$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa File: dd0f35f7-5560-3486-967e-db25d4288162.roa (raw, json) Hash identifier: g35Q9ysD6gd/jmR77P/Zszegf4C8r2a88jfKQobUl+E= Subject key identifier: B2:AE:47:89:65:20:8A:EE:D0:C7:F6:A3:81:07:0E:3F:96:9F:BA:1F Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584EEA87585A049E9450A8692D00 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 5744 IP address blocks: 151.207.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:58:5a:04:9e:94:50:a8:69:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=78515801-ce51-499f-a0d4-d8f180244ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:24:d9:1b:d5:94:9d:8f:f0:70:e6:02:26:07: 21:57:81:1a:3f:46:5d:cd:29:c4:9e:b8:17:6a:33: e3:b1:4f:87:28:e0:95:38:4b:da:07:67:59:b7:94: 1a:51:98:9d:06:dc:8c:14:f1:68:59:c6:d8:3f:92: 8f:81:dd:54:2c:ed:9a:49:a0:5c:89:24:0b:e3:3a: b9:52:fe:9d:72:e2:37:fc:6c:68:35:d3:12:0a:52: 99:80:4b:ef:64:c7:1a:f2:ab:eb:d7:a1:e8:b8:3f: 67:5a:4f:59:3c:f6:e0:80:81:ad:c8:44:7a:1c:27: 17:b5:fd:9b:95:bc:72:af:a3:54:94:ec:19:2d:61: a4:d9:b2:a6:19:3a:d7:84:33:f6:5b:61:f9:10:9f: 8d:61:2a:cc:17:f2:ad:14:1d:7c:ca:c1:97:19:8d: 27:a0:f7:42:82:fa:d5:56:4e:e4:a4:8c:46:ca:99: 49:10:1e:d5:7c:24:8b:9d:71:7a:76:92:dc:07:3d: b9:7a:4e:45:c8:ca:c0:91:81:86:d6:d0:ea:b8:68: 3c:16:46:b2:7d:80:45:e6:a1:dc:a1:e7:36:6c:60: 7e:8b:6b:fc:cc:68:27:44:88:64:20:5a:8c:99:ad: 5f:5e:ca:27:6b:7b:d3:a5:c6:f0:fc:ee:f7:55:97: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AE:47:89:65:20:8A:EE:D0:C7:F6:A3:81:07:0E:3F:96:9F:BA:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd0f35f7-5560-3486-967e-db25d4288162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ef:7a:0b:b1:29:76:33:0a:0b:8f:33:f4:f5:a9:08:4f:d4: a3:02:73:27:7e:ac:84:49:64:7e:39:da:b3:75:c3:b1:0e:66: 76:70:73:d9:a6:69:8f:05:f4:f4:36:38:3b:02:37:be:5f:b4: 23:a2:69:0a:05:8b:87:1e:3e:7b:8c:42:17:49:5e:e4:b3:87: e3:ad:5a:44:74:d4:ad:41:c5:8c:38:d4:d8:52:6d:6b:f3:a7: e0:b0:51:a3:c5:fd:5b:46:3e:06:26:9c:f7:e8:31:5f:e1:c3: f5:03:e0:c5:b6:3d:ea:c9:14:61:25:9a:5d:63:ef:96:e1:33: d9:ed:68:18:7c:63:5e:98:e5:76:82:2e:ad:a1:99:ec:66:8f: 82:d1:ca:a1:8a:2e:5d:5a:c2:eb:68:b8:24:34:74:9d:81:f6: e7:f1:88:31:69:4f:a4:41:35:52:f5:78:34:28:e8:1a:ce:8c: 64:9f:4c:3a:52:5c:09:e8:69:59:c3:c6:ed:08:05:0f:4b:d8: ec:d9:19:71:22:9b:cb:69:d9:83:d3:d7:df:d4:ca:82:b5:89: e9:f4:94:49:e3:51:85:34:d9:41:aa:3c:eb:c2:ab:3d:ff:a0: 0d:65:75:80:71:65:7a:85:c9:c0:e2:d5:a1:0d:87:1d:b2:1a: 21:ca:bf:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1haBJ6UUKhpLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk Nzg1MTU4MDEtY2U1MS00OTlmLWEwZDQtZDhmMTgwMjQ0YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiTZG9WUnY/wcOYCJgchV4EaP0ZdzSnEnrgX ajPjsU+HKOCVOEvaB2dZt5QaUZidBtyMFPFoWcbYP5KPgd1ULO2aSaBciSQL4zq5 Uv6dcuI3/GxoNdMSClKZgEvvZMca8qvr16HouD9nWk9ZPPbggIGtyER6HCcXtf2b lbxyr6NUlOwZLWGk2bKmGTrXhDP2W2H5EJ+NYSrMF/KtFB18ysGXGY0noPdCgvrV Vk7kpIxGyplJEB7VfCSLnXF6dpLcBz25ek5FyMrAkYGG1tDquGg8FkayfYBF5qHc oec2bGB+i2v8zGgnRIhkIFqMma1fXsona3vTpcbw/O73VZeSaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKuR4llIIru0Mf2o4EHDj+Wn7ofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZGQwZjM1ZjctNTU2MC0z NDg2LTk2N2UtZGIyNWQ0Mjg4MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8/1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELveguxKXYzCguPM/T1qQhP1KMCcyd+rIRJZH452rN1w7EOZnZwc9mm aY8F9PQ2ODsCN75ftCOiaQoFi4cePnuMQhdJXuSzh+OtWkR01K1BxYw41NhSbWvz p+CwUaPF/VtGPgYmnPfoMV/hw/UD4MW2PerJFGElml1j75bhM9ntaBh8Y16Y5XaC Lq2hmexmj4LRyqGKLl1awutouCQ0dJ2B9ufxiDFpT6RBNVL1eDQo6BrOjGSfTDpS XAnoaVnDxu0IBQ9L2OzZGXEim8tp2YPT19/UyoK1ien0lEnjUYU02UGqPOvCqz3/ oA1ldYBxZXqFycDi1aENhx2yGiHKv3Y= -----END CERTIFICATE-----Generated at Sun Sep 13 19:43:48 2026 by rpki-client