$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/de982f9d-03a8-3f8d-8b80-2feb652c9c9e.roa File: de982f9d-03a8-3f8d-8b80-2feb652c9c9e.roa (raw, json) Hash identifier: 95W5MsGrbbzlZYZMqrQznvgTLRxHtFKOG5KmbNerN/w= Subject key identifier: EF:E3:01:BD:6C:5F:9D:35:72:F0:B4:C3:65:6E:05:FC:75:1F:4C:F9 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6F55AB1DCE085C8C78108 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/de982f9d-03a8-3f8d-8b80-2feb652c9c9e.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 151.101.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:f5:5a:b1:dc:e0:85:c8:c7:81:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=5bc5df2f-b55f-4bf4-a385-bda1f7b7876e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:14:91:1e:fa:14:7d:4f:b7:47:a8:6f:d8:24: d0:42:41:85:c1:2d:cb:7b:72:56:50:2d:4a:1f:88: 32:7c:6a:fa:44:38:de:ec:2d:da:7f:9f:08:9d:01: d3:09:70:7f:fb:13:60:75:f5:b9:94:5b:fa:ba:69: e8:00:22:48:fd:35:52:d0:fe:6b:1f:6c:c5:49:aa: e4:83:1d:69:7f:83:bd:34:05:97:eb:36:f8:98:13: fa:d2:43:8c:4e:62:94:34:8e:fb:41:3a:d0:0f:c8: dd:1a:3f:bb:96:6d:0f:7b:ae:0d:9f:18:65:f9:bd: d1:66:81:3b:e9:f4:8a:a8:5b:6c:3c:eb:a3:ef:6f: 53:95:bf:9f:ad:62:68:35:0d:03:38:2a:e0:75:76: c0:de:33:2d:08:a2:59:ce:0a:f1:44:76:2a:09:40: 0c:d9:b1:96:0a:89:a0:e2:24:32:fa:79:c9:be:0d: da:3d:b3:fd:d4:2b:50:b5:b4:97:a0:0d:50:46:5e: 2b:2e:2e:fc:44:07:57:84:a0:c8:b0:57:35:a4:90: be:5e:21:fa:1b:16:0f:97:1e:aa:46:42:c5:11:32: f7:0a:c6:32:5f:d2:3f:43:b9:eb:53:e7:35:25:4b: 03:e7:b5:77:5d:a1:77:dd:b1:b8:73:41:b8:f6:eb: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E3:01:BD:6C:5F:9D:35:72:F0:B4:C3:65:6E:05:FC:75:1F:4C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/de982f9d-03a8-3f8d-8b80-2feb652c9c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 151.101.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:17:e1:4e:f3:7c:22:89:96:31:ff:3b:c4:de:af:87:7d:52: ee:43:da:f1:ce:9d:4a:7f:e3:56:98:28:08:c0:58:f7:6c:9f: 2d:92:73:ea:cc:86:c3:55:b9:7b:88:57:b9:22:e4:bc:cf:1a: d6:94:81:9b:76:ca:d9:41:32:a0:3a:49:1c:aa:5d:dc:54:11: 32:2e:fc:74:55:71:aa:b4:ff:b5:57:16:32:d1:95:e5:3b:89: 6d:0a:ef:5c:d3:3f:0d:f7:2f:bd:b7:4b:7d:55:29:f0:68:cd: e5:06:42:26:b1:26:ab:e1:57:d9:12:0c:76:d2:f6:07:d0:0d: c7:fe:57:9e:86:9d:52:da:91:7d:cd:ff:f9:42:cc:94:db:a6: 58:39:23:41:d3:8c:f3:a8:0c:35:48:3a:f9:41:81:db:7f:f3: 3a:df:fb:92:b1:ab:b7:49:4a:37:9b:93:84:60:31:ad:d6:34: 74:19:7c:52:a0:75:57:9c:c7:0c:47:6f:57:0e:19:ed:74:0a: dc:31:cf:1c:42:07:90:58:bc:12:cd:d2:6d:2a:db:49:d0:e3: 41:1f:ee:e6:34:cc:88:e3:68:53:16:f6:7e:4d:2b:6a:9e:be: 42:47:51:77:be:e0:dd:f6:6b:b1:4e:57:38:7f:3e:9e:8d:99: be:a4:79:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vVasdzghcjHgQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NWJjNWRmMmYtYjU1Zi00YmY0LWEzODUtYmRhMWY3Yjc4NzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohSRHvoUfU+3R6hv2CTQQkGFwS3Le3JWUC1K H4gyfGr6RDje7C3af58InQHTCXB/+xNgdfW5lFv6umnoACJI/TVS0P5rH2zFSark gx1pf4O9NAWX6zb4mBP60kOMTmKUNI77QTrQD8jdGj+7lm0Pe64Nnxhl+b3RZoE7 6fSKqFtsPOuj729Tlb+frWJoNQ0DOCrgdXbA3jMtCKJZzgrxRHYqCUAM2bGWComg 4iQy+nnJvg3aPbP91CtQtbSXoA1QRl4rLi78RAdXhKDIsFc1pJC+XiH6GxYPlx6q RkLFETL3CsYyX9I/Q7nrU+c1JUsD57V3XaF33bG4c0G49uthcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/jAb1sX501cvC0w2VuBfx1H0z5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZGU5ODJmOWQtMDNhOC0z ZjhkLThiODAtMmZlYjY1MmM5YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYX4U7zfCKJljH/O8Ter4d9Uu5D2vHOnUp/41aYKAjAWPdsny2Sc+rM hsNVuXuIV7ki5LzPGtaUgZt2ytlBMqA6SRyqXdxUETIu/HRVcaq0/7VXFjLRleU7 iW0K71zTPw33L723S31VKfBozeUGQiaxJqvhV9kSDHbS9gfQDcf+V56GnVLakX3N //lCzJTbplg5I0HTjPOoDDVIOvlBgdt/8zrf+5Kxq7dJSjebk4RgMa3WNHQZfFKg dVecxwxHb1cOGe10CtwxzxxCB5BYvBLN0m0q20nQ40Ef7uY0zIjjaFMW9n5NK2qe vkJHUXe+4N32a7FOVzh/Pp6Nmb6kefo= -----END CERTIFICATE-----Generated at Thu Oct 9 05:43:21 2025 by rpki-client