$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa File: f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa (raw, json) Hash identifier: qlsiSAzP9PiNjkDxVHVp9PVZhedkCMFmCOR8bwQ1JXI= Subject key identifier: 92:1B:97:60:66:1B:BD:5B:DE:20:43:A4:3D:22:20:38:BD:9A:0B:C6 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584FA1632F9593F8126375AF65F0 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 5744 IP address blocks: 151.207.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:2f:95:93:f8:12:63:75:af:65:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=a4f6df2f-eff8-4f30-9d76-480a7ada93d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:c0:33:5e:ad:f4:17:33:0e:ea:f9:e9:4f: b1:0b:56:cc:e2:2f:62:30:45:df:f8:28:7d:e1:cf: 83:9d:f6:69:e9:34:a3:21:8d:c4:de:8a:1b:ae:14: 4b:f3:a3:a2:4d:8e:99:e6:c3:6f:b5:09:2c:87:c0: 6c:d1:d5:9b:2e:bb:4f:99:a7:eb:50:95:07:65:31: ae:d1:22:9f:98:be:bb:45:f8:eb:15:d2:80:c2:fc: 86:28:26:d4:b8:2e:7c:f7:95:18:ae:66:a6:0c:8c: 47:99:d4:80:d1:03:1c:cb:12:d5:b2:7b:49:71:6a: 51:c5:d4:10:8b:5f:8e:43:0a:2c:69:85:9e:d0:c1: 3f:fe:38:dd:a5:7c:0f:c4:64:32:ba:e3:74:d9:ba: 60:38:91:53:32:3c:7b:03:4c:76:ed:cf:c1:66:6d: fd:a7:b3:8c:32:bc:90:ac:60:33:4b:83:b8:3e:1e: 23:be:40:3b:55:8c:89:3a:d4:71:3c:3a:24:bc:02: ea:ce:5e:cd:3d:42:df:26:ab:1e:44:8f:f4:05:b0: 68:f3:97:40:61:8b:40:ce:09:11:9a:39:81:3e:69: d1:ad:61:41:71:4f:7c:86:82:d5:19:77:83:81:28: a1:92:f7:44:ce:8b:b1:55:4d:bb:dc:4a:39:d3:4e: 59:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:97:60:66:1B:BD:5B:DE:20:43:A4:3D:22:20:38:BD:9A:0B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f77a51a1-ec03-3e82-b3bb-c95e265b3500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:16:1c:67:9e:78:e2:c5:74:06:cf:fc:ea:7a:01:7b:16:9e: 6b:5f:96:bf:36:f1:2f:2f:fa:88:67:5e:95:92:c3:db:9f:d3: d9:20:7e:57:0f:93:06:2c:9d:91:be:df:6e:a3:d4:16:c6:c4: 2e:d8:c6:34:6e:76:fb:9d:d6:5e:71:5c:99:ff:3a:3b:d4:5c: e4:35:f1:46:1c:52:9f:68:06:14:e0:e8:ff:b0:50:2f:7d:d7: 2e:5f:7a:11:28:3a:55:3a:35:25:60:87:da:ee:88:81:61:0f: 59:7d:45:74:f0:6d:8c:91:15:be:72:3a:b5:21:45:a0:e7:ae: 3b:5b:15:23:24:16:07:e8:77:36:5e:86:95:5f:d1:4b:32:7d: 28:61:eb:c9:67:af:0b:99:55:cf:c7:9d:3f:ce:dd:6d:46:f6: 28:56:1d:e0:ca:09:90:34:fb:67:b7:e5:b6:3a:48:77:26:0a: 5b:83:62:cb:e2:bf:a6:9c:0c:fb:aa:2c:98:0f:0b:78:cf:80: 15:b9:70:67:cc:34:43:c5:78:47:14:51:12:20:06:c4:cc:cb: 0f:ff:e1:ae:12:e8:35:14:5e:bd:6f:b1:43:bf:07:6f:8e:02: da:15:bd:be:a5:a4:b2:a5:60:40:32:95:e5:db:77:d5:2a:66: 30:8e:f4:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYy+Vk/gSY3WvZfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk YTRmNmRmMmYtZWZmOC00ZjMwLTlkNzYtNDgwYTdhZGE5M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QfAM16t9BczDur56U+xC1bM4i9iMEXf+Ch9 4c+DnfZp6TSjIY3E3oobrhRL86OiTY6Z5sNvtQksh8Bs0dWbLrtPmafrUJUHZTGu 0SKfmL67RfjrFdKAwvyGKCbUuC5895UYrmamDIxHmdSA0QMcyxLVsntJcWpRxdQQ i1+OQwosaYWe0ME//jjdpXwPxGQyuuN02bpgOJFTMjx7A0x27c/BZm39p7OMMryQ rGAzS4O4Ph4jvkA7VYyJOtRxPDokvALqzl7NPULfJqseRI/0BbBo85dAYYtAzgkR mjmBPmnRrWFBcU98hoLVGXeDgSihkvdEzouxVU273Eo5005ZrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIbl2BmG71b3iBDpD0iIDi9mgvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZjc3YTUxYTEtZWMwMy0z ZTgyLWIzYmItYzk1ZTI2NWIzNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl8/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgWHGeeeOLFdAbP/Op6AXsWnmtflr828S8v+ohnXpWSw9uf09kgflcP kwYsnZG+326j1BbGxC7YxjRudvud1l5xXJn/OjvUXOQ18UYcUp9oBhTg6P+wUC99 1y5fehEoOlU6NSVgh9ruiIFhD1l9RXTwbYyRFb5yOrUhRaDnrjtbFSMkFgfodzZe hpVf0UsyfShh68lnrwuZVc/HnT/O3W1G9ihWHeDKCZA0+2e35bY6SHcmCluDYsvi v6acDPuqLJgPC3jPgBW5cGfMNEPFeEcUURIgBsTMyw//4a4S6DUUXr1vsUO/B2+O AtoVvb6lpLKlYEAyleXbd9UqZjCO9M0= -----END CERTIFICATE-----Generated at Sun Nov 1 19:40:00 2026 by rpki-client