$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3968a775-78b5-32df-a97b-34089e5fd0f8.roa File: 3968a775-78b5-32df-a97b-34089e5fd0f8.roa (raw, json) Hash identifier: avOmdxoj/x/B+vKHyNDfbWPc266nccNkxhyCWBzC1Ac= Subject key identifier: 47:BA:8B:0F:25:71:D2:3B:F0:AA:FA:8E:A1:0E:8D:00:3C:72:AE:C0 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6F363A5D539A7E85D6840 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3968a775-78b5-32df-a97b-34089e5fd0f8.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 151.101.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:f3:63:a5:d5:39:a7:e8:5d:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=ab6c3403-c240-4353-89d1-1e8035994634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:a2:c9:11:d8:ef:88:42:81:87:45:a4:de: 5b:27:46:1b:d7:33:23:48:2a:6c:8e:a4:4d:26:ad: 3f:cf:56:98:49:fe:b7:da:82:c7:67:bb:3d:0c:51: dd:e6:93:90:66:d3:72:b4:bf:6e:bd:c9:32:97:45: 87:11:47:e4:f0:a5:4f:22:7d:02:ca:00:cf:05:8a: 39:60:b6:4e:18:ed:c6:b6:ed:03:e9:88:e8:ae:a0: f6:3d:99:d0:aa:63:2c:5e:d8:7b:98:6d:c2:2e:3c: b3:2e:47:06:51:81:f6:93:16:e4:07:4c:55:cd:83: f6:f0:58:da:fb:cd:25:84:ea:99:aa:29:dc:37:4c: 13:59:e6:23:a1:45:15:00:1c:a5:76:dc:79:96:b4: 5f:b3:a0:4a:de:db:0a:5a:6a:40:63:9c:a9:44:7c: e5:87:c4:3a:b8:4b:24:71:0d:1d:19:fd:d9:04:f6: 72:79:35:d4:2a:f1:f2:c9:d9:12:3f:a2:2e:02:c0: 0b:75:b8:12:63:cb:61:ba:35:3b:ac:ae:ca:9c:b3: df:47:a3:71:c4:10:6f:8a:52:19:83:a8:89:fd:63: f9:59:20:d4:9b:93:0c:d8:00:49:fe:71:c9:54:d7: 4a:6d:15:d8:2d:59:b9:31:cb:54:6a:e2:15:4a:69: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BA:8B:0F:25:71:D2:3B:F0:AA:FA:8E:A1:0E:8D:00:3C:72:AE:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3968a775-78b5-32df-a97b-34089e5fd0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 151.101.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a9:4a:7f:bb:c5:8c:37:c9:27:e2:aa:7b:79:2f:f9:99:ac: 81:51:09:c4:e5:1e:3e:e0:07:68:72:82:5b:83:ff:8e:c4:86: a4:9b:b6:97:f2:1f:73:41:a6:d5:89:36:03:66:04:67:43:1c: 72:72:da:b6:b5:ac:ca:53:7a:2e:93:3e:7c:d3:15:f7:6a:56: 04:50:2d:ec:8f:0c:fe:ee:26:ac:d5:a2:e4:bc:00:76:bb:28: 30:1c:02:23:a3:e1:49:8b:25:ba:e2:40:bb:cd:65:21:ad:2b: 1a:30:ce:7f:9a:ee:22:68:91:18:49:9c:b7:05:fc:14:52:fa: b9:00:ec:45:9c:9c:8e:a0:e7:c9:18:5c:d1:c6:2c:83:4b:e1: 6f:5d:d0:59:c8:b5:41:cf:04:2b:6a:43:de:18:b8:e2:89:3a: b7:8f:8d:10:9c:ea:12:0b:23:9e:95:23:c6:3e:bb:f4:a3:9a: a3:b2:66:bc:00:e5:13:71:75:49:ec:91:4f:c5:ee:f8:6e:46: 8d:8f:ad:f9:c1:2e:f6:60:0f:bb:90:cc:bf:49:ee:0a:63:66: 3f:05:17:b5:6c:67:10:3e:23:24:8d:98:62:4f:5f:d3:46:88: e7:0f:16:65:87:08:e8:89:2a:aa:9d:68:c8:9a:0f:64:7d:56: 9d:f1:f7:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vNjpdU5p+hdaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YWI2YzM0MDMtYzI0MC00MzUzLTg5ZDEtMWU4MDM1OTk0NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYiiyRHY74hCgYdFpN5bJ0Yb1zMjSCpsjqRN Jq0/z1aYSf632oLHZ7s9DFHd5pOQZtNytL9uvckyl0WHEUfk8KVPIn0CygDPBYo5 YLZOGO3Gtu0D6YjorqD2PZnQqmMsXth7mG3CLjyzLkcGUYH2kxbkB0xVzYP28Fja +80lhOqZqincN0wTWeYjoUUVAByldtx5lrRfs6BK3tsKWmpAY5ypRHzlh8Q6uEsk cQ0dGf3ZBPZyeTXUKvHyydkSP6IuAsALdbgSY8thujU7rK7KnLPfR6NxxBBvilIZ g6iJ/WP5WSDUm5MM2ABJ/nHJVNdKbRXYLVm5MctUauIVSml4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe6iw8lcdI78Kr6jqEOjQA8cq7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMzk2OGE3NzUtNzhiNS0z MmRmLWE5N2ItMzQwODllNWZkMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2UkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+pSn+7xYw3ySfiqnt5L/mZrIFRCcTlHj7gB2hygluD/47EhqSbtpfy H3NBptWJNgNmBGdDHHJy2ra1rMpTei6TPnzTFfdqVgRQLeyPDP7uJqzVouS8AHa7 KDAcAiOj4UmLJbriQLvNZSGtKxowzn+a7iJokRhJnLcF/BRS+rkA7EWcnI6g58kY XNHGLINL4W9d0FnItUHPBCtqQ94YuOKJOrePjRCc6hILI56VI8Y+u/SjmqOyZrwA 5RNxdUnskU/F7vhuRo2PrfnBLvZgD7uQzL9J7gpjZj8FF7VsZxA+IySNmGJPX9NG iOcPFmWHCOiJKqqdaMiaD2R9Vp3x93M= -----END CERTIFICATE-----Generated at Thu Oct 9 05:49:24 2025 by rpki-client