$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa File: cd2283ac-61d4-35e2-a161-6260ba6bd153.roa (raw, json) Hash identifier: J672tcKkJmaz1GxQ8SQ7ks9XGIMO6f84gPK5lODumwc= Subject key identifier: 78:53:F1:ED:33:52:ED:44:BC:20:1E:3F:79:65:75:94:F6:66:80:6B Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584EEA875E04B28AA1C0A6DE0900 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 3477 IP address blocks: 151.207.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:5e:04:b2:8a:a1:c0:a6:de:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=9e204619-d77c-435e-8df2-1b63d374563b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:5d:b1:1e:dc:9e:35:a5:61:75:32:30:91: e1:10:0d:67:f5:ec:61:4e:82:90:e6:42:c1:ab:dd: a2:b7:8b:a0:23:ae:f1:fd:af:e5:44:95:54:b7:2d: 36:c2:cb:2b:02:17:1d:1a:f6:b9:a9:ee:63:27:84: ac:fe:c8:b0:0a:5f:9e:69:a4:bc:16:28:ce:21:54: f1:ab:a1:42:3e:c0:d2:9b:ab:4f:00:88:84:8f:20: cc:64:d3:1f:04:9b:1d:ba:82:3e:fc:35:32:78:a5: f8:1a:41:ed:cb:c4:e8:81:0b:cb:f9:8d:e1:d1:74: ad:ee:02:43:03:6b:97:57:bb:46:e9:37:db:dd:b8: fa:73:28:f2:21:41:ef:57:39:22:66:bb:ca:5e:0d: 37:02:c4:85:55:b5:8b:0c:fb:19:01:1d:f2:ff:03: 9b:23:8b:d8:df:0d:e4:36:1a:0f:76:99:fc:eb:33: 06:ac:ee:2f:2d:ed:ff:d4:11:2e:6f:1f:16:10:20: 44:d0:4f:c2:84:35:25:fa:3f:38:0f:c1:97:e2:80: 07:ea:f1:fa:03:13:4d:c5:77:34:dc:94:df:01:3c: 13:71:9e:1d:05:6f:86:e0:ed:78:11:4a:20:69:59: ee:f9:a7:7b:27:74:35:a8:89:8f:aa:88:03:d3:a1: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:53:F1:ED:33:52:ED:44:BC:20:1E:3F:79:65:75:94:F6:66:80:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:27:4a:ae:9d:cc:34:3d:d1:68:f7:0f:d3:14:84:98:79:3a: 3e:19:06:ef:a9:b2:9f:56:d0:4d:08:6f:42:46:f7:ba:cb:a1: e1:17:79:3d:00:fc:0d:cf:70:9b:72:65:45:9e:bf:46:c9:f2: 06:de:9e:30:11:41:d5:e7:03:eb:e6:71:a9:ca:fa:b0:9e:a3: 19:26:ff:e0:81:7e:43:97:76:ae:8a:6b:88:2f:25:bc:51:02: bb:3c:a5:f9:b1:63:c5:49:fc:c5:93:d1:6f:c3:0a:fa:da:94: 1e:1a:a4:2a:8c:0b:55:7c:cf:84:b6:eb:37:ae:eb:1b:92:9d: c1:f2:ee:ab:62:0e:01:83:7d:1d:f0:a4:ff:95:3d:7e:08:b6: 46:69:aa:f4:13:a3:d9:8d:a8:d1:c6:7d:25:61:46:0f:8b:52: 4c:63:83:d2:3c:20:f1:cd:04:84:30:72:17:da:ed:02:e7:77: 4b:09:ff:06:b3:64:fa:d6:ab:30:9a:2e:2d:9f:0d:1f:b8:bd: 91:36:5b:71:03:11:70:83:38:cb:35:ca:59:e1:01:93:f9:22: 78:cf:dc:a5:3d:b5:9b:de:9c:7c:3a:fc:27:16:a5:3d:cf:c4: da:6d:22:15:e7:03:48:00:eb:ba:a1:ce:bc:8f:41:30:a4:66: d6:19:40:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh14EsoqhwKbeCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OWUyMDQ2MTktZDc3Yy00MzVlLThkZjItMWI2M2QzNzQ1NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUtdsR7cnjWlYXUyMJHhEA1n9exhToKQ5kLB q92it4ugI67x/a/lRJVUty02wssrAhcdGva5qe5jJ4Ss/siwCl+eaaS8FijOIVTx q6FCPsDSm6tPAIiEjyDMZNMfBJsduoI+/DUyeKX4GkHty8TogQvL+Y3h0XSt7gJD A2uXV7tG6Tfb3bj6cyjyIUHvVzkiZrvKXg03AsSFVbWLDPsZAR3y/wObI4vY3w3k NhoPdpn86zMGrO4vLe3/1BEubx8WECBE0E/ChDUl+j84D8GX4oAH6vH6AxNNxXc0 3JTfATwTcZ4dBW+G4O14EUogaVnu+ad7J3Q1qImPqogD06EbbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhT8e0zUu1EvCAeP3lldZT2ZoBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvY2QyMjgzYWMtNjFkNC0z NWUyLWExNjEtNjI2MGJhNmJkMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl88MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcnSq6dzDQ90Wj3D9MUhJh5Oj4ZBu+psp9W0E0Ib0JG97rLoeEXeT0A /A3PcJtyZUWev0bJ8gbenjARQdXnA+vmcanK+rCeoxkm/+CBfkOXdq6Ka4gvJbxR Ars8pfmxY8VJ/MWT0W/DCvralB4apCqMC1V8z4S26zeu6xuSncHy7qtiDgGDfR3w pP+VPX4ItkZpqvQTo9mNqNHGfSVhRg+LUkxjg9I8IPHNBIQwchfa7QLnd0sJ/waz ZPrWqzCaLi2fDR+4vZE2W3EDEXCDOMs1ylnhAZP5InjP3KU9tZvenHw6/CcWpT3P xNptIhXnA0gA67qhzryPQTCkZtYZQOE= -----END CERTIFICATE-----Generated at Sun Sep 13 19:43:35 2026 by rpki-client