$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da61526e-5957-30c4-a289-03af000b1c83.roa File: da61526e-5957-30c4-a289-03af000b1c83.roa (raw, json) Hash identifier: zOQTSNFxmqObOU2jCG0BUmVYMzEuI+l8rvO5qU3jbX4= Subject key identifier: BF:C0:95:75:A7:71:47:90:73:FD:3F:49:C9:23:36:6F:39:24:7A:BB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B4617075FCDB90C2A70683F00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da61526e-5957-30c4-a289-03af000b1c83.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 398465 IP address blocks: 168.143.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:07:5f:cd:b9:0c:2a:70:68:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=0ce5a5e1-63d5-49b5-9ed8-efc328575d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:c0:2f:78:b0:5b:0a:7a:f7:13:2e:7a:14: 8b:8c:68:71:58:9c:f9:4c:a9:73:bd:03:64:4f:b7: 09:ab:7f:90:1b:06:41:5a:56:ae:1d:12:d3:fb:07: 3c:e0:3d:dd:cc:9e:9d:3c:80:20:55:c3:ee:53:88: 5d:1b:97:e6:5e:23:7c:7c:44:c1:9c:55:cd:26:00: 3f:5f:2e:1c:4f:82:93:c7:d6:f9:bf:f0:50:3a:75: eb:58:c3:03:ae:8d:99:03:f2:0f:84:86:1e:73:ae: a4:98:b7:70:19:dd:cd:fc:91:32:16:91:0a:c8:ee: e4:d6:39:37:18:76:81:0e:74:28:18:e1:87:a0:c8: 7e:bb:6b:de:15:5f:0f:d7:e6:a7:6b:ab:7c:9f:3d: 98:f7:db:50:ca:22:42:43:c0:06:31:78:7c:bc:5b: 23:15:bd:f9:32:62:d2:d1:00:14:b8:5a:9e:4d:fb: f6:05:fa:1e:a4:2c:48:65:e2:85:f9:c4:48:ae:bc: ca:ed:84:27:5f:21:01:28:64:a6:8b:bd:46:d2:62: d2:84:54:12:10:34:db:3e:a9:2b:f0:f2:68:bc:55: 0f:67:73:c3:f2:e8:22:55:c8:0d:24:2f:30:40:b7: c2:18:fa:f8:e3:71:34:cf:1d:8f:ed:d4:e5:03:96: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C0:95:75:A7:71:47:90:73:FD:3F:49:C9:23:36:6F:39:24:7A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da61526e-5957-30c4-a289-03af000b1c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0c:95:1e:c7:d4:53:aa:a8:3f:fc:61:b5:66:83:46:b2:e9: 0d:e5:ff:22:4b:a0:4c:06:cf:8b:f1:df:ad:ff:4b:fc:e1:39: 48:2c:d6:ab:2b:29:a7:6b:11:28:f8:f8:69:43:a3:e9:c7:19: fa:99:3e:7f:99:96:4a:98:ba:ca:2d:d6:ae:32:dd:e2:7b:81: 10:45:f3:2f:8f:4d:c5:e6:91:af:4f:24:f0:fb:1e:7a:e5:24: 0e:d2:91:17:05:e8:ec:c2:c3:42:60:67:2a:e1:a0:bd:6f:e7: c0:37:b8:a9:8a:23:79:ac:46:c7:c8:6a:f7:b5:a7:5f:2a:a5: b7:96:02:f5:99:1d:e6:18:53:76:0b:4c:df:03:dd:59:d4:15: 1d:a9:31:99:b1:6e:bd:27:0d:6e:19:a1:f2:0f:83:71:37:6f: 02:07:9c:81:24:07:45:b4:a9:95:be:3d:64:1d:e5:f2:25:17: 17:fa:6d:d3:b6:d0:06:31:9b:89:aa:c1:e4:a7:04:5c:1a:0e: 12:9e:91:c6:9b:ad:a2:ea:fc:35:96:cf:be:7e:b4:56:71:2a: 0c:51:6b:24:bc:1a:a8:bf:fe:d4:be:2d:08:86:b1:4e:5d:53: 5d:87:7a:5c:87:6f:35:a7:0d:98:dd:a2:bc:17:fc:67:c3:ee: c7:5d:53:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwdfzbkMKnBoPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MGNlNWE1ZTEtNjNkNS00OWI1LTllZDgtZWZjMzI4NTc1ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7bAL3iwWwp69xMuehSLjGhxWJz5TKlzvQNk T7cJq3+QGwZBWlauHRLT+wc84D3dzJ6dPIAgVcPuU4hdG5fmXiN8fETBnFXNJgA/ Xy4cT4KTx9b5v/BQOnXrWMMDro2ZA/IPhIYec66kmLdwGd3N/JEyFpEKyO7k1jk3 GHaBDnQoGOGHoMh+u2veFV8P1+ana6t8nz2Y99tQyiJCQ8AGMXh8vFsjFb35MmLS 0QAUuFqeTfv2BfoepCxIZeKF+cRIrrzK7YQnXyEBKGSmi71G0mLShFQSEDTbPqkr 8PJovFUPZ3PD8ugiVcgNJC8wQLfCGPr443E0zx2P7dTlA5Yc5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/AlXWncUeQc/0/SckjNm85JHq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGE2MTUyNmUtNTk1Ny0z MGM0LWEyODktMDNhZjAwMGIxYzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqI8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEMlR7H1FOqqD/8YbVmg0ay6Q3l/yJLoEwGz4vx363/S/zhOUgs1qsr KadrESj4+GlDo+nHGfqZPn+ZlkqYusot1q4y3eJ7gRBF8y+PTcXmka9PJPD7Hnrl JA7SkRcF6OzCw0JgZyrhoL1v58A3uKmKI3msRsfIave1p18qpbeWAvWZHeYYU3YL TN8D3VnUFR2pMZmxbr0nDW4ZofIPg3E3bwIHnIEkB0W0qZW+PWQd5fIlFxf6bdO2 0AYxm4mqweSnBFwaDhKekcabraLq/DWWz75+tFZxKgxRayS8Gqi//tS+LQiGsU5d U12HelyHbzWnDZjdorwX/GfD7sddU/E= -----END CERTIFICATE-----Generated at Wed Nov 5 10:58:45 2025 by rpki-client