$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f33969c9-f854-371e-ad6d-ec69212003b2.roa File: f33969c9-f854-371e-ad6d-ec69212003b2.roa (raw, json) Hash identifier: pEK0qGL+JAxjeUigzizjw9w56Yz6822zwgNsy0lJJWg= Subject key identifier: D1:84:D6:45:7C:D6:4E:7F:1D:44:FF:9D:84:24:B0:3D:93:1D:FE:BA Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584F8DD86097327694A01FDDE780 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f33969c9-f854-371e-ad6d-ec69212003b2.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 3477 IP address blocks: 151.207.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:60:97:32:76:94:a0:1f:dd:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=9e726216-c69b-46b3-962c-3f0a13d7c1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:89:ec:0a:5d:94:0b:1a:f5:51:c8:8c:70: e1:cd:ba:ed:bc:44:e9:84:46:b1:58:a0:ec:05:70: 24:2e:de:e2:40:ea:91:97:22:bd:ce:d2:37:27:a3: 41:14:03:d4:f3:b4:dc:65:d2:52:2d:de:63:1f:01: b6:56:d7:4b:60:3a:9e:2f:73:6b:1b:59:62:47:f2: 99:04:26:c6:22:ec:b2:26:4f:57:9b:5b:56:c9:a8: dd:56:c2:be:68:5c:56:ef:61:0c:5e:75:f3:47:0b: 39:f2:7b:3e:cd:37:00:72:cf:50:98:ae:1f:fa:47: ac:67:22:e7:90:c5:46:64:60:90:14:5a:8f:ff:15: 7d:38:da:ba:e8:b8:d7:13:55:a3:bf:d6:7f:8a:90: 70:2f:f4:71:25:2d:ed:cc:51:e2:0a:7f:57:c8:f6: d1:fc:6b:5f:72:ef:7f:94:ff:8a:b6:25:c6:c2:cc: d1:f8:54:ad:5f:7d:d1:b8:c1:30:7e:96:dc:a4:99: 7c:ab:50:5f:b4:72:a8:af:e3:e1:66:93:0e:6f:d5: 56:9b:51:cf:43:a4:c1:b7:a5:ee:6c:5f:1e:a9:f2: 7a:5a:c2:b5:f7:6f:36:bf:b7:58:be:bc:5a:21:d6: 6d:db:ed:2f:6f:7e:61:72:67:f7:cf:e0:10:95:43: 7a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:84:D6:45:7C:D6:4E:7F:1D:44:FF:9D:84:24:B0:3D:93:1D:FE:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f33969c9-f854-371e-ad6d-ec69212003b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:6f:d4:2c:71:8b:2f:ea:e3:a4:e0:10:d3:c3:92:94:8f:6e: ac:1e:3a:1d:d1:0c:f1:54:d0:83:97:67:bb:52:2f:e3:ef:bf: f1:78:6b:30:01:e7:ee:44:91:18:f8:48:31:c9:0f:46:85:43: 0b:f6:e4:3d:36:2b:3e:a1:1d:cf:95:ad:37:0b:a9:1b:c2:62: 7c:2a:b1:a2:e7:17:57:e7:7e:90:a6:82:85:43:35:26:87:4e: 2d:f1:8d:80:f7:eb:ef:36:72:7f:fb:04:bf:50:ad:8e:b5:8b: 65:4f:fb:0f:d0:78:f8:bb:7b:93:0e:0c:19:6c:69:7a:cb:e7: 11:9f:78:e1:70:de:74:81:67:fd:c9:db:b4:0a:34:0a:0c:4e: 67:12:1a:cb:30:f0:0f:61:6a:f0:76:64:60:8e:da:e5:54:c4: ad:2e:f2:fa:0f:65:6f:ae:09:da:00:f3:a2:ef:5c:ce:2d:46: 58:cf:66:87:7c:ef:5d:35:be:35:38:9a:bb:0c:88:df:5d:b2: 8e:ab:79:7e:80:e1:9c:e0:14:08:6a:8b:07:38:ff:e4:65:61: 3a:6b:74:c7:27:4d:91:b5:f2:37:b0:38:29:da:17:fa:75:f4: 3f:aa:99:e8:07:c9:0f:94:f0:b0:02:ae:64:d5:cc:af:71:30: 4b:e6:ec:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2GCXMnaUoB/d54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk OWU3MjYyMTYtYzY5Yi00NmIzLTk2MmMtM2YwYTEzZDdjMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9KJ7ApdlAsa9VHIjHDhzbrtvETphEaxWKDs BXAkLt7iQOqRlyK9ztI3J6NBFAPU87TcZdJSLd5jHwG2VtdLYDqeL3NrG1liR/KZ BCbGIuyyJk9Xm1tWyajdVsK+aFxW72EMXnXzRws58ns+zTcAcs9QmK4f+kesZyLn kMVGZGCQFFqP/xV9ONq66LjXE1Wjv9Z/ipBwL/RxJS3tzFHiCn9XyPbR/Gtfcu9/ lP+KtiXGwszR+FStX33RuMEwfpbcpJl8q1BftHKor+PhZpMOb9VWm1HPQ6TBt6Xu bF8eqfJ6WsK19282v7dYvrxaIdZt2+0vb35hcmf3z+AQlUN6SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGE1kV81k5/HUT/nYQksD2THf66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZjMzOTY5YzktZjg1NC0z NzFlLWFkNmQtZWM2OTIxMjAwM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl88JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlv1Cxxiy/q46TgENPDkpSPbqweOh3RDPFU0IOXZ7tSL+Pvv/F4azAB 5+5EkRj4SDHJD0aFQwv25D02Kz6hHc+VrTcLqRvCYnwqsaLnF1fnfpCmgoVDNSaH Ti3xjYD36+82cn/7BL9QrY61i2VP+w/QePi7e5MODBlsaXrL5xGfeOFw3nSBZ/3J 27QKNAoMTmcSGssw8A9havB2ZGCO2uVUxK0u8voPZW+uCdoA86LvXM4tRljPZod8 7101vjU4mrsMiN9dso6reX6A4ZzgFAhqiwc4/+RlYTprdMcnTZG18jewOCnaF/p1 9D+qmegHyQ+U8LACrmTVzK9xMEvm7Ao= -----END CERTIFICATE-----Generated at Tue Oct 20 04:20:30 2026 by rpki-client