$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/dd173839-e1a9-3143-96ac-bff23a79fd3d.roa File: dd173839-e1a9-3143-96ac-bff23a79fd3d.roa (raw, json) Hash identifier: 3rJDSp4DqNUgYgnn0/63fm4JxxcxlCb839g2I5vVCFg= Subject key identifier: F2:EF:D1:1E:20:A3:71:F2:0C:80:72:98:0D:D0:3A:E5:88:DA:39:80 Certificate issuer: /CN=a2159823-806a-4879-9de9-7be634e8cd31 Certificate serial: 010D0C9F4328584AFC1C0572E5CFFF44C9C082C0 Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/dd173839-e1a9-3143-96ac-bff23a79fd3d.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 396982 IP address blocks: 151.193.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:05:72:e5:cf:ff:44:c9:c0:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=c8eac55b-1e0d-4f82-abf1-6f85bf841e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:b3:dc:ed:62:0f:c1:bc:21:3e:c8:5a:6c: 32:ac:46:2f:c1:0a:e7:72:61:e2:89:1e:73:b3:b0: ca:57:07:77:ac:d6:36:6c:42:3b:60:bb:78:c7:7e: 92:9a:4a:41:86:2a:36:4b:5e:11:b8:d1:c3:51:11: 2b:7b:74:9c:8b:5c:37:96:0e:a6:1b:a2:3e:11:b4: c7:1a:95:70:96:33:61:76:dd:12:be:8f:b9:b1:42: 7c:e3:28:4a:3c:e4:14:3b:2c:3b:a2:99:14:be:1a: 9f:44:9e:5b:38:20:e8:17:e7:b1:3c:68:a7:fe:82: 56:40:2c:2c:43:f4:cd:e8:b9:a1:88:ff:e9:5a:ed: a3:28:2f:01:66:71:07:2f:f1:85:8c:93:2a:4a:e9: 39:45:bc:12:b3:7f:cb:73:8c:fc:3d:59:73:4e:d9: 74:01:ab:86:a9:7d:9c:0f:66:e8:21:b2:77:fb:16: cc:65:57:5f:1c:7a:a3:83:c7:bb:1c:b8:de:f3:17: eb:e7:60:72:a8:e9:36:6b:d1:1d:f7:f7:16:8f:56: ba:94:3d:d1:24:78:75:22:ac:08:cd:9c:2c:3f:b2: 20:68:fa:c5:f5:14:22:96:a4:16:f0:50:de:45:2b: 74:01:52:55:d1:b6:2b:26:43:dc:e0:2b:76:82:13: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EF:D1:1E:20:A3:71:F2:0C:80:72:98:0D:D0:3A:E5:88:DA:39:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/dd173839-e1a9-3143-96ac-bff23a79fd3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl X509v3 Authority Key Identifier: keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer sbgp-ipAddrBlock: critical IPv4: 151.193.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e2:7c:36:60:46:01:0b:f9:79:e4:95:43:5d:96:11:e4:24: 51:5f:a3:dd:d5:e7:5b:c3:7c:a0:06:1d:8f:9d:7b:b4:35:0c: f2:4f:ec:6b:6f:39:d6:b8:97:c6:75:5d:2c:bf:7d:4f:9e:3b: 29:f9:a2:41:b8:c2:cb:de:46:0f:a3:88:3f:c9:41:be:6b:9f: 9f:e8:c6:09:d8:cf:62:96:a7:9a:7e:6b:74:c8:fa:c4:7e:3a: 51:0a:ea:e3:7c:3f:87:c6:37:b3:78:ae:f4:bd:9e:62:b7:1e: dd:73:f9:f8:4a:63:ce:4e:ba:0f:63:55:4b:83:e5:2f:95:11: 3f:10:c1:63:70:ab:0e:c6:6c:50:05:84:d3:5e:7b:b3:b0:97: ef:80:d5:b7:4f:33:c7:84:4a:be:75:37:77:9e:e8:6a:0d:5b: 00:94:12:42:81:da:b4:c4:9f:69:85:98:93:88:d6:59:6d:0c: b6:21:3f:48:6b:cd:97:62:eb:e1:62:3c:db:db:17:85:3c:a5: ab:65:d7:86:2f:d1:dc:58:7b:c3:c2:fb:7f:70:1a:da:06:01: 5a:66:ac:7f:72:da:4f:a0:4d:24:cc:17:5b:d0:cd:64:53:43: db:91:bc:36:71:be:25:e2:ab:ee:a1:0b:39:46:c0:51:10:47: 75:ab:91:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAVy5c//RMnAgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIxNTk4MjMtODA2YS00ODc5LTlkZTktN2JlNjM0ZThj ZDMxMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzhlYWM1NWItMWUwZC00ZjgyLWFiZjEtNmY4NWJmODQxZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpGz3O1iD8G8IT7IWmwyrEYvwQrncmHiiR5z s7DKVwd3rNY2bEI7YLt4x36SmkpBhio2S14RuNHDUREre3Sci1w3lg6mG6I+EbTH GpVwljNhdt0Svo+5sUJ84yhKPOQUOyw7opkUvhqfRJ5bOCDoF+exPGin/oJWQCws Q/TN6LmhiP/pWu2jKC8BZnEHL/GFjJMqSuk5RbwSs3/Lc4z8PVlzTtl0AauGqX2c D2boIbJ3+xbMZVdfHHqjg8e7HLje8xfr52ByqOk2a9Ed9/cWj1a6lD3RJHh1IqwI zZwsP7IgaPrF9RQilqQW8FDeRSt0AVJV0bYrJkPc4Ct2ghPNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLv0R4go3HyDIBymA3QOuWI2jmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjE1 OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2MzRlOGNkMzEvZGQxNzM4MzktZTFhOS0z MTQzLTk2YWMtYmZmMjNhNzlmZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTIxNTk4MjMtODA2YS00ODc5LTlk ZTktN2JlNjM0ZThjZDMxL2EyMTU5ODIzLTgwNmEtNDg3OS05ZGU5LTdiZTYzNGU4 Y2QzMS5jcmwwHwYDVR0jBBgwFoAUpZGQmoiGHwLfK88I1KSUYP2ExWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMjE1OTgyMy04MDZhLTQ4NzktOWRlOS03YmU2 MzRlOGNkMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8FtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvifDZgRgEL+XnklUNdlhHkJFFfo93V51vDfKAGHY+de7Q1DPJP7Gtv Oda4l8Z1XSy/fU+eOyn5okG4wsveRg+jiD/JQb5rn5/oxgnYz2KWp5p+a3TI+sR+ OlEK6uN8P4fGN7N4rvS9nmK3Ht1z+fhKY85Oug9jVUuD5S+VET8QwWNwqw7GbFAF hNNee7Owl++A1bdPM8eESr51N3ee6GoNWwCUEkKB2rTEn2mFmJOI1lltDLYhP0hr zZdi6+FiPNvbF4U8patl14Yv0dxYe8PC+39wGtoGAVpmrH9y2k+gTSTMF1vQzWRT Q9uRvDZxviXiq+6hCzlGwFEQR3WrkYo= -----END CERTIFICATE-----Generated at Fri Oct 10 21:09:10 2025 by rpki-client