$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa File: 21d91634-ee8c-3230-ab5c-baf16e713980.roa (raw, json) Hash identifier: TS6Wqk1G6SrtbjK71palOzD6dWieCxQe1Kr7LssZT8Y= Subject key identifier: 4E:A6:B0:5C:0B:47:93:5F:44:B6:18:D1:97:3B:65:AD:B8:6C:13:52 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584BA7CCEC46FBC515C0DE8C50C0 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 12076 IP address blocks: 151.207.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ec:46:fb:c5:15:c0:de:8c:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=db80bc7d-ab97-4c37-b8d9-19b69a9186d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:29:73:2c:ce:7c:b2:6c:ef:ec:23:36:2b: 12:a2:be:38:c1:b5:e3:ca:ab:4c:a7:28:03:8b:f3: fa:7a:6c:46:b6:2b:14:a9:48:f0:e1:b2:bb:c1:25: 20:79:5c:91:de:e2:d1:b8:fd:94:a6:99:03:17:92: 16:a2:e3:70:2a:d3:51:7a:ec:9b:c8:96:de:37:c4: 04:d0:c1:ec:bd:4e:6c:bd:c0:1b:e3:f9:7b:01:99: 99:cf:d0:f7:ff:83:46:fc:df:13:4b:55:0b:60:d5: 50:09:59:cc:5c:01:7c:90:9f:03:1d:9a:c4:de:fd: 6e:49:a8:c2:43:01:c5:10:29:02:9e:87:cc:d3:83: 14:1d:74:5f:04:0c:8c:73:9e:d1:4f:74:0f:2a:cd: 62:f8:29:14:a1:95:8b:a8:dd:bb:94:d8:2e:77:d1: 1d:90:6b:f4:2e:e9:1b:97:14:52:f4:44:20:0f:e4: e7:ff:35:e1:61:97:25:25:a4:a1:b3:ae:f6:27:e2: a5:e6:2d:06:19:8b:9f:8d:af:0c:d1:f6:de:13:a4: 48:1a:c5:5a:0f:d4:5b:d1:32:26:8f:a0:74:3d:31: 8a:94:db:85:3e:4e:a8:44:8b:93:4e:31:eb:05:84: 3d:bd:a2:a1:73:57:8f:0f:96:80:7c:70:f1:60:02: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A6:B0:5C:0B:47:93:5F:44:B6:18:D1:97:3B:65:AD:B8:6C:13:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e5:37:e1:8d:ea:07:d1:b4:07:2b:4e:49:cb:e4:d9:e8:15: f5:77:e0:cf:36:3e:d6:de:f0:ec:ab:84:c1:8b:5b:f4:e3:c7: c5:a4:be:e1:dc:87:17:13:3b:76:59:71:94:97:b3:1f:ae:dd: 7d:c0:ec:6e:3b:78:21:84:c7:fd:98:99:a0:06:2c:e2:a6:b3: 4f:19:6e:5c:35:2c:4d:40:4c:f7:2e:51:d6:5d:44:45:a1:50: ff:71:16:4f:19:8e:99:3c:e0:28:05:4a:e3:36:9f:4e:94:b5: cd:3e:27:c5:09:09:54:d9:a3:56:11:91:64:d5:32:5c:7d:de: 2d:88:a2:6c:4c:20:8c:74:77:d2:1f:17:8c:21:39:d1:a1:0d: 6d:20:35:ec:63:54:7b:2d:e1:44:77:c1:f1:10:71:62:aa:6d: 26:56:9e:cd:86:18:35:01:3f:b0:a2:8e:6e:e6:dd:88:6c:e5: 11:46:11:10:5a:ae:ea:a5:20:37:2a:2e:04:ba:39:af:ec:25: 00:39:53:61:20:40:1d:d5:df:09:37:91:db:d1:2a:be:9a:4f: 1e:08:33:63:59:d4:02:81:9c:4b:2a:0a:82:a2:e3:c3:14:a0: 0a:04:de:54:03:0c:40:8b:6d:eb:c2:c8:8c:ff:7d:83:44:0e: 70:67:da:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOxG+8UVwN6MUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZGI4MGJjN2QtYWI5Ny00YzM3LWI4ZDktMTliNjlhOTE4NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNIpcyzOfLJs7+wjNisSor44wbXjyqtMpygD i/P6emxGtisUqUjw4bK7wSUgeVyR3uLRuP2UppkDF5IWouNwKtNReuybyJbeN8QE 0MHsvU5svcAb4/l7AZmZz9D3/4NG/N8TS1ULYNVQCVnMXAF8kJ8DHZrE3v1uSajC QwHFECkCnofM04MUHXRfBAyMc57RT3QPKs1i+CkUoZWLqN27lNgud9EdkGv0Lukb lxRS9EQgD+Tn/zXhYZclJaShs672J+Kl5i0GGYufja8M0fbeE6RIGsVaD9Rb0TIm j6B0PTGKlNuFPk6oRIuTTjHrBYQ9vaKhc1ePD5aAfHDxYAJakQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6msFwLR5NfRLYY0Zc7Za24bBNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvMjFkOTE2MzQtZWU4Yy0z MjMwLWFiNWMtYmFmMTZlNzEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl88sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjlN+GN6gfRtAcrTknL5NnoFfV34M82Ptbe8OyrhMGLW/Tjx8WkvuHc hxcTO3ZZcZSXsx+u3X3A7G47eCGEx/2YmaAGLOKms08Zblw1LE1ATPcuUdZdREWh UP9xFk8Zjpk84CgFSuM2n06Utc0+J8UJCVTZo1YRkWTVMlx93i2IomxMIIx0d9If F4whOdGhDW0gNexjVHst4UR3wfEQcWKqbSZWns2GGDUBP7Cijm7m3Yhs5RFGERBa ruqlIDcqLgS6Oa/sJQA5U2EgQB3V3wk3kdvRKr6aTx4IM2NZ1AKBnEsqCoKi48MU oAoE3lQDDECLbevCyIz/fYNEDnBn2mM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:27:04 2025 by rpki-client