$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa File: 10f72b7c-8477-34d9-84e6-673dfd0817f0.roa (raw, json) Hash identifier: rqMMB9YXw4oQ8YMpCZj0OpsNIV+cu3K9slXiBPHLLUQ= Subject key identifier: A2:8C:24:A1:3B:F6:BC:27:6F:AB:F2:76:BE:92:1E:58:38:5A:41:96 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584BA7CCEBAA50AA59E57B4134C0 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 5744 IP address blocks: 151.207.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:eb:aa:50:aa:59:e5:7b:41:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=4b3f2691-bc91-476f-893a-84027d9c70b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:54:39:08:97:20:bf:7e:e3:34:db:fb:a2: ac:d9:e0:54:02:9b:8b:7d:d4:fc:30:8c:6d:96:a4: d1:33:66:5b:aa:a7:4b:62:fc:e7:b3:57:eb:0e:42: 5e:b4:5c:e6:88:73:92:69:09:07:71:a4:95:5f:3c: 59:b8:35:ad:96:ec:2a:2e:42:d3:82:c9:be:0b:fd: 58:a2:16:d7:3f:f9:76:69:ab:80:c0:00:87:7d:0d: 98:78:20:46:f4:4e:da:b7:0b:e0:4d:fb:61:85:0d: c0:cf:49:69:f3:ed:c2:0a:21:c5:16:73:f7:ca:20: d5:ae:82:6f:12:2d:64:e5:02:60:a7:24:86:ff:16: c1:85:87:4a:18:32:6a:42:7e:fd:64:79:87:15:fb: d5:82:dd:d8:2d:29:a6:e7:40:8c:63:c6:ae:7a:47: 32:43:46:9a:40:1a:b4:70:6a:41:35:dd:ed:0b:25: 58:62:a6:f2:19:57:4b:93:31:95:c5:0b:4e:92:18: e1:6e:e6:5f:45:ea:18:03:56:bf:e4:11:a1:82:e8: 09:9a:d0:df:18:72:e8:55:54:0a:27:49:60:fa:5c: f0:21:de:aa:c4:97:fb:9f:b7:06:11:18:30:6c:46: ee:9f:70:de:d7:33:54:9c:2f:ad:c3:44:8f:dc:10: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8C:24:A1:3B:F6:BC:27:6F:AB:F2:76:BE:92:1E:58:38:5A:41:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a2:c7:0a:eb:20:7f:16:58:fb:4e:bc:9f:6a:2f:fa:e5:e7: 01:dd:86:40:8b:b3:11:b9:9d:6c:5b:8c:66:73:5b:24:bf:3e: 6d:a9:cb:82:39:6b:a6:d1:62:8b:6a:56:9b:3d:9e:07:3d:92: 72:38:35:d2:da:67:f7:53:6b:6a:28:9e:e5:a2:1f:80:a2:18: b3:85:0e:03:11:91:7e:2a:0e:53:e9:2f:c9:72:ca:14:25:9e: 6f:1c:b4:0f:3c:54:1e:55:07:a2:ec:79:c9:55:d3:44:10:e3: aa:47:dc:c7:aa:95:ff:66:48:a5:5d:7e:53:00:c3:6f:0d:21: 2a:90:23:ff:38:b8:ab:41:70:48:0f:55:44:60:19:74:01:19: d8:7a:4c:15:36:f0:b9:be:08:40:06:9d:bf:01:0c:63:7a:05: 02:ee:01:26:02:cb:bd:43:28:64:de:6a:a0:fd:14:37:98:b0: 07:33:37:6d:d2:5d:8c:0e:d7:2c:0d:b8:58:aa:58:cc:ca:22: eb:1b:be:df:9c:0b:13:82:16:ab:eb:d3:50:44:d8:80:bf:aa: d5:08:a8:36:e0:88:5b:77:f0:da:c4:d5:b9:81:8c:45:72:d4: 9e:a3:75:c5:c1:43:78:92:b5:bc:fe:4a:bb:51:74:e9:75:d0: 4d:3a:e8:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOuqUKpZ5XtBNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NGIzZjI2OTEtYmM5MS00NzZmLTg5M2EtODQwMjdkOWM3MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LNUOQiXIL9+4zTb+6Ks2eBUApuLfdT8MIxt lqTRM2ZbqqdLYvzns1frDkJetFzmiHOSaQkHcaSVXzxZuDWtluwqLkLTgsm+C/1Y ohbXP/l2aauAwACHfQ2YeCBG9E7atwvgTfthhQ3Az0lp8+3CCiHFFnP3yiDVroJv Ei1k5QJgpySG/xbBhYdKGDJqQn79ZHmHFfvVgt3YLSmm50CMY8auekcyQ0aaQBq0 cGpBNd3tCyVYYqbyGVdLkzGVxQtOkhjhbuZfReoYA1a/5BGhgugJmtDfGHLoVVQK J0lg+lzwId6qxJf7n7cGERgwbEbun3De1zNUnC+tw0SP3BDaDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKMJKE79rwnb6vydr6SHlg4WkGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvMTBmNzJiN2MtODQ3Ny0z NGQ5LTg0ZTYtNjczZGZkMDgxN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISixwrrIH8WWPtOvJ9qL/rl5wHdhkCLsxG5nWxbjGZzWyS/Pm2py4I5 a6bRYotqVps9ngc9knI4NdLaZ/dTa2oonuWiH4CiGLOFDgMRkX4qDlPpL8lyyhQl nm8ctA88VB5VB6LseclV00QQ46pH3Meqlf9mSKVdflMAw28NISqQI/84uKtBcEgP VURgGXQBGdh6TBU28Lm+CEAGnb8BDGN6BQLuASYCy71DKGTeaqD9FDeYsAczN23S XYwO1ywNuFiqWMzKIusbvt+cCxOCFqvr01BE2IC/qtUIqDbgiFt38NrE1bmBjEVy 1J6jdcXBQ3iStbz+SrtRdOl10E066Gc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:41 2025 by rpki-client