$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/8fc2fb36-dab2-39b2-98d9-af80c8a525ba.roa File: 8fc2fb36-dab2-39b2-98d9-af80c8a525ba.roa (raw, json) Hash identifier: YLvB9mL/5QuVhi5GCsVRKI9vwotiw6RkiltdbrWi9oE= Subject key identifier: 2E:57:56:11:BC:EE:5B:B1:19:07:23:90:43:75:CE:1E:48:73:04:A9 Certificate issuer: /CN=1023a4c7-42d2-43d3-969f-e275de93e1df Certificate serial: 010D0C9F4328584B76F25C4709475CCD96EA6500 Authority key identifier: 55:B4:D1:00:88:36:44:5F:7B:74:9D:DA:6E:C2:34:61:33:0A:BD:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/8fc2fb36-dab2-39b2-98d9-af80c8a525ba.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 151.148.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5c:47:09:47:5c:cd:96:ea:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1023a4c7-42d2-43d3-969f-e275de93e1df Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c8dac3cf-2e64-4e1c-8ba4-cc052a48abbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:75:23:6d:b6:9c:bb:5a:bc:cb:4e:4f:43: a9:39:f5:bf:28:1e:0f:14:5b:4e:f0:bf:a6:fd:c6: eb:cd:72:1a:ed:57:d6:a1:dc:d0:91:95:7d:fc:ce: ab:ec:c6:47:9f:4b:59:8a:a6:f9:0d:52:ad:6f:ea: 0a:59:6a:b6:a3:a8:09:5a:82:09:95:97:a2:4c:49: 1d:22:39:82:18:b4:de:9e:ff:72:75:ed:f5:67:91: 82:6e:4c:84:ee:cc:02:74:e2:2d:8b:49:1d:54:19: 1f:02:99:a0:6d:b7:38:e6:9f:d4:4f:74:0e:c0:de: 47:27:5c:17:51:e1:63:31:5e:af:90:c8:22:2c:a5: 76:85:b1:90:ce:3a:9d:8f:bd:6c:25:3f:67:00:93: 96:55:28:ff:c1:27:a1:80:98:32:e8:d8:02:22:57: 6e:a7:04:33:03:e9:59:54:47:29:03:45:af:3d:7d: c8:05:a7:98:59:d5:f2:84:7c:03:bb:c5:5b:7e:25: 65:36:d0:22:82:34:c8:51:15:87:d8:cb:23:f8:03: d1:24:db:03:78:2b:d8:13:ec:15:22:3f:a7:2b:c5: 69:4e:64:ba:df:ce:92:bf:83:a6:8c:be:09:11:1e: 81:13:31:99:18:03:d2:79:06:3e:94:6a:a1:7f:c5: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:57:56:11:BC:EE:5B:B1:19:07:23:90:43:75:CE:1E:48:73:04:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/8fc2fb36-dab2-39b2-98d9-af80c8a525ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.crl X509v3 Authority Key Identifier: keyid:55:B4:D1:00:88:36:44:5F:7B:74:9D:DA:6E:C2:34:61:33:0A:BD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer sbgp-ipAddrBlock: critical IPv4: 151.148.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b5:85:71:39:54:7e:63:3b:b7:88:2a:57:f5:04:33:d1:01: 23:4c:d7:47:30:98:a6:a9:fe:bb:33:6d:3e:e3:ec:c5:d8:ff: af:18:87:dd:24:25:81:4d:c6:9e:b0:35:e7:91:86:e6:3c:b7: 5b:ce:be:a4:95:f7:fe:5a:2a:22:bf:9b:95:99:99:06:37:01: e7:8f:de:42:e1:6e:38:fd:eb:78:f8:55:57:1f:42:b2:55:82: 9f:bf:4f:f4:6c:f8:95:40:1a:50:0d:cb:f0:5e:4a:31:40:73: 68:15:00:10:9b:be:74:a0:a4:03:fc:92:bc:a4:d2:de:37:68: f0:5a:fc:87:f7:99:b6:1b:d3:db:7b:5c:19:7d:92:d9:c3:e7: e7:d2:6e:6a:f7:af:55:ff:6c:8f:0c:8d:8e:7c:dc:a5:17:b8: d6:ba:cf:2c:30:57:c9:be:c3:80:78:b2:98:56:02:4c:91:68: 89:8b:aa:d3:24:94:17:77:0e:4a:10:23:d7:9a:5a:da:41:05: c1:f9:91:f6:49:a2:0e:f1:60:59:2c:23:c5:b2:e3:9e:74:4f: 1b:57:3f:f1:bd:36:30:57:f7:c5:73:ec:7e:74:0e:55:8a:0b: 57:75:b6:f1:e7:06:c4:ca:da:30:80:e1:48:d3:1c:0d:c6:7a: 75:33:63:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lxHCUdczZbqZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAyM2E0YzctNDJkMi00M2QzLTk2OWYtZTI3NWRlOTNl MWRmMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YzhkYWMzY2YtMmU2NC00ZTFjLThiYTQtY2MwNTJhNDhhYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRl1I222nLtavMtOT0OpOfW/KB4PFFtO8L+m /cbrzXIa7VfWodzQkZV9/M6r7MZHn0tZiqb5DVKtb+oKWWq2o6gJWoIJlZeiTEkd IjmCGLTenv9yde31Z5GCbkyE7swCdOIti0kdVBkfApmgbbc45p/UT3QOwN5HJ1wX UeFjMV6vkMgiLKV2hbGQzjqdj71sJT9nAJOWVSj/wSehgJgy6NgCIldupwQzA+lZ VEcpA0WvPX3IBaeYWdXyhHwDu8VbfiVlNtAigjTIURWH2Msj+APRJNsDeCvYE+wV Ij+nK8VpTmS6386Sv4OmjL4JER6BEzGZGAPSeQY+lGqhf8XVMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5XVhG87luxGQcjkEN1zh5IcwSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMDIz YTRjNy00MmQyLTQzZDMtOTY5Zi1lMjc1ZGU5M2UxZGYvOGZjMmZiMzYtZGFiMi0z OWIyLTk4ZDktYWY4MGM4YTUyNWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTAyM2E0YzctNDJkMi00M2QzLTk2 OWYtZTI3NWRlOTNlMWRmLzEwMjNhNGM3LTQyZDItNDNkMy05NjlmLWUyNzVkZTkz ZTFkZi5jcmwwHwYDVR0jBBgwFoAUVbTRAIg2RF97dJ3absI0YTMKveAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMDIzYTRjNy00MmQyLTQzZDMtOTY5Zi1lMjc1 ZGU5M2UxZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl5QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe1hXE5VH5jO7eIKlf1BDPRASNM10cwmKap/rszbT7j7MXY/68Yh90k JYFNxp6wNeeRhuY8t1vOvqSV9/5aKiK/m5WZmQY3AeeP3kLhbjj963j4VVcfQrJV gp+/T/Rs+JVAGlANy/BeSjFAc2gVABCbvnSgpAP8kryk0t43aPBa/If3mbYb09t7 XBl9ktnD5+fSbmr3r1X/bI8MjY583KUXuNa6zywwV8m+w4B4sphWAkyRaImLqtMk lBd3DkoQI9eaWtpBBcH5kfZJog7xYFksI8Wy4550TxtXP/G9NjBX98Vz7H50DlWK C1d1tvHnBsTK2jCA4UjTHA3GenUzY6A= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:38 2025 by rpki-client