$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/5d0613bc-579f-3cb3-a0cd-79cff2831eae.roa File: 5d0613bc-579f-3cb3-a0cd-79cff2831eae.roa (raw, json) Hash identifier: LxGKDT56z1vUSGvfP+lxuxjuDuzAnfgRjv0wgK6hGXc= Subject key identifier: F1:0C:9A:C2:0E:89:7D:D3:B1:C2:8E:D6:8D:5C:A6:F7:FE:36:A2:7A Certificate issuer: /CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Certificate serial: 010D0C9F4328584BBFA5B9FB173E79C12EEB5000 Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/5d0613bc-579f-3cb3-a0cd-79cff2831eae.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 400110 IP address blocks: 184.169.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b9:fb:17:3e:79:c1:2e:eb:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=9e079b33-efbd-4413-b56e-a4442bdc5595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:e8:4e:a1:7c:7c:31:f5:09:f9:92:6e:0e: c0:87:8a:94:fa:bb:a9:94:f2:66:33:9f:d9:32:68: 2a:1d:0d:da:cd:21:4f:0a:98:8f:c3:f6:7f:e9:8d: 25:25:96:f2:2f:76:2a:23:ba:8b:1d:0c:e6:09:77: f7:4a:e1:07:2d:c3:53:20:35:30:1e:f7:c0:68:31: da:83:c1:06:15:62:a7:39:11:f5:a4:cc:01:1c:f5: fd:c7:ac:9a:3a:4e:ce:13:9b:53:62:3e:be:f7:17: 64:2a:de:98:46:61:bd:03:56:fb:35:16:3a:00:07: 9e:63:68:14:38:51:6c:33:3e:67:77:b3:03:66:dc: 9c:bf:85:0f:ce:25:f7:57:06:a5:26:e9:78:e3:9a: 84:7e:2b:40:24:73:76:bd:0c:61:eb:11:03:58:63: 6b:a9:e6:f3:a2:5d:72:04:00:66:dc:56:ff:82:82: eb:2e:01:ee:9d:9c:5f:0d:f3:88:06:0a:a2:eb:44: 50:ec:52:9c:b0:b6:f8:00:f3:7d:26:84:ec:8a:01: 4f:f8:57:7a:8f:3c:1c:79:fb:40:cb:20:19:08:cb: 06:f4:9f:5c:84:79:67:b0:5f:31:62:f7:9b:a1:66: bd:ed:38:cc:6c:db:de:ac:1e:a2:5f:2c:3c:11:8a: 1b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0C:9A:C2:0E:89:7D:D3:B1:C2:8E:D6:8D:5C:A6:F7:FE:36:A2:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/5d0613bc-579f-3cb3-a0cd-79cff2831eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl X509v3 Authority Key Identifier: keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer sbgp-ipAddrBlock: critical IPv4: 184.169.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:8c:92:58:e7:f0:8e:9b:76:8d:ca:c6:2b:b5:4e:7f:82:08: cd:d5:03:59:50:71:d9:89:5e:82:f5:24:3e:af:09:70:b1:a0: dc:ae:87:52:da:c2:b5:28:71:19:7b:cc:67:b2:a7:0b:6b:af: 48:62:29:6e:6c:e2:5c:c6:38:55:8f:4f:72:db:b9:c6:4e:0d: f5:44:56:94:92:2b:4e:c7:a5:2c:f3:7d:d1:84:ed:e0:65:a4: 9d:c2:77:ba:78:66:34:14:20:d5:ae:40:dd:81:4a:24:77:b5: ad:70:9f:d0:0c:ca:0c:f3:0d:ab:9c:f9:b6:95:6c:fa:31:5c: 20:1d:0f:10:44:1f:da:b2:e0:6c:cf:96:03:e1:36:65:09:1d: 90:84:99:1e:80:58:09:a6:3d:cb:17:e8:ff:f4:e4:b3:4e:a9: 7d:e2:ff:a0:76:08:fd:82:17:ae:b6:a0:1f:31:7e:87:3f:12: d5:2f:77:da:db:44:27:8f:c6:a7:2f:50:93:7f:d6:a3:ae:b4: 68:6c:15:8f:43:f1:f3:f5:87:40:ef:1a:a5:f1:ca:cf:9c:ba: 16:84:ec:b5:bd:73:c3:ce:fd:c3:06:24:88:96:17:c4:05:e2: e8:20:0e:50:76:f3:c7:35:93:fc:13:5e:ff:d3:2d:f7:12:ae: f8:db:76:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbn7Fz55wS7rUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkZmQ3NzctZGUxZi00M2Q0LTgzOWYtMDc0YzVmM2Jk Mjk4MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk OWUwNzliMzMtZWZiZC00NDEzLWI1NmUtYTQ0NDJiZGM1NTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvjoTqF8fDH1CfmSbg7Ah4qU+ruplPJmM5/Z MmgqHQ3azSFPCpiPw/Z/6Y0lJZbyL3YqI7qLHQzmCXf3SuEHLcNTIDUwHvfAaDHa g8EGFWKnORH1pMwBHPX9x6yaOk7OE5tTYj6+9xdkKt6YRmG9A1b7NRY6AAeeY2gU OFFsMz5nd7MDZtycv4UPziX3VwalJul445qEfitAJHN2vQxh6xEDWGNrqebzol1y BABm3Fb/goLrLgHunZxfDfOIBgqi60RQ7FKcsLb4APN9JoTsigFP+Fd6jzwceftA yyAZCMsG9J9chHlnsF8xYveboWa97TjMbNverB6iXyw8EYobKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEMmsIOiX3TscKO1o1cpvf+NqJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80M2Rm ZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRjNWYzYmQyOTgvNWQwNjEzYmMtNTc5Zi0z Y2IzLWEwY2QtNzljZmYyODMxZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDNkZmQ3NzctZGUxZi00M2Q0LTgz OWYtMDc0YzVmM2JkMjk4LzQzZGZkNzc3LWRlMWYtNDNkNC04MzlmLTA3NGM1ZjNi ZDI5OC5jcmwwHwYDVR0jBBgwFoAUr/l6foWPAPqyZCoge4JiOKxPflAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80M2RmZDc3Ny1kZTFmLTQzZDQtODM5Zi0wNzRj NWYzYmQyOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuKkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuMkljn8I6bdo3Kxiu1Tn+CCM3VA1lQcdmJXoL1JD6vCXCxoNyuh1La wrUocRl7zGeypwtrr0hiKW5s4lzGOFWPT3LbucZODfVEVpSSK07HpSzzfdGE7eBl pJ3Cd7p4ZjQUINWuQN2BSiR3ta1wn9AMygzzDauc+baVbPoxXCAdDxBEH9qy4GzP lgPhNmUJHZCEmR6AWAmmPcsX6P/05LNOqX3i/6B2CP2CF662oB8xfoc/EtUvd9rb RCePxqcvUJN/1qOutGhsFY9D8fP1h0DvGqXxys+cuhaE7LW9c8PO/cMGJIiWF8QF 4uggDlB288c1k/wTXv/TLfcSrvjbdvE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:58:57 2025 by rpki-client