$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa File: 43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa (raw, json) Hash identifier: bQZT2HUyyW1r4WuHP6bD17JtFa4tifF4OnJ2STJMglo= Subject key identifier: CC:4E:5A:D8:07:ED:21:F8:34:94:95:D8:09:DE:F4:64:FD:02:B2:98 Certificate issuer: /CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Certificate serial: 010D0C9F4328584B5ADC7E37750B29B00B47A780 Authority key identifier: 07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa Signing time: Mon 29 Sep 2025 11:34:43 +0000 ROA not before: Mon 29 Sep 2025 11:34:43 +0000 ROA not after: Sun 28 Dec 2025 12:34:43 +0000 asID: 17378 IP address blocks: 204.239.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5a:dc:7e:37:75:0b:29:b0:0b:47:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Validity Not Before: Sep 29 11:34:43 2025 GMT Not After : Dec 28 12:34:43 2025 GMT Subject: CN=877a51ce-c04b-47d6-b571-a6f42197e810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:77:ec:e8:18:df:b9:a7:80:05:c9:30:d3: 9c:f1:ee:e8:b8:8d:85:ec:bd:8a:4b:21:d1:66:a2: 7c:b9:ba:5d:42:a3:58:68:44:5a:1c:e2:b2:7e:97: e9:2f:ca:fe:91:b5:aa:6c:29:27:9e:0a:7d:f5:30: 19:e4:72:4b:7e:18:a9:44:d6:2c:b3:6a:35:30:21: d9:6c:46:03:27:29:3a:d4:8f:3b:38:3e:5e:bc:b8: 46:6d:04:fe:f4:8a:ee:58:f0:08:de:f3:c7:3d:53: d6:ff:0c:05:0d:6c:a4:a6:1f:87:a4:8c:ba:4b:fa: f3:fd:39:dd:bb:80:14:bb:fd:de:c1:e6:89:0b:e7: f8:78:64:d3:83:8c:c3:8e:9f:db:ab:48:da:fb:6f: f3:f0:20:2a:90:dd:25:0f:ce:5d:fd:0e:0d:b8:3d: ff:b0:a6:97:f2:40:45:e7:0a:9e:76:25:03:3c:5a: 1e:70:75:11:98:c9:62:2f:0d:90:32:ba:fb:ec:9b: f7:4d:18:a5:95:65:aa:9a:03:79:45:9c:e2:18:22: 39:52:c1:d5:e7:32:d2:3e:c5:d8:40:21:75:a0:07: 79:4e:2e:04:d9:4d:f5:e3:ba:cf:ce:68:18:91:08: 37:dc:34:6b:2c:12:c6:7b:be:1d:3c:6e:f7:2a:b1: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4E:5A:D8:07:ED:21:F8:34:94:95:D8:09:DE:F4:64:FD:02:B2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.crl X509v3 Authority Key Identifier: keyid:07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer sbgp-ipAddrBlock: critical IPv4: 204.239.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:36:99:67:93:d3:3f:0e:96:f5:2b:f0:4c:fe:86:95:c9:27: 98:9f:31:aa:1d:85:d5:1e:8f:f0:2a:fa:96:32:11:12:f1:7d: f9:83:2d:89:1d:83:ed:ba:93:08:95:b3:26:ed:d6:f0:bd:27: e0:49:d4:4e:e5:17:b7:8c:08:46:11:5f:a7:d1:f6:9a:b1:ae: 10:bb:10:77:38:6d:91:04:3e:4c:10:f3:80:93:a3:1a:72:dc: 12:94:23:f7:66:e3:5d:67:13:bd:a0:30:49:5d:46:93:bd:78: 4c:da:a5:c6:8b:9a:ef:86:1a:27:fb:7f:dd:1b:fd:3d:1a:b5: aa:73:67:c2:af:f2:2d:a6:e5:0e:86:ae:c5:a6:3b:6e:9b:84: c0:45:ea:36:49:c1:7f:a2:59:b8:81:6a:b8:a4:47:22:18:a3: 33:1b:da:37:41:d9:f1:0c:9e:f7:40:18:45:41:b2:13:18:80: 2a:35:0b:4e:b3:87:49:bd:4f:d9:ec:c4:19:e2:70:2e:cb:7f: ed:11:05:03:d2:70:34:a6:0d:84:e0:8e:59:af:5a:ca:fb:28: ad:c9:03:df:61:86:58:ab:0d:d8:46:2f:7b:0e:17:ca:84:d3: 65:bc:df:6e:1f:da:bd:d2:86:96:62:bb:46:e9:5b:13:a5:6c: 1b:5a:cb:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEta3H43dQspsAtHp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5OWMzMTMtNWYyZi00YzUyLTg0YzMtZjcyM2RlZTIz ZjJhMB4XDTI1MDkyOTExMzQ0M1oXDTI1MTIyODEyMzQ0M1owLzEtMCsGA1UEAxMk ODc3YTUxY2UtYzA0Yi00N2Q2LWI1NzEtYTZmNDIxOTdlODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z137OgY37mngAXJMNOc8e7ouI2F7L2KSyHR ZqJ8ubpdQqNYaERaHOKyfpfpL8r+kbWqbCknngp99TAZ5HJLfhipRNYss2o1MCHZ bEYDJyk61I87OD5evLhGbQT+9IruWPAI3vPHPVPW/wwFDWykph+HpIy6S/rz/Tnd u4AUu/3eweaJC+f4eGTTg4zDjp/bq0ja+2/z8CAqkN0lD85d/Q4NuD3/sKaX8kBF 5wqediUDPFoecHURmMliLw2QMrr77Jv3TRillWWqmgN5RZziGCI5UsHV5zLSPsXY QCF1oAd5Ti4E2U3147rPzmgYkQg33DRrLBLGe74dPG73KrG3gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxOWtgH7SH4NJSV2Ane9GT9ArKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzk5 YzMxMy01ZjJmLTRjNTItODRjMy1mNzIzZGVlMjNmMmEvNDNlY2UwY2UtY2U4MS0z ZThmLTg4ZDgtYTZkNmRjMzcxODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzc5OWMzMTMtNWYyZi00YzUyLTg0 YzMtZjcyM2RlZTIzZjJhL2M3OTljMzEzLTVmMmYtNGM1Mi04NGMzLWY3MjNkZWUy M2YyYS5jcmwwHwYDVR0jBBgwFoAUB6rii6Ts+LSBm04l0gwhyEzpbhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzk5YzMxMy01ZjJmLTRjNTItODRjMy1mNzIz ZGVlMjNmMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw2mWeT0z8OlvUr8Ez+hpXJJ5ifMaodhdUej/Aq+pYyERLxffmDLYkd g+26kwiVsybt1vC9J+BJ1E7lF7eMCEYRX6fR9pqxrhC7EHc4bZEEPkwQ84CToxpy 3BKUI/dm411nE72gMEldRpO9eEzapcaLmu+GGif7f90b/T0atapzZ8Kv8i2m5Q6G rsWmO26bhMBF6jZJwX+iWbiBarikRyIYozMb2jdB2fEMnvdAGEVBshMYgCo1C06z h0m9T9nsxBnicC7Lf+0RBQPScDSmDYTgjlmvWsr7KK3JA99hhlirDdhGL3sOF8qE 02W8324f2r3ShpZiu0bpWxOlbBtay6s= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:41 2025 by rpki-client