$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa File: 2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa (raw, json) Hash identifier: yXgz59Eqb29wDo1fU8Yz2aJytzkTZXVYUMTWY6vwd34= Subject key identifier: EF:F3:E2:B9:47:AD:A1:64:53:84:96:0D:38:D8:4C:CA:42:58:80:5D Certificate issuer: /CN=d426c818-fe62-465f-8184-d4f8176e2692 Certificate serial: 010D0C9F4328584BA0D244C55E1D0A4E5339A800 Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 6507 IP address blocks: 151.106.248.0/24 maxlen: 24 151.106.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:44:c5:5e:1d:0a:4e:53:39:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=e49b7fb5-bfa2-489c-8cfe-baeff906f962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:8b:7b:17:78:d4:ec:c4:f6:d1:2c:82:2e: 0d:90:e4:3f:9e:50:62:50:5a:1c:10:41:50:9a:07: 80:72:b7:51:60:e3:a5:a4:8b:09:c0:cc:91:21:00: f8:df:19:b8:30:15:aa:66:5f:a8:1a:96:e1:4f:49: 6a:3a:60:3f:3e:cf:02:3d:6b:81:d2:f7:9e:1b:bd: c3:bb:4f:19:3a:c4:66:da:67:bd:9a:d8:e7:78:b4: 15:c0:c8:a4:8d:4f:2e:26:95:99:3e:9d:30:63:10: bf:2d:8b:59:26:75:dd:90:16:e2:34:3d:bb:c7:9b: ed:69:d3:89:7e:50:b6:07:8a:d0:20:61:72:4d:c3: cb:95:6a:59:a4:a6:84:8e:76:2d:c1:17:cf:f8:6d: 65:78:71:22:39:7d:0b:ef:fb:5c:5c:8c:07:bc:5c: 92:2e:34:26:63:14:a6:2c:c6:a0:b7:cd:3b:2d:d4: f8:95:49:42:7f:57:b3:55:be:fc:69:7b:c7:10:e1: 74:17:2d:a5:42:22:d3:ad:29:43:a3:df:e3:7b:27: a9:a0:03:f1:fb:94:44:f9:2f:1b:69:04:32:80:e1: a1:f1:2b:f6:bf:86:58:9a:92:b9:8d:7a:28:4f:3f: 60:4e:9e:f9:5d:73:46:7e:90:93:2f:f8:68:7b:c7: c1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F3:E2:B9:47:AD:A1:64:53:84:96:0D:38:D8:4C:CA:42:58:80:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl X509v3 Authority Key Identifier: keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer sbgp-ipAddrBlock: critical IPv4: 151.106.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a4:ce:7a:8b:1c:7c:5f:34:c4:e4:ea:d5:4c:89:78:8a:34: 46:ba:d5:9d:24:3d:fb:77:7d:e2:a6:d2:03:15:5d:04:38:98: fe:a7:04:87:c5:2b:33:26:41:15:9c:ed:13:3d:a8:8a:b0:2c: f3:1a:82:c3:6c:38:2e:b9:28:91:5a:e8:f7:22:2d:0e:4b:0a: 05:40:45:bb:f9:da:91:4f:b6:7e:f6:3b:72:80:1c:e3:40:19: 98:4b:82:a8:d4:12:43:40:e5:57:58:8d:17:51:bc:d2:98:f0: 66:4c:78:0e:b5:45:31:7d:e0:a2:94:6e:a3:3f:ed:b3:51:cd: 9d:05:0c:65:db:e9:28:bd:97:2f:16:8b:a9:6e:43:50:c3:1f: 89:7e:d6:17:65:cb:43:ed:85:7d:2f:84:3d:6d:de:8b:4a:d7: 2c:19:f8:48:6b:38:06:0d:ca:48:40:da:8b:cc:3b:df:f6:fa: fc:3e:3c:b8:e3:ea:c2:b6:61:a5:08:13:25:12:a9:6d:88:2f: f9:52:49:98:3b:de:29:a6:09:c3:32:0b:80:09:92:87:d5:57: e4:55:09:31:0f:88:a4:93:c5:d8:a2:ea:f7:a2:e3:46:c6:41: 6e:e5:92:c3:0b:49:0b:70:a4:f7:66:1b:fe:98:d7:5a:d4:33: 0a:e4:06:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kTFXh0KTlM5qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy NjkyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZTQ5YjdmYjUtYmZhMi00ODljLThjZmUtYmFlZmY5MDZmOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDuLexd41OzE9tEsgi4NkOQ/nlBiUFocEEFQ mgeAcrdRYOOlpIsJwMyRIQD43xm4MBWqZl+oGpbhT0lqOmA/Ps8CPWuB0veeG73D u08ZOsRm2me9mtjneLQVwMikjU8uJpWZPp0wYxC/LYtZJnXdkBbiND27x5vtadOJ flC2B4rQIGFyTcPLlWpZpKaEjnYtwRfP+G1leHEiOX0L7/tcXIwHvFySLjQmYxSm LMagt807LdT4lUlCf1ezVb78aXvHEOF0Fy2lQiLTrSlDo9/jeyepoAPx+5RE+S8b aQQygOGh8Sv2v4ZYmpK5jXooTz9gTp75XXNGfpCTL/hoe8fBRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/z4rlHraFkU4SWDTjYTMpCWIBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2 YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvMmJjMzA1YjYtODIyMC0z M2VmLTk2YjEtZWU1YTNlNjRiODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4 MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl2r4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKkznqLHHxfNMTk6tVMiXiKNEa61Z0kPft3feKm0gMVXQQ4mP6nBIfF KzMmQRWc7RM9qIqwLPMagsNsOC65KJFa6PciLQ5LCgVARbv52pFPtn72O3KAHONA GZhLgqjUEkNA5VdYjRdRvNKY8GZMeA61RTF94KKUbqM/7bNRzZ0FDGXb6Si9ly8W i6luQ1DDH4l+1hdly0PthX0vhD1t3otK1ywZ+EhrOAYNykhA2ovMO9/2+vw+PLjj 6sK2YaUIEyUSqW2IL/lSSZg73immCcMyC4AJkofVV+RVCTEPiKSTxdii6vei40bG QW7lksMLSQtwpPdmG/6Y11rUMwrkBu4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:31:33 2025 by rpki-client