$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/428b3030-37a9-3db2-8fa7-1fdc5ef30970.roa File: 428b3030-37a9-3db2-8fa7-1fdc5ef30970.roa (raw, json) Hash identifier: XqJzIcYXBwdX4BKT/WRyp+RPaBWQuOqYHIq0PvwQEKM= Subject key identifier: 8B:81:CA:C0:99:AA:A9:0C:D3:16:DE:B3:04:7D:66:19:31:83:BB:67 Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Certificate serial: 010D0C9F4328584B64CD5F21EC285D503411B700 Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/428b3030-37a9-3db2-8fa7-1fdc5ef30970.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 207.126.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:5f:21:ec:28:5d:50:34:11:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=23a1da18-cfaa-46c6-8a72-05d2194726a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:00:5f:01:b8:4d:d8:83:7f:4b:a8:48:51: 6a:fc:15:2f:e7:9d:82:42:1f:b2:7f:29:79:35:c6: 5f:e8:08:96:0c:f4:3f:6d:d8:ed:f1:56:b1:1e:34: 68:45:cf:67:72:7f:1c:69:d9:82:3e:9a:34:52:76: 82:c2:1a:1a:51:cb:a9:00:df:9f:29:87:91:b9:ae: 42:58:80:54:9d:57:82:01:be:ed:65:74:74:02:f5: 75:d9:d0:2f:77:7f:8d:bd:6a:a9:66:7d:a2:fd:23: a0:d5:28:dc:85:b2:2e:a5:30:66:73:d8:de:05:c3: 78:3e:79:61:33:8b:25:b5:c5:24:6b:31:5c:d5:a2: 6d:90:44:5d:06:cc:2e:3f:b7:6c:48:ec:b8:3a:a8: 48:31:9a:c3:0c:bf:b8:ec:57:6b:f5:59:b1:b3:0f: a8:e0:7b:4b:d4:13:a8:c0:29:7f:b3:3d:d8:c0:1f: fc:eb:fd:50:5e:25:35:96:5f:a6:82:c8:09:7a:95: fc:2b:fe:a8:a8:b1:92:e1:52:98:16:57:7c:3c:42: 98:50:f3:4e:5a:26:93:67:54:55:e1:c4:12:a5:04: 4e:cf:0e:42:7e:10:53:37:8e:2b:07:f9:d0:ba:92: eb:c9:4c:f6:89:0e:ab:f7:03:75:19:f7:43:32:cf: 34:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:81:CA:C0:99:AA:A9:0C:D3:16:DE:B3:04:7D:66:19:31:83:BB:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/428b3030-37a9-3db2-8fa7-1fdc5ef30970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl X509v3 Authority Key Identifier: keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer sbgp-ipAddrBlock: critical IPv4: 207.126.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e9:26:58:ea:40:37:e7:e4:5c:79:a2:21:25:75:12:e5:bf: 76:66:6a:24:c8:b7:ff:f1:3c:72:49:77:24:0d:9f:5e:c8:be: 56:03:2f:18:ac:c7:4b:25:9e:ac:45:1e:66:60:14:9c:33:03: 24:e3:ea:73:41:0d:f3:d9:d3:b8:ee:d3:ca:9e:4f:e9:a4:0c: 1b:30:d4:43:db:ad:3d:37:f6:a9:1e:63:8a:a0:ae:f0:15:24: 45:11:1f:be:e1:ab:73:13:73:ee:8c:e3:42:d7:e6:fd:e0:80: 94:6f:ba:29:9f:1c:be:74:e4:4e:24:f2:26:33:a0:49:c8:d9: f8:81:32:e9:cd:56:7d:03:86:a3:5e:63:34:f2:46:95:b8:a1: df:b2:6c:cb:6a:10:10:c7:0a:cf:99:e7:14:b0:e4:97:f0:bf: e9:be:b3:7a:1a:0b:0b:20:c3:f2:df:ec:ed:47:d9:83:83:a1: 21:c5:15:6a:a7:da:85:f1:53:50:75:c6:de:73:33:e5:8f:c7: 1d:a3:23:aa:93:b6:15:2b:1c:a2:9c:b7:fb:88:0a:17:41:0a: f2:8b:07:ac:64:50:62:72:49:9b:e5:d6:0f:db:45:c9:8a:e1: ca:c8:8b:8b:0d:6b:46:8d:04:e4:dd:78:67:ec:1d:f9:e5:62: ff:ef:d6:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzV8h7ChdUDQRtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm ZjYxMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjNhMWRhMTgtY2ZhYS00NmM2LThhNzItMDVkMjE5NDcyNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJkAXwG4TdiDf0uoSFFq/BUv552CQh+yfyl5 NcZf6AiWDPQ/bdjt8VaxHjRoRc9ncn8cadmCPpo0UnaCwhoaUcupAN+fKYeRua5C WIBUnVeCAb7tZXR0AvV12dAvd3+NvWqpZn2i/SOg1SjchbIupTBmc9jeBcN4Pnlh M4sltcUkazFc1aJtkERdBswuP7dsSOy4OqhIMZrDDL+47Fdr9Vmxsw+o4HtL1BOo wCl/sz3YwB/86/1QXiU1ll+mgsgJepX8K/6oqLGS4VKYFld8PEKYUPNOWiaTZ1RV 4cQSpQROzw5CfhBTN44rB/nQupLryUz2iQ6r9wN1GfdDMs80vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuBysCZqqkM0xbeswR9Zhkxg7tnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3 YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvNDI4YjMwMzAtMzdhOS0z ZGIyLThmYTctMWZkYzVlZjMwOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPpJljqQDfn5Fx5oiEldRLlv3ZmaiTIt//xPHJJdyQNn17IvlYDLxis x0slnqxFHmZgFJwzAyTj6nNBDfPZ07ju08qeT+mkDBsw1EPbrT039qkeY4qgrvAV JEURH77hq3MTc+6M40LX5v3ggJRvuimfHL505E4k8iYzoEnI2fiBMunNVn0DhqNe YzTyRpW4od+ybMtqEBDHCs+Z5xSw5Jfwv+m+s3oaCwsgw/Lf7O1H2YODoSHFFWqn 2oXxU1B1xt5zM+WPxx2jI6qTthUrHKKct/uIChdBCvKLB6xkUGJySZvl1g/bRcmK 4crIi4sNa0aNBOTdeGfsHfnlYv/v1gc= -----END CERTIFICATE-----Generated at Sat Oct 25 22:13:35 2025 by rpki-client