$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/b2c3aedd-d7f1-3010-a45a-2c28bbc37272.roa File: b2c3aedd-d7f1-3010-a45a-2c28bbc37272.roa (raw, json) Hash identifier: dlXEKVoeu4I/azVNmDgVHb/QL792K3bgH46d4i6i13Q= Subject key identifier: 8D:54:7A:F2:3A:6C:E1:7E:E9:C4:F3:59:B0:42:C9:9F:F6:2C:10:08 Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Certificate serial: 010D0C9F4328584BA9B1655E2462904ECE39D600 Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/b2c3aedd-d7f1-3010-a45a-2c28bbc37272.roa Signing time: Mon 27 Oct 2025 17:16:45 +0000 ROA not before: Mon 27 Oct 2025 17:16:45 +0000 ROA not after: Sun 25 Jan 2026 18:16:45 +0000 asID: 213245 IP address blocks: 184.169.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:b1:65:5e:24:62:90:4e:ce:39:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Validity Not Before: Oct 27 17:16:45 2025 GMT Not After : Jan 25 18:16:45 2026 GMT Subject: CN=f71b4729-7c4c-49f4-b816-70b11c7acbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:3d:1f:1c:ee:42:09:76:6b:f4:4e:f3:96: 80:81:15:06:86:60:66:61:13:55:d8:af:69:f7:0a: fe:d6:44:65:83:73:42:e0:2b:39:75:97:65:14:6b: 41:ff:b5:29:1a:d6:9f:9d:e7:b3:b4:74:92:61:a3: b0:51:43:1c:f9:5a:bd:ce:00:ab:39:a5:10:d5:3f: 19:b9:3c:c6:2a:26:e4:91:a8:02:eb:b9:49:58:11: fa:e2:95:a4:e4:69:81:65:ce:d6:d9:81:fe:ff:51: 0f:94:07:8d:8b:ce:34:67:0f:a4:eb:ce:9a:4f:69: ef:41:7f:b6:17:0f:49:88:78:5a:cd:d5:a5:e0:2a: b5:75:e6:63:53:95:27:83:d8:8d:88:cd:d6:ed:20: 8b:53:6e:3b:12:e5:51:64:7d:e7:36:ad:d9:27:4e: 23:97:2c:72:0b:5d:db:bd:69:26:2c:76:02:9c:9b: 9a:06:8e:0d:d0:f9:db:2c:b5:f3:86:d7:44:83:33: 93:c3:4b:3c:f1:83:ec:62:42:12:60:be:81:c2:c5: 08:6e:97:ab:aa:e3:2c:76:b3:88:48:47:e3:f4:fa: 99:cf:3b:05:4f:0a:5a:83:f2:77:87:0a:8a:f2:68: 63:16:1d:8a:f6:f1:6e:6b:43:32:f3:2c:3e:c9:4e: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:7A:F2:3A:6C:E1:7E:E9:C4:F3:59:B0:42:C9:9F:F6:2C:10:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/b2c3aedd-d7f1-3010-a45a-2c28bbc37272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl X509v3 Authority Key Identifier: keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer sbgp-ipAddrBlock: critical IPv4: 184.169.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d0:25:76:16:87:d1:9c:fe:0a:de:da:b2:f8:be:19:30:00: 80:e8:84:da:02:ee:c7:0c:cf:ad:8c:8b:2e:2e:c6:01:40:36: d3:31:02:74:da:57:16:0a:13:b5:03:bc:49:d7:9a:84:12:45: 12:44:fd:17:f9:01:81:c2:30:cd:97:d2:60:e5:9b:a7:8c:18: 3c:c5:15:32:3a:df:87:8a:f4:db:43:3f:50:e3:a6:1e:81:0c: 76:b1:ca:9d:f6:b4:da:90:63:48:bb:47:ad:55:1a:3e:56:24: f0:38:47:20:db:8d:93:76:d3:91:3d:3c:65:6d:d6:12:41:e5: 62:85:57:d8:b6:b0:94:54:f2:67:51:62:98:9e:68:0b:41:9f: b7:90:a1:5e:a8:2a:c1:e3:37:0a:0d:62:40:e3:ae:98:7b:ec: bd:9a:c2:5f:78:b0:55:ab:b4:a3:a4:93:fa:07:ff:7d:29:49: e7:e1:05:52:61:57:ce:cf:c5:b6:6e:e3:92:4f:0d:7d:61:5d: de:16:1c:83:a0:46:67:ad:40:5f:b5:9d:fd:4f:17:bd:8e:3f: 98:0a:e9:0b:fa:21:0c:43:4c:64:d1:d2:d5:21:f7:c5:a4:00: b1:c8:93:6a:44:f0:90:c4:c6:37:8d:8f:35:40:58:d8:9e:5b: 09:6c:f4:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupsWVeJGKQTs451gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk Mjk4MB4XDTI1MTAyNzE3MTY0NVoXDTI2MDEyNTE4MTY0NVowLzEtMCsGA1UEAxMk ZjcxYjQ3MjktN2M0Yy00OWY0LWI4MTYtNzBiMTFjN2FjYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HM9HxzuQgl2a/RO85aAgRUGhmBmYRNV2K9p 9wr+1kRlg3NC4Cs5dZdlFGtB/7UpGtafneeztHSSYaOwUUMc+Vq9zgCrOaUQ1T8Z uTzGKibkkagC67lJWBH64pWk5GmBZc7W2YH+/1EPlAeNi840Zw+k686aT2nvQX+2 Fw9JiHhazdWl4Cq1deZjU5Ung9iNiM3W7SCLU247EuVRZH3nNq3ZJ04jlyxyC13b vWkmLHYCnJuaBo4N0PnbLLXzhtdEgzOTw0s88YPsYkISYL6BwsUIbperquMsdrOI SEfj9PqZzzsFTwpag/J3hwqK8mhjFh2K9vFua0My8yw+yU6DOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1UevI6bOF+6cTzWbBCyZ/2LBAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvYjJjM2FlZGQtZDdmMS0z MDEwLWE0NWEtMmMyOGJiYzM3MjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuKkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjQJXYWh9Gc/gre2rL4vhkwAIDohNoC7scMz62Miy4uxgFANtMxAnTa VxYKE7UDvEnXmoQSRRJE/Rf5AYHCMM2X0mDlm6eMGDzFFTI634eK9NtDP1Djph6B DHaxyp32tNqQY0i7R61VGj5WJPA4RyDbjZN205E9PGVt1hJB5WKFV9i2sJRU8mdR YpieaAtBn7eQoV6oKsHjNwoNYkDjrph77L2awl94sFWrtKOkk/oH/30pSefhBVJh V87PxbZu45JPDX1hXd4WHIOgRmetQF+1nf1PF72OP5gK6Qv6IQxDTGTR0tUh98Wk ALHIk2pE8JDExjeNjzVAWNieWwls9K4= -----END CERTIFICATE-----Generated at Tue Oct 28 03:43:15 2025 by rpki-client