$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d27f7e4e-8dd2-3319-8c51-8e4a36d4a01b.roa File: d27f7e4e-8dd2-3319-8c51-8e4a36d4a01b.roa (raw, json) Hash identifier: yxnPPQPl/T/Bi2f5mDDh9lN+Kfa+xCXzIKelVi9eXbM= Subject key identifier: AB:39:D1:51:7E:E1:DA:F3:3F:F3:F1:58:04:8A:54:D0:C0:4E:D9:65 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6F5129B5BE26E246D1B80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d27f7e4e-8dd2-3319-8c51-8e4a36d4a01b.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 151.101.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:f5:12:9b:5b:e2:6e:24:6d:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=c12ba82f-17c0-4161-a929-6c3bd56082fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:67:7a:2e:7d:98:c8:aa:47:c5:21:1d:f1: 1a:16:5f:1a:29:51:93:f4:7e:f2:9d:5b:2f:00:09: e9:28:81:9e:21:d5:67:82:80:1b:9a:51:d1:d9:b2: 3e:89:40:dd:32:f8:23:3b:2b:82:93:f0:3e:ca:17: 56:8f:6b:69:e0:93:be:57:da:67:74:99:09:1d:f0: 46:d4:21:7e:e0:fe:f0:bf:15:68:4c:88:4c:ce:bc: 57:86:7d:3a:ae:f9:de:5c:ec:67:86:ee:bb:5f:ad: 96:59:fe:30:46:9d:23:fe:c5:63:db:92:28:da:79: 7d:d4:ae:50:67:de:51:0b:a2:2f:48:41:de:52:ac: 61:c8:90:c0:f8:68:7a:19:66:ef:ff:47:2c:fd:1c: 21:45:f6:3e:86:83:3f:4e:71:ff:00:fa:84:ef:e2: cf:4a:58:cb:2c:7e:c7:2f:30:bb:77:b8:63:88:35: 01:d7:2f:0e:77:e4:ce:0d:0c:ff:e2:6b:83:89:7d: 36:2c:9b:96:42:d0:28:c8:fa:07:c4:d7:9a:c7:c5: ac:b6:ec:69:95:cd:e5:e2:91:fe:1b:c0:a2:21:95: 35:43:e9:f2:3e:19:20:bd:d6:d6:6b:04:db:0f:cf: d9:d5:dd:18:6a:6f:4c:7c:cc:cf:a5:66:64:bc:6f: ae:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:39:D1:51:7E:E1:DA:F3:3F:F3:F1:58:04:8A:54:D0:C0:4E:D9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d27f7e4e-8dd2-3319-8c51-8e4a36d4a01b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 151.101.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:95:1d:31:37:04:53:2c:e6:ba:14:3d:1c:1b:73:22:f4:64: f5:88:cd:66:dc:6d:1a:2e:77:e2:bd:fe:6a:71:db:e1:cd:89: 59:e6:aa:96:64:d2:5e:e2:bd:61:c8:2a:92:0f:38:c8:25:7d: ec:8b:e4:99:f0:f1:5a:9d:57:85:4e:ef:f8:15:1f:2b:90:a5: ab:8d:7b:d8:72:c2:8b:90:42:20:9b:fe:b7:11:7d:40:2c:b3: 34:b8:b5:c7:b1:7d:62:2d:d2:32:71:28:bb:54:a7:54:4b:f4: 81:cf:44:54:79:51:ed:f2:80:3e:92:7b:43:08:7a:45:03:f5: bd:1c:af:9f:9f:b1:b0:be:ae:7b:54:49:a0:3b:3b:38:51:e3: 81:33:95:49:1e:85:e8:05:de:4c:8a:c4:45:74:fb:b8:1b:c9: 0f:e5:fa:a1:27:d4:4b:5e:2d:40:2c:30:88:d2:98:3f:fc:68: 2a:0a:e4:2f:7e:3c:04:38:9d:15:32:c6:38:ba:58:cb:eb:e6: 72:f5:49:8c:4b:40:b4:f9:42:f3:7d:7a:e8:63:43:ec:5b:3f: b2:43:f5:96:4c:87:5f:c8:e9:ea:37:2f:b8:0b:07:e8:ce:44: ca:92:01:20:9a:f2:6e:06:fe:ec:57:3f:df:10:66:b7:d4:61: d0:0b:bf:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vUSm1vibiRtG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YzEyYmE4MmYtMTdjMC00MTYxLWE5MjktNmMzYmQ1NjA4MmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XJnei59mMiqR8UhHfEaFl8aKVGT9H7ynVsv AAnpKIGeIdVngoAbmlHR2bI+iUDdMvgjOyuCk/A+yhdWj2tp4JO+V9pndJkJHfBG 1CF+4P7wvxVoTIhMzrxXhn06rvneXOxnhu67X62WWf4wRp0j/sVj25Io2nl91K5Q Z95RC6IvSEHeUqxhyJDA+Gh6GWbv/0cs/RwhRfY+hoM/TnH/APqE7+LPSljLLH7H LzC7d7hjiDUB1y8Od+TODQz/4muDiX02LJuWQtAoyPoHxNeax8Wstuxplc3l4pH+ G8CiIZU1Q+nyPhkgvdbWawTbD8/Z1d0Yam9MfMzPpWZkvG+udQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs50VF+4drzP/PxWASKVNDATtllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDI3ZjdlNGUtOGRkMi0z MzE5LThjNTEtOGU0YTM2ZDRhMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2WMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6VHTE3BFMs5roUPRwbcyL0ZPWIzWbcbRoud+K9/mpx2+HNiVnmqpZk 0l7ivWHIKpIPOMglfeyL5Jnw8VqdV4VO7/gVHyuQpauNe9hywouQQiCb/rcRfUAs szS4tcexfWIt0jJxKLtUp1RL9IHPRFR5Ue3ygD6Se0MIekUD9b0cr5+fsbC+rntU SaA7OzhR44EzlUkehegF3kyKxEV0+7gbyQ/l+qEn1EteLUAsMIjSmD/8aCoK5C9+ PAQ4nRUyxji6WMvr5nL1SYxLQLT5QvN9euhjQ+xbP7JD9ZZMh1/I6eo3L7gLB+jO RMqSASCa8m4G/uxXP98QZrfUYdALvwg= -----END CERTIFICATE-----Generated at Thu Oct 9 05:43:20 2025 by rpki-client