$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa File: dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa (raw, json) Hash identifier: cA3Ek+V24FlFHryItCB0GR2GaLBiWqGDN86AnENA2ek= Subject key identifier: C2:40:04:12:BD:93:A6:AA:FF:35:8E:D8:83:BD:45:70:78:07:ED:2F Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584BA7CCEC255C9B7121E92B54C0 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 5744 IP address blocks: 151.207.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ec:25:5c:9b:71:21:e9:2b:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=b7590293-8fbf-48ac-a491-713d9c26ce6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:cb:1d:17:aa:e4:c9:0f:5c:67:73:90:26: ee:8a:52:f6:c5:e5:9e:6e:34:a1:48:24:8d:99:55: dd:4f:4f:74:e8:e6:b6:65:6b:b7:f5:6a:22:23:d2: d4:9f:80:72:0d:6f:cb:37:84:1e:49:9d:7a:c2:49: fa:f3:e6:86:55:36:a2:c2:41:1f:c0:11:ff:a1:90: 46:66:83:dc:ff:d5:2c:85:a7:36:7b:e8:94:66:eb: 92:b3:f9:c0:31:a9:57:1d:f8:06:56:ef:7a:4e:a3: 2d:0f:db:e8:da:9e:ce:40:26:8b:b2:3d:02:52:70: 7a:4b:8f:65:91:ea:91:1c:ef:fc:14:bf:24:11:b1: d0:15:71:17:f9:5a:83:84:e8:16:c6:24:9b:a1:a5: 61:48:a4:02:73:80:13:36:7f:82:a8:a1:a9:5c:15: aa:9d:55:cf:65:25:48:a5:4e:f4:5b:5a:3d:29:64: 07:cd:b4:c6:8f:04:b5:1b:ac:07:88:8e:a5:45:bc: 23:59:7b:27:cf:ab:54:39:f0:58:13:56:dd:d8:30: 33:31:25:4f:58:ad:11:1c:b0:b8:dd:20:69:38:53: 57:57:8d:81:ae:ca:84:29:e5:b1:5b:7f:32:1e:b1: 96:74:fa:11:0b:ee:f6:b8:18:f1:9f:e5:f1:e1:ea: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:40:04:12:BD:93:A6:AA:FF:35:8E:D8:83:BD:45:70:78:07:ED:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:75:69:6d:10:80:fb:94:6a:6b:c7:cb:7a:af:07:1e:6d:cc: 04:92:94:27:3a:1d:eb:d2:ef:a8:6e:34:b4:fa:23:be:b8:2f: e7:44:a5:36:c7:d4:04:e8:5b:69:94:bd:de:89:74:4f:2e:b4: 94:03:69:04:d1:98:34:96:6b:86:0c:95:a5:83:48:ec:a6:58: b2:03:76:5e:1e:32:df:7a:4d:c9:57:31:ed:3a:b2:c2:8f:91: 3a:66:6a:84:2d:47:54:0f:81:83:7b:c1:6e:13:7b:8d:49:97: d8:fe:fb:8c:cb:cb:6a:06:f3:58:d8:a3:f2:38:2e:5b:48:39: df:d1:58:86:1d:b4:38:0f:04:bf:c0:46:2c:31:a0:d9:0d:63: c3:12:fb:5d:db:ab:45:bc:62:f9:6e:48:48:d3:17:24:29:74: c6:67:f0:d2:4b:76:8d:42:56:19:2d:ed:6a:d8:3c:8b:d3:e8: bc:6d:85:50:f1:8b:69:d9:98:76:96:22:f0:34:e4:a0:00:e7: e0:42:d6:c5:cc:e5:6e:db:26:db:49:66:cb:ef:c8:6e:d7:1d: d9:b9:46:8e:82:7c:29:23:d7:5b:84:d1:f7:97:0a:5a:2a:bc: bd:b8:60:00:ea:45:2b:43:16:47:e7:40:30:1e:30:f1:90:4f: 61:2a:05:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOwlXJtxIekrVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Yjc1OTAyOTMtOGZiZi00OGFjLWE0OTEtNzEzZDljMjZjZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuDLHReq5MkPXGdzkCbuilL2xeWebjShSCSN mVXdT0906Oa2ZWu39WoiI9LUn4ByDW/LN4QeSZ16wkn68+aGVTaiwkEfwBH/oZBG ZoPc/9Ushac2e+iUZuuSs/nAMalXHfgGVu96TqMtD9vo2p7OQCaLsj0CUnB6S49l keqRHO/8FL8kEbHQFXEX+VqDhOgWxiSboaVhSKQCc4ATNn+CqKGpXBWqnVXPZSVI pU70W1o9KWQHzbTGjwS1G6wHiI6lRbwjWXsnz6tUOfBYE1bd2DAzMSVPWK0RHLC4 3SBpOFNXV42BrsqEKeWxW38yHrGWdPoRC+72uBjxn+Xx4ep25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJABBK9k6aq/zWO2IO9RXB4B+0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZGQyM2EyOTctOTA5MC0z YjJkLTkzMTQtMWVjMzJmY2FmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN1aW0QgPuUamvHy3qvBx5tzASSlCc6HevS76huNLT6I764L+dEpTbH 1AToW2mUvd6JdE8utJQDaQTRmDSWa4YMlaWDSOymWLIDdl4eMt96TclXMe06ssKP kTpmaoQtR1QPgYN7wW4Te41Jl9j++4zLy2oG81jYo/I4LltIOd/RWIYdtDgPBL/A RiwxoNkNY8MS+13bq0W8YvluSEjTFyQpdMZn8NJLdo1CVhkt7WrYPIvT6LxthVDx i2nZmHaWIvA05KAA5+BC1sXM5W7bJttJZsvvyG7XHdm5Ro6CfCkj11uE0feXCloq vL24YADqRStDFkfnQDAeMPGQT2EqBa0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:04:58 2025 by rpki-client