$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa File: 10f72b7c-8477-34d9-84e6-673dfd0817f0.roa (raw, json) Hash identifier: tyu/E9Mi+bqyhkNZUkN24C/FQRN6Ifrh9NU/Rk6e+fQ= Subject key identifier: 3A:64:69:0E:F7:32:4C:B8:85:78:4B:C7:DA:B9:45:0E:1C:16:A0:EF Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584AC710EE7FE16C4C8662F00500 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 5744 IP address blocks: 151.207.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:ee:7f:e1:6c:4c:86:62:f0:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=586a6178-1043-4837-978c-d19c47ea5f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:43:c3:14:04:e9:fd:6b:94:7a:f2:22:09: 13:d5:2c:3f:49:fe:56:07:7c:e3:2f:67:7d:d8:b2: 7a:d6:40:c2:c2:48:8d:47:70:b4:43:57:9f:ec:af: e1:9b:15:52:28:eb:52:2d:3f:3d:50:97:03:70:4a: 26:f3:ab:1a:ee:4c:e8:57:88:d1:21:a0:6e:4a:b4: f9:d7:ff:99:23:dd:37:7a:da:fb:ba:0c:ea:b6:3d: e0:6c:f4:99:86:42:61:30:25:a0:cf:82:c1:47:4f: 99:9f:71:29:12:60:89:d3:cf:5d:fd:fe:6a:23:75: 43:d0:07:af:90:61:e8:ac:63:26:9e:93:7a:25:66: 57:88:15:e1:64:ae:a6:34:32:64:1b:8c:9a:0f:87: 8d:26:f1:a6:af:bf:ca:24:93:de:a0:f2:13:cb:0d: 14:bc:07:24:c4:48:7f:c2:5d:86:36:e7:ea:2f:7f: 05:14:4a:7e:86:8b:db:2c:a7:81:33:d6:ef:03:53: 47:85:d1:fd:65:2f:15:a9:cb:ad:9d:92:bf:43:65: 25:6f:46:e9:d2:68:ee:95:ff:6b:56:ba:ca:5c:b7: 01:3b:25:36:ad:18:fc:2a:fb:0f:90:64:81:25:63: c4:f8:86:78:db:20:f4:a8:2f:f2:b6:a3:f1:0b:54: fc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:64:69:0E:F7:32:4C:B8:85:78:4B:C7:DA:B9:45:0E:1C:16:A0:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/10f72b7c-8477-34d9-84e6-673dfd0817f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:18:b7:7c:58:2d:00:0d:0f:41:e6:f1:b6:46:96:a2:fc:7f: 43:04:0a:07:50:11:ed:57:45:8e:54:f6:ff:65:8d:ac:69:b6: f7:f6:dc:67:86:13:a7:96:0f:43:9b:4e:b5:eb:25:0f:e9:73: 9e:b1:bd:08:aa:e4:ef:ba:4e:85:f9:6b:e6:df:19:b5:c5:46: 75:11:a4:a6:f2:3f:a7:94:67:d3:aa:8d:3b:1a:98:b9:d5:97: 26:06:ad:34:2e:8f:ce:f6:ad:7b:6c:6d:83:c7:ee:7b:d8:eb: 38:71:93:f6:7d:47:fb:96:b4:23:06:84:fa:fc:49:f2:ab:07: bb:84:85:b0:4f:9f:80:7a:53:ed:37:30:26:fd:73:34:89:cc: 63:d4:08:fc:dd:39:b3:be:4a:63:08:8d:22:cd:33:f5:f4:97: 73:e4:73:7b:f2:79:a0:1b:c8:d4:d3:cd:fb:5d:6a:b9:26:5e: 97:fc:0a:c4:9d:6c:03:b4:c6:03:b4:2d:83:b4:85:06:e3:96: db:12:a6:c2:ea:8d:16:11:ae:f2:23:7a:82:a2:fa:39:e8:c5: c5:16:47:a0:85:0f:9c:d9:19:07:e6:60:a7:19:6b:30:db:df: bd:84:c8:f3:8d:22:a8:9d:6f:59:1a:7d:f0:16:94:c1:19:11: d3:67:b3:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEO5/4WxMhmLwBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NTg2YTYxNzgtMTA0My00ODM3LTk3OGMtZDE5YzQ3ZWE1ZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KZDwxQE6f1rlHryIgkT1Sw/Sf5WB3zjL2d9 2LJ61kDCwkiNR3C0Q1ef7K/hmxVSKOtSLT89UJcDcEom86sa7kzoV4jRIaBuSrT5 1/+ZI903etr7ugzqtj3gbPSZhkJhMCWgz4LBR0+Zn3EpEmCJ089d/f5qI3VD0Aev kGHorGMmnpN6JWZXiBXhZK6mNDJkG4yaD4eNJvGmr7/KJJPeoPITyw0UvAckxEh/ wl2GNufqL38FFEp+hovbLKeBM9bvA1NHhdH9ZS8VqcutnZK/Q2Ulb0bp0mjulf9r VrrKXLcBOyU2rRj8KvsPkGSBJWPE+IZ42yD0qC/ytqPxC1T83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpkaQ73Mky4hXhLx9q5RQ4cFqDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvMTBmNzJiN2MtODQ3Ny0z NGQ5LTg0ZTYtNjczZGZkMDgxN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgYt3xYLQAND0Hm8bZGlqL8f0MECgdQEe1XRY5U9v9ljaxptvf23GeG E6eWD0ObTrXrJQ/pc56xvQiq5O+6ToX5a+bfGbXFRnURpKbyP6eUZ9OqjTsamLnV lyYGrTQuj872rXtsbYPH7nvY6zhxk/Z9R/uWtCMGhPr8SfKrB7uEhbBPn4B6U+03 MCb9czSJzGPUCPzdObO+SmMIjSLNM/X0l3Pkc3vyeaAbyNTTzftdarkmXpf8CsSd bAO0xgO0LYO0hQbjltsSpsLqjRYRrvIjeoKi+jnoxcUWR6CFD5zZGQfmYKcZazDb 372EyPONIqidb1kaffAWlMEZEdNns2A= -----END CERTIFICATE-----Generated at Sun Aug 24 03:46:50 2025 by rpki-client