$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa File: 8443b0db-29e2-35db-b8e1-34359b0b5e82.roa (raw, json) Hash identifier: bBHEMzmYMSeiS2SQPSP2VvDwTXtlDw0CXhPFgNUooMU= Subject key identifier: 99:8D:77:9E:25:49:D2:7D:16:F7:DA:A1:06:A9:B9:8D:CD:A6:B4:8A Certificate issuer: /CN=a38ff47f-825f-4455-b429-60f899d42ec6 Certificate serial: 010D0C9F4328584BA39D2123E6E83796D330BF80 Authority key identifier: 5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399840 IP address blocks: 192.43.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:21:23:e6:e8:37:96:d3:30:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38ff47f-825f-4455-b429-60f899d42ec6 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=95db8a65-f1ee-4e4d-a860-5f553aa5f01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:35:73:53:99:07:7f:53:7e:7a:b2:d0:52: 04:52:b6:fd:c2:d1:2b:fc:00:af:55:59:af:03:34: 1a:55:0d:f8:bf:68:a0:26:dc:02:a9:90:a4:67:ac: 91:25:9e:d3:6a:b7:c4:2e:86:08:81:41:c6:ce:b6: 2a:90:83:9d:5d:07:75:75:a4:7d:62:5d:65:9d:83: dd:95:6b:5c:36:03:38:23:0d:65:44:8f:45:ef:46: 86:e0:e0:f2:e7:93:68:f4:c4:54:dc:e1:e6:14:b3: 93:d6:09:80:eb:2c:22:8e:b9:23:97:09:4c:74:dc: c6:1c:0f:d8:e0:d0:a6:0f:27:47:f0:30:92:4f:c9: a5:42:b3:e7:d2:42:6b:f6:01:46:14:f1:a4:81:3f: 06:0d:44:47:b5:bf:e5:79:5d:9a:2c:05:51:f5:9f: bb:8d:44:7c:4a:27:4e:f1:6e:18:6e:15:81:b2:4d: 1a:c5:25:06:0a:bb:62:62:c9:b9:40:50:aa:c0:30: 85:d1:fc:cc:30:9a:6b:d1:ee:a0:88:23:59:b3:26: 5f:24:e6:3a:bf:d8:84:57:df:5d:f2:07:06:ce:76: 87:33:14:6b:a3:04:25:39:25:f6:18:6a:04:61:77: f6:d2:a4:ae:70:61:76:18:95:d9:89:ea:e3:d3:a7: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8D:77:9E:25:49:D2:7D:16:F7:DA:A1:06:A9:B9:8D:CD:A6:B4:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.crl X509v3 Authority Key Identifier: keyid:5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer sbgp-ipAddrBlock: critical IPv4: 192.43.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e2:2a:57:94:70:b8:4c:49:9e:53:ba:ff:d7:cf:1d:8b:2d: b6:31:51:f5:b3:0e:8e:00:46:f7:b5:35:18:6c:73:d8:18:6a: d0:55:01:bc:40:bf:2c:96:b1:86:f0:d0:6a:e9:ce:9b:cd:92: 16:9d:11:79:6c:72:1f:53:a2:99:87:99:44:e4:e9:f8:d0:42: de:42:81:e0:6a:47:af:f3:20:f5:e4:87:19:66:b7:18:ab:27: 5a:82:c7:af:ab:aa:a5:5c:76:6b:22:0a:6f:cf:25:1f:0a:84: 6f:cd:65:b3:25:26:06:8d:6b:70:99:88:e8:83:57:36:ac:19: 78:c3:0f:65:94:df:c5:41:b1:45:ea:7c:a9:5b:09:2a:f1:bd: f0:e9:71:55:7e:25:6d:83:22:65:03:c2:33:34:3b:f8:d5:a6: ec:56:44:8c:3c:c3:20:e6:ff:e8:d5:05:72:26:e6:4c:a6:0e: 00:3e:b0:65:e1:39:80:09:e1:2a:7a:f8:af:e5:61:0f:06:20: 67:03:1a:6f:34:2a:e7:64:28:62:87:5d:fa:1e:df:29:89:29: 12:9d:f0:e5:34:6e:7b:3f:f4:3e:d0:0b:08:11:eb:0a:7e:e1: 25:76:40:e1:df:cd:12:50:8c:db:21:fb:0f:e0:9b:52:d9:c0: fe:42:75:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSEj5ug3ltMwv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM4ZmY0N2YtODI1Zi00NDU1LWI0MjktNjBmODk5ZDQy ZWM2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTVkYjhhNjUtZjFlZS00ZTRkLWE4NjAtNWY1NTNhYTVmMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbg1c1OZB39Tfnqy0FIEUrb9wtEr/ACvVVmv AzQaVQ34v2igJtwCqZCkZ6yRJZ7TarfELoYIgUHGzrYqkIOdXQd1daR9Yl1lnYPd lWtcNgM4Iw1lRI9F70aG4ODy55No9MRU3OHmFLOT1gmA6ywijrkjlwlMdNzGHA/Y 4NCmDydH8DCST8mlQrPn0kJr9gFGFPGkgT8GDURHtb/leV2aLAVR9Z+7jUR8SidO 8W4YbhWBsk0axSUGCrtiYsm5QFCqwDCF0fzMMJpr0e6giCNZsyZfJOY6v9iEV99d 8gcGznaHMxRrowQlOSX2GGoEYXf20qSucGF2GJXZierj06epIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmNd54lSdJ9FvfaoQapuY3NprSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMzhm ZjQ3Zi04MjVmLTQ0NTUtYjQyOS02MGY4OTlkNDJlYzYvODQ0M2IwZGItMjllMi0z NWRiLWI4ZTEtMzQzNTliMGI1ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTM4ZmY0N2YtODI1Zi00NDU1LWI0 MjktNjBmODk5ZDQyZWM2L2EzOGZmNDdmLTgyNWYtNDQ1NS1iNDI5LTYwZjg5OWQ0 MmVjNi5jcmwwHwYDVR0jBBgwFoAUWzyP2EiFClYUqC5lRFnJvaAUW2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMzhmZjQ3Zi04MjVmLTQ0NTUtYjQyOS02MGY4 OTlkNDJlYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHniKleUcLhMSZ5Tuv/Xzx2LLbYxUfWzDo4ARve1NRhsc9gYatBVAbxA vyyWsYbw0GrpzpvNkhadEXlsch9TopmHmUTk6fjQQt5CgeBqR6/zIPXkhxlmtxir J1qCx6+rqqVcdmsiCm/PJR8KhG/NZbMlJgaNa3CZiOiDVzasGXjDD2WU38VBsUXq fKlbCSrxvfDpcVV+JW2DImUDwjM0O/jVpuxWRIw8wyDm/+jVBXIm5kymDgA+sGXh OYAJ4Sp6+K/lYQ8GIGcDGm80KudkKGKHXfoe3ymJKRKd8OU0bns/9D7QCwgR6wp+ 4SV2QOHfzRJQjNsh+w/gm1LZwP5CdVA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:35 2025 by rpki-client