:ef:1f:cc:b9:9d:59: 71:78:f9:ec:08:b0:34:71:31:66:ba:65:33:c0:3e: f4:29:7d:88:a8:d3:5e:ba:d3:4d:88:4e:08:d7:e3: 98:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:06:03:C2:79:93:21:76:D8:0D:86:1C:DC:72:DD:0D:78:96:2B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7/2fe09953-921a-3161-a00a-964a3b67c81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7/743c1d49-1fc4-4e1f-a5ff-83dece73acd7.crl X509v3 Authority Key Identifier: keyid:83:2A:34:D6:74:FB:C0:02:82:6B:E9:46:A3:C6:A6:F6:6A:2B:B9:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/743c1d49-1fc4-4e1f-a5ff-83dece73acd7.cer sbgp-ipAddrBlock: critical IPv4: 204.44.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:25:98:1d:43:7b:15:ce:0b:aa:50:81:89:06:48:29:dc:2b: 27:06:68:bd:29:1b:3b:2b:b6:78:b9:78:89:1e:89:08:5e:d2: e5:0e:29:1c:9d:4e:90:b9:d8:cd:dc:88:5d:12:5c:c6:5a:52: f9:aa:f8:15:4f:5a:2f:76:b6:0e:37:ec:fe:74:f8:f7:44:59: 71:45:9c:c5:b9:be:78:09:f5:ef:58:b0:b7:12:df:d4:50:fb: ef:df:06:8b:b0:37:a3:ba:14:49:5f:31:17:e0:8a:8d:19:ac: 83:03:58:85:11:65:84:0a:9f:ec:d9:cb:ee:bc:17:b5:ab:98: c7:59:ea:67:cc:c0:f2:72:bc:f1:ed:24:f3:a2:aa:de:07:df: 8a:b9:91:87:de:f5:57:1f:82:40:9e:60:3e:ee:12:69:48:7e: bd:2b:1f:38:40:1a:0a:52:22:4b:12:0b:89:47:38:6b:1c:b6: 4f:66:bf:f4:1f:73:a3:7b:92:cb:d8:fa:63:a8:98:b4:13:0d: 18:a0:23:18:6e:8c:c7:c7:97:6f:1e:08:0e:ae:35:a4:c3:57: 4d:2b:d2:3e:1f:fc:60:8e:38:7e:88:6e:69:22:3c:53:ca:fe: aa:0e:04:0e:5d:15:25:c2:33:da:84:13:0b:52:21:c2:80:fa: 59:ce:fa:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEteXA8p0hrjxzqtaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzYzFkNDktMWZjNC00ZTFmLWE1ZmYtODNkZWNlNzNh Y2Q3MB4XDTI1MDkzMDE3MzkxMFoXDTI1MTIyOTE4MzkxMFowLzEtMCsGA1UEAxMk YzdmOTVjN2EtMTdiZi00MTU0LWI5ZjEtZmRkMWI3MDY4OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUEmZQRlgPnPT2BFz8lqiTGRiYvHzViP247e mU7cGRi0Jut7ar05c1klGl0aaH54GNn5A1lLd2KmaQc0AGfcdlqaufOYDlP4M14U IdQOT7HNc2R+PW7UsWYjlheGeMlP6WYrqucSgGIVuXaO1uls2wnNMdyqdji6JSbj qpDYwH4qu2bvjCOcXGpK4jnfGHKF4mj0LCmKMPQV2LCwuCCrQJ2HdKDPaY6OhiCa zL9JNlhTG+fC7xBq0/tBe69pdZzZyUtgInoIFg36PmfyTCE6c5yGIow4ug4+JWDv H8y5nVlxePnsCLA0cTFmumUzwD70KX2IqNNeutNNiE4I1+OY2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIGA8J5kyF22A2GHNxy3Q14lit8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NDNj MWQ0OS0xZmM0LTRlMWYtYTVmZi04M2RlY2U3M2FjZDcvMmZlMDk5NTMtOTIxYS0z MTYxLWEwMGEtOTY0YTNiNjdjODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzQzYzFkNDktMWZjNC00ZTFmLWE1 ZmYtODNkZWNlNzNhY2Q3Lzc0M2MxZDQ5LTFmYzQtNGUxZi1hNWZmLTgzZGVjZTcz YWNkNy5jcmwwHwYDVR0jBBgwFoAUgyo01nT7wAKCa+lGo8am9moruWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83NDNjMWQ0OS0xZmM0LTRlMWYtYTVmZi04M2Rl Y2U3M2FjZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzCydMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAElmB1DexXOC6pQgYkGSCncKycGaL0pGzsrtni5eIkeiQhe0uUOKRyd TpC52M3ciF0SXMZaUvmq+BVPWi92tg437P50+PdEWXFFnMW5vngJ9e9YsLcS39RQ ++/fBouwN6O6FElfMRfgio0ZrIMDWIURZYQKn+zZy+68F7WrmMdZ6mfMwPJyvPHt JPOiqt4H34q5kYfe9VcfgkCeYD7uEmlIfr0rHzhAGgpSIksSC4lHOGsctk9mv/Qf c6N7ksvY+mOomLQTDRigIxhujMfHl28eCA6uNaTDV00r0j4f/GCOOH6IbmkiPFPK /qoOBA5dFSXCM9qEEwtSIcKA+lnO+sA= -----END CERTIFICATE-----Generated at Wed Oct 8 22:58:41 2025 by rpki-client