$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa File: dd0f35f7-5560-3486-967e-db25d4288162.roa (raw, json) Hash identifier: QgJqzQjLcPJ+IaA8nP0Xntcjl76UCKPt28dDyP/qIrs= Subject key identifier: E1:3C:47:10:4C:BB:DF:5A:FE:3D:A7:41:2B:B9:1B:15:ED:B6:E7:56 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584F8DD85AD65407BE7CE0F6D900 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 5744 IP address blocks: 151.207.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:5a:d6:54:07:be:7c:e0:f6:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=45669856-a70d-4296-820d-58975b7f078e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:bb:02:41:83:1d:3f:b9:fd:83:40:3b:d0: ef:e2:22:68:76:e8:10:64:18:4c:76:9b:a2:f9:e3: 36:0b:44:57:db:c7:08:5d:54:5d:6a:b4:db:b4:1b: b1:6a:fe:39:20:0e:1e:50:19:59:fb:5b:32:f8:0c: 76:e1:33:db:2a:40:93:6b:6f:00:34:2e:9b:48:2e: 15:fe:72:b0:88:4f:09:88:59:a4:26:ec:98:30:a2: 69:93:9a:55:66:bf:b9:31:66:92:e9:36:9b:0d:18: 34:86:cc:2a:82:b4:3d:f2:46:6f:ee:59:29:b6:d4: 2f:e8:53:be:da:0a:49:1f:a2:66:ec:ce:e1:a7:a3: cc:0e:9a:39:9c:4d:be:b8:fa:26:fc:e6:c7:a2:5a: fc:ce:87:14:65:83:ff:3a:85:68:20:ec:d5:2a:4a: d5:db:ed:27:82:3f:98:52:5f:17:59:5c:42:41:6d: 86:0b:a0:62:21:b6:0f:ee:f7:45:cd:97:33:d4:3a: 93:60:f4:a2:28:d4:16:05:96:be:1d:ad:06:c2:df: 9b:c1:55:2e:a2:11:58:d9:5e:bd:de:cc:1e:5f:d4: eb:c3:f0:f6:a0:c0:50:b7:b5:25:df:b3:80:2c:04: de:fd:38:7a:ed:31:53:8b:58:dd:38:22:16:0f:7b: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3C:47:10:4C:BB:DF:5A:FE:3D:A7:41:2B:B9:1B:15:ED:B6:E7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f5:1f:c7:64:1b:9a:75:3d:3c:92:a0:a1:49:a3:ac:50:d0: 9d:25:60:20:a1:60:4a:66:a9:e2:6a:73:b1:e0:4e:42:60:0a: 34:f4:7c:54:da:bb:ca:4c:81:e0:31:c7:f0:de:8b:3f:66:dd: 03:1c:23:9e:e5:34:3f:40:f2:ed:eb:fb:e9:c3:b2:cb:bb:76: 57:68:92:40:17:d2:09:55:3a:bc:36:11:69:aa:b7:35:9a:b1: 1e:05:5f:8c:6d:5b:81:e2:2b:2e:6d:c3:6c:d8:72:3e:8d:4c: 00:30:9a:47:c1:34:53:c3:f6:4e:89:b3:ac:0b:2b:26:90:40: 92:66:fe:62:31:9b:98:97:bd:cc:6b:bb:11:25:90:3b:47:40: 23:29:30:8c:01:7c:d8:fa:60:8c:61:06:17:25:35:92:35:8a: 62:81:72:e0:5e:b5:fd:29:86:58:f4:55:f9:51:e1:80:ea:6c: c0:31:52:c7:54:f5:87:12:40:34:6c:68:43:23:fe:ba:5e:5d: db:69:b9:c8:76:8c:2a:ec:5d:fa:dd:e6:f6:ff:da:29:35:bd: 07:55:5d:a0:78:01:2f:cc:be:a3:b1:39:88:35:3e:27:2f:e0: a0:35:e1:09:b6:5d:93:af:29:6c:d6:74:82:d1:ad:7b:0e:59: fb:f5:fd:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2FrWVAe+fOD22QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk NDU2Njk4NTYtYTcwZC00Mjk2LTgyMGQtNTg5NzViN2YwNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirK7AkGDHT+5/YNAO9Dv4iJodugQZBhMdpui +eM2C0RX28cIXVRdarTbtBuxav45IA4eUBlZ+1sy+Ax24TPbKkCTa28ANC6bSC4V /nKwiE8JiFmkJuyYMKJpk5pVZr+5MWaS6TabDRg0hswqgrQ98kZv7lkpttQv6FO+ 2gpJH6Jm7M7hp6PMDpo5nE2+uPom/ObHolr8zocUZYP/OoVoIOzVKkrV2+0ngj+Y Ul8XWVxCQW2GC6BiIbYP7vdFzZcz1DqTYPSiKNQWBZa+Ha0Gwt+bwVUuohFY2V69 3sweX9Trw/D2oMBQt7Ul37OALATe/Th67TFTi1jdOCIWD3sgfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE8RxBMu99a/j2nQSu5GxXttudWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZGQwZjM1ZjctNTU2MC0z NDg2LTk2N2UtZGIyNWQ0Mjg4MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8/1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD1H8dkG5p1PTySoKFJo6xQ0J0lYCChYEpmqeJqc7HgTkJgCjT0fFTa u8pMgeAxx/Deiz9m3QMcI57lND9A8u3r++nDssu7dldokkAX0glVOrw2EWmqtzWa sR4FX4xtW4HiKy5tw2zYcj6NTAAwmkfBNFPD9k6Js6wLKyaQQJJm/mIxm5iXvcxr uxElkDtHQCMpMIwBfNj6YIxhBhclNZI1imKBcuBetf0phlj0VflR4YDqbMAxUsdU 9YcSQDRsaEMj/rpeXdtpuch2jCrsXfrd5vb/2ik1vQdVXaB4AS/MvqOxOYg1Picv 4KA14Qm2XZOvKWzWdILRrXsOWfv1/Wc= -----END CERTIFICATE-----Generated at Sun Nov 1 10:51:56 2026 by rpki-client