$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa File: f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa (raw, json) Hash identifier: GnI7x3QMo80kGf0UXQV+ENaIUNth3vYRWNZoYS0RW2U= Subject key identifier: A9:43:56:E1:01:83:E8:39:AD:43:8C:77:59:4A:B0:42:89:70:01:63 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584BBB7594A9013FEBA7E41BE4C0 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 5744 IP address blocks: 151.207.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:94:a9:01:3f:eb:a7:e4:1b:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=34e806bd-7a9c-4df3-851c-17c639ae71c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:46:53:fa:c8:a0:b8:26:9b:bd:fe:06:91: 3f:30:07:26:1e:f7:d4:f6:0b:61:c6:29:fe:58:f5: 2d:82:ae:64:45:e4:93:7f:a7:35:4c:c1:58:ee:35: 6e:b1:36:97:80:d0:32:f8:5c:40:b4:ac:75:9d:bc: 58:6d:22:40:98:cf:fc:a7:47:17:2b:c6:7b:1e:c3: 35:73:d2:92:2b:fa:49:3a:2b:cc:6b:48:58:d0:71: d9:9e:91:aa:83:e0:6a:f0:1d:a4:68:35:93:dd:ba: be:6d:20:d9:53:ea:cb:4c:c4:41:71:35:6c:d7:cc: 47:83:d0:c6:f4:12:7d:8d:57:31:aa:64:4a:aa:55: 94:d0:ed:9e:74:7a:1a:c9:7d:77:52:21:2d:ae:42: 01:ac:6b:4b:f7:34:47:2f:cd:55:a3:13:67:c6:5e: 95:84:d2:45:05:6f:16:ec:cb:ca:9f:f0:62:2a:e7: bc:6a:21:83:1b:db:7a:27:67:c5:69:08:cc:c3:f8: 78:f8:99:54:47:27:5f:d1:fc:e4:de:9a:5a:a6:0e: 16:84:19:6c:93:ba:f0:08:d7:ff:a4:68:97:b7:44: f0:69:23:89:8c:10:be:86:ae:da:13:12:ca:fd:3c: 2a:50:78:11:bc:60:67:66:b3:5d:27:55:85:27:b2: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:43:56:E1:01:83:E8:39:AD:43:8C:77:59:4A:B0:42:89:70:01:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:60:f2:c1:a6:dc:d1:94:40:0b:c1:6e:76:d1:a1:33:f1:f1: 7f:c2:27:e0:98:71:86:a9:83:1e:2a:9e:b6:75:92:2c:8f:e1: 46:65:4d:4a:08:42:d9:bb:c0:3c:25:b2:f5:7b:60:57:9c:bf: d6:cd:5a:bd:e7:bb:8f:87:6f:1f:ab:ae:69:9e:51:26:2e:06: e2:27:1d:69:0b:34:42:2c:1b:92:f5:47:a6:4a:5d:07:d5:1e: 42:41:49:dd:c7:25:bc:b2:df:3e:61:21:fc:7b:1a:c3:44:c6: ea:5c:63:d2:74:11:08:fa:e6:35:4f:1a:54:15:e9:6d:b7:fd: 5b:ed:83:26:da:db:4d:48:b4:13:44:ff:e5:5f:38:9a:01:13: 38:83:27:50:fc:c0:81:e0:eb:b4:01:2a:7b:9d:c9:f9:a3:3b: ff:ab:6e:a7:d1:2f:93:3e:43:5b:34:a5:f0:52:cf:f3:c3:68: c6:79:91:d7:e9:f9:f1:9a:b4:67:a6:38:ac:61:4b:f2:06:0e: cd:54:cb:26:cd:58:4c:dc:d4:fd:8f:e5:fa:91:31:d9:6c:01: d2:17:85:5a:2e:06:e1:4e:44:86:39:eb:a7:ae:cb:e8:a2:90: ee:b8:fc:9c:ae:13:cb:03:3a:7d:ca:89:54:13:97:1f:40:66: 51:ee:98:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZSpAT/rp+Qb5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MzRlODA2YmQtN2E5Yy00ZGYzLTg1MWMtMTdjNjM5YWU3MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGtGU/rIoLgmm73+BpE/MAcmHvfU9gthxin+ WPUtgq5kReSTf6c1TMFY7jVusTaXgNAy+FxAtKx1nbxYbSJAmM/8p0cXK8Z7HsM1 c9KSK/pJOivMa0hY0HHZnpGqg+Bq8B2kaDWT3bq+bSDZU+rLTMRBcTVs18xHg9DG 9BJ9jVcxqmRKqlWU0O2edHoayX13UiEtrkIBrGtL9zRHL81VoxNnxl6VhNJFBW8W 7MvKn/BiKue8aiGDG9t6J2fFaQjMw/h4+JlURydf0fzk3ppapg4WhBlsk7rwCNf/ pGiXt0TwaSOJjBC+hq7aExLK/TwqUHgRvGBnZrNdJ1WFJ7L3qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlDVuEBg+g5rUOMd1lKsEKJcAFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZjc3YTUxYTEtZWMwMy0z ZTgyLWIzYmItYzk1ZTI2NWIzNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl8/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJg8sGm3NGUQAvBbnbRoTPx8X/CJ+CYcYapgx4qnrZ1kiyP4UZlTUoI Qtm7wDwlsvV7YFecv9bNWr3nu4+Hbx+rrmmeUSYuBuInHWkLNEIsG5L1R6ZKXQfV HkJBSd3HJbyy3z5hIfx7GsNExupcY9J0EQj65jVPGlQV6W23/Vvtgyba201ItBNE /+VfOJoBEziDJ1D8wIHg67QBKnudyfmjO/+rbqfRL5M+Q1s0pfBSz/PDaMZ5kdfp +fGatGemOKxhS/IGDs1UyybNWEzc1P2P5fqRMdlsAdIXhVouBuFORIY566euy+ii kO64/JyuE8sDOn3KiVQTlx9AZlHumOs= -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:35 2025 by rpki-client