$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa File: bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa (raw, json) Hash identifier: Q65o60YKuZjIkmkQHZjYYgx5Ohoi0m65lyCXxklWQ5Q= Subject key identifier: 4F:98:C1:3D:F1:74:0E:7C:82:4D:A4:41:74:E0:AC:8C:DD:31:66:7E Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Certificate serial: 010D0C9F4328584EB57C5DFD5168ADF2321FBCC0 Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 398446 IP address blocks: 143.246.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:5d:fd:51:68:ad:f2:32:1f:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=7a4a53d9-80a4-4e84-ad99-33b21e78ada4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:9f:80:5c:a3:78:75:1e:0c:50:5f:23:57: 50:7a:0a:b2:89:de:0d:04:68:0b:c4:06:bd:bd:24: 08:63:14:dd:fc:bd:a5:c3:c2:e4:dc:bf:41:e7:51: 2d:44:50:d3:14:bf:17:01:af:b5:3c:86:ff:3a:fe: 4c:65:6c:60:af:0b:b8:13:b4:7d:2a:58:b3:45:ac: 43:e4:41:da:47:24:ab:f7:54:10:3f:6b:dd:58:dd: da:ec:15:10:3f:a0:eb:fb:20:35:58:2d:cf:19:19: af:4b:68:eb:a1:89:f0:9f:31:86:ed:a4:07:0d:41: 45:85:c0:19:9f:a2:31:db:6e:14:70:2b:e4:87:e1: 61:6d:72:99:ea:7d:6b:96:c0:ce:bc:aa:70:e2:2a: dc:45:48:86:f3:07:db:9d:ee:01:cc:bc:96:41:70: ab:75:e5:35:0f:fa:eb:4a:f0:16:64:62:36:18:7f: e5:49:bc:a9:36:59:0e:de:3b:6b:ab:ed:57:c8:0a: 3e:49:36:c6:58:2a:b4:8b:0d:96:a3:9c:07:17:80: c4:36:bb:e0:e2:27:d9:46:0e:ec:63:cf:10:37:5a: a0:f6:34:23:83:0a:ef:56:d3:a5:80:b6:33:97:7c: 1e:37:45:42:b1:97:3c:6d:49:6a:1c:81:91:aa:54: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:98:C1:3D:F1:74:0E:7C:82:4D:A4:41:74:E0:AC:8C:DD:31:66:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/bdd1dee6-a748-3bcd-a817-1b617e2cb37b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl X509v3 Authority Key Identifier: keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer sbgp-ipAddrBlock: critical IPv4: 143.246.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e9:29:59:92:87:d4:08:a8:9e:90:a8:62:41:4c:d7:b8:36: ca:2e:73:c4:7b:05:6a:ba:41:a5:92:88:40:99:d7:77:ae:86: 87:e4:4e:6a:06:37:fd:51:c3:e7:54:5c:a7:b2:3d:b7:ce:d7: e7:f9:e3:4f:b1:80:ee:9a:43:ac:da:6b:1d:fc:79:bc:4b:e3: 9f:7f:2d:ab:34:7d:19:d2:59:21:9b:e5:fe:df:d4:8d:59:9f: f1:3a:e7:b6:f6:18:d6:ad:c9:60:5e:7e:6b:f1:56:d9:de:bf: 1d:6f:70:6b:23:ce:fb:b7:7d:eb:81:fe:dd:a1:26:2d:12:83: e5:4d:bf:2d:4a:1a:f3:6f:11:c1:99:9d:53:f1:66:26:bb:b5: 9f:80:48:c4:27:ca:b1:43:69:2f:4f:16:1f:0b:d6:af:24:8f: 33:07:c2:d8:e0:07:f9:ea:48:61:05:f7:52:be:ff:4a:67:87: 59:fb:a3:b5:d4:8e:44:a8:a9:a0:ab:19:8c:e5:76:70:19:40: 02:84:eb:d6:fe:ac:01:19:1d:a2:1c:0e:37:86:5d:14:a7:c1: 17:00:e3:1a:2e:a5:5f:d8:96:cc:a5:b7:0b:c2:3a:13:1e:ab: 28:85:e9:c3:49:54:8d:a3:07:43:61:49:d7:31:58:c5:4a:54: d2:62:a8:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fF39UWit8jIfvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx MjlhMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk N2E0YTUzZDktODBhNC00ZTg0LWFkOTktMzNiMjFlNzhhZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0efgFyjeHUeDFBfI1dQegqyid4NBGgLxAa9 vSQIYxTd/L2lw8Lk3L9B51EtRFDTFL8XAa+1PIb/Ov5MZWxgrwu4E7R9KlizRaxD 5EHaRySr91QQP2vdWN3a7BUQP6Dr+yA1WC3PGRmvS2jroYnwnzGG7aQHDUFFhcAZ n6Ix224UcCvkh+FhbXKZ6n1rlsDOvKpw4ircRUiG8wfbne4BzLyWQXCrdeU1D/rr SvAWZGI2GH/lSbypNlkO3jtrq+1XyAo+STbGWCq0iw2Wo5wHF4DENrvg4ifZRg7s Y88QN1qg9jQjgwrvVtOlgLYzl3weN0VCsZc8bUlqHIGRqlQsswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+YwT3xdA58gk2kQXTgrIzdMWZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvYmRkMWRlZTYtYTc0OC0z YmNkLWE4MTctMWI2MTdlMmNiMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3 MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4 MmU5MTEyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDj/aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATpKVmSh9QIqJ6QqGJBTNe4Nsouc8R7BWq6QaWSiECZ13euhofkTmoG N/1Rw+dUXKeyPbfO1+f540+xgO6aQ6zaax38ebxL459/Las0fRnSWSGb5f7f1I1Z n/E657b2GNatyWBefmvxVtnevx1vcGsjzvu3feuB/t2hJi0Sg+VNvy1KGvNvEcGZ nVPxZia7tZ+ASMQnyrFDaS9PFh8L1q8kjzMHwtjgB/nqSGEF91K+/0pnh1n7o7XU jkSoqaCrGYzldnAZQAKE69b+rAEZHaIcDjeGXRSnwRcA4xoupV/YlsyltwvCOhMe qyiF6cNJVI2jB0NhSdcxWMVKVNJiqIM= -----END CERTIFICATE-----Generated at Sat Sep 5 04:58:21 2026 by rpki-client