$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa File: dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa (raw, json) Hash identifier: 8j/ZqVnM12p47lDEGAOUQbcefApSBaLnLeNoKnUfN00= Subject key identifier: 5D:10:89:9E:8F:57:89:FF:C9:0D:F5:F2:88:21:E8:19:2F:71:5D:37 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584AC710EF0EF6A0D27C991B9C90 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 5744 IP address blocks: 151.207.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:ef:0e:f6:a0:d2:7c:99:1b:9c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=ac0e04b4-1e4c-400c-9352-12a712749731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:a5:a1:43:be:0f:b9:d4:52:e6:f9:05:e2: c3:b6:d8:62:3d:1a:6e:8f:da:d6:3c:a9:91:65:1a: 5e:55:8a:c0:79:59:65:40:b9:58:d3:e9:d4:4d:04: b2:f4:47:87:c8:23:a8:e6:7f:8a:35:b5:52:3b:98: d7:3f:a0:ee:54:ea:b7:ab:ae:43:b6:cf:8e:1b:5d: 2b:f6:5e:5c:06:56:56:ac:1e:49:83:e0:65:cd:af: d9:14:3a:15:a3:39:e8:6b:d6:b2:b1:5e:af:4c:0d: f9:aa:fa:90:37:a8:13:27:a5:12:c7:3e:24:ce:f6: 1c:d4:5e:d8:8a:d8:87:db:6c:8d:d2:d8:da:ed:ef: ad:0e:2e:d1:99:3c:9f:92:3e:2a:76:77:77:c3:04: 0b:58:30:d5:9d:83:16:16:ad:1d:75:26:ce:99:d1: f3:f2:46:9b:da:1b:47:69:b6:0e:42:e2:06:b5:04: dd:0b:be:44:19:30:d0:5f:97:5b:52:8f:06:92:21: bd:f4:f0:35:02:ee:d7:c4:a5:0b:3d:69:ce:8f:52: c0:fc:a3:74:45:8f:c8:a4:10:69:15:a1:84:fd:ed: 15:d0:4d:f1:34:85:e3:30:54:38:10:a3:07:64:ef: c0:3a:d4:34:90:73:da:40:e5:e0:cd:99:e5:96:1c: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:10:89:9E:8F:57:89:FF:C9:0D:F5:F2:88:21:E8:19:2F:71:5D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7c:ac:be:6a:ae:2d:7e:65:33:d3:a8:78:6f:17:9a:0e:97: 79:bb:cc:af:85:4b:c3:15:d9:84:70:a0:b5:1e:7f:39:1f:9b: e6:0d:8a:0f:e2:2c:e1:46:59:9a:3a:bf:57:51:46:51:63:81: 81:d2:db:67:10:a5:5e:a0:e7:8e:f9:c4:e4:ef:d3:2a:32:d8: b7:bc:61:ab:20:05:88:4d:6d:60:55:d1:e3:a5:f8:be:f8:73: 36:03:5a:c6:19:72:10:b6:39:21:ba:ad:ae:45:32:a3:b1:c1: 90:a6:8b:b3:1e:94:23:fc:c7:bb:b6:fe:b4:5e:60:4c:01:5b: ce:13:8b:5f:1f:3b:0e:b8:7f:a7:4f:9f:c7:55:3d:bb:a9:6d: 86:73:b6:7a:77:1f:6b:fb:3c:4d:4d:33:ed:76:97:c9:a3:16: fa:fe:ec:87:b0:fa:f6:50:96:3f:87:2c:43:b8:7d:fc:17:3f: 34:5e:81:27:64:56:be:4d:a9:56:53:f1:b1:be:8b:f4:e3:b3: ca:59:67:72:13:55:6d:cb:b7:72:db:9d:98:85:6e:e2:9d:b8: 12:a1:72:1f:ac:d3:fc:3f:15:a5:bd:71:df:cc:b5:6d:c7:27: 9d:ce:18:2f:34:ad:96:64:e6:44:7e:ea:64:59:00:56:96:89: 5c:f1:d3:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEO8O9qDSfJkbnJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YWMwZTA0YjQtMWU0Yy00MDBjLTkzNTItMTJhNzEyNzQ5NzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAOloUO+D7nUUub5BeLDtthiPRpuj9rWPKmR ZRpeVYrAeVllQLlY0+nUTQSy9EeHyCOo5n+KNbVSO5jXP6DuVOq3q65Dts+OG10r 9l5cBlZWrB5Jg+Blza/ZFDoVoznoa9aysV6vTA35qvqQN6gTJ6USxz4kzvYc1F7Y itiH22yN0tja7e+tDi7RmTyfkj4qdnd3wwQLWDDVnYMWFq0ddSbOmdHz8kab2htH abYOQuIGtQTdC75EGTDQX5dbUo8GkiG99PA1Au7XxKULPWnOj1LA/KN0RY/IpBBp FaGE/e0V0E3xNIXjMFQ4EKMHZO/AOtQ0kHPaQOXgzZnllhyp+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0QiZ6PV4n/yQ318ogh6BkvcV03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZGQyM2EyOTctOTA5MC0z YjJkLTkzMTQtMWVjMzJmY2FmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC58rL5qri1+ZTPTqHhvF5oOl3m7zK+FS8MV2YRwoLUefzkfm+YNig/i LOFGWZo6v1dRRlFjgYHS22cQpV6g5475xOTv0yoy2Le8YasgBYhNbWBV0eOl+L74 czYDWsYZchC2OSG6ra5FMqOxwZCmi7MelCP8x7u2/rReYEwBW84Ti18fOw64f6dP n8dVPbupbYZztnp3H2v7PE1NM+12l8mjFvr+7Iew+vZQlj+HLEO4ffwXPzRegSdk Vr5NqVZT8bG+i/Tjs8pZZ3ITVW3Lt3LbnZiFbuKduBKhch+s0/w/FaW9cd/MtW3H J53OGC80rZZk5kR+6mRZAFaWiVzx080= -----END CERTIFICATE-----Generated at Sun Aug 24 03:54:22 2025 by rpki-client