$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa File: 045e585e-8292-389d-a1f1-87e5aa9d3e80.roa (raw, json) Hash identifier: GunRSqLY/KyI/5guEM9Dk2vj28ovYx5dGKwtdZq3WyA= Subject key identifier: DE:AA:C3:AB:D0:E2:A9:AD:FD:18:76:0D:50:20:18:58:C3:96:4A:BB Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B8EACF10CF5CB0EDC449A4E00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 107.151.224.0/24 maxlen: 24 107.151.225.0/24 maxlen: 24 107.151.226.0/24 maxlen: 24 107.151.227.0/24 maxlen: 24 107.151.228.0/24 maxlen: 24 107.151.229.0/24 maxlen: 24 107.151.230.0/24 maxlen: 24 107.151.231.0/24 maxlen: 24 107.151.232.0/24 maxlen: 24 107.151.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f1:0c:f5:cb:0e:dc:44:9a:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=e8fa863b-7390-4b0b-a9fa-b75b33f7899b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:a4:f4:ca:55:49:d9:ed:d8:7e:67:27:f6: 47:4f:4b:09:15:93:e5:e8:77:e9:2b:f3:59:5f:07: 1d:1d:56:8a:90:f5:1c:9c:48:57:8a:a7:d0:bb:84: e5:a2:de:8b:d7:21:e6:1a:d7:f1:26:3e:62:c2:e6: 08:5c:8d:9c:d2:d8:4d:b0:22:55:9f:e1:a3:c2:cd: ab:fd:28:b8:cd:70:95:df:11:e1:fd:8e:73:f6:59: f8:69:c3:78:2c:c2:e6:68:38:cf:f8:dc:b8:9b:f8: a2:a2:9b:ba:7b:fc:f6:0c:c9:f3:b6:c6:0e:da:3b: 20:56:07:f6:f3:97:49:cc:a3:be:cd:cf:2d:4a:7e: 32:30:04:25:3f:71:0a:ce:e6:3d:b8:46:6d:15:28: d1:fc:1e:0f:3c:af:ce:40:a3:e5:bf:15:61:f7:51: c1:55:d2:5d:32:2f:fe:be:25:6d:ac:e7:8f:92:b9: 38:98:c4:df:18:10:f1:02:26:f8:ce:01:c7:ae:67: 8a:c5:87:53:20:84:a3:e6:fb:93:33:18:73:2c:2b: 3d:57:52:6d:ff:ad:af:45:c9:1b:99:17:56:27:4c: f4:08:66:53:e7:32:03:e0:29:18:1e:cf:61:bf:ff: b7:32:08:a3:5c:8e:b2:50:a8:b3:ae:f4:e1:23:a1: ee:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AA:C3:AB:D0:E2:A9:AD:FD:18:76:0D:50:20:18:58:C3:96:4A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.224.0-107.151.233.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3e:cd:41:2b:54:6b:8b:49:e9:b8:dc:5d:76:98:96:15:9f: 08:1a:c7:58:d1:c2:2d:73:5b:cc:de:eb:f9:2b:8f:f4:30:9b: be:01:a6:e3:be:9a:b2:14:ff:7d:43:35:e1:8d:ee:da:a8:7d: 26:e7:dd:9e:01:5f:76:e2:62:66:d8:c4:1a:34:a4:95:97:7d: 9a:af:b3:b0:6f:b2:e0:f3:0d:81:0c:eb:24:f9:7e:50:b7:55: 91:2a:6d:66:ea:c0:e9:27:19:22:39:5d:93:61:2f:02:51:40: ea:38:d8:ce:66:ca:01:5a:3f:e7:9f:be:b6:dc:d2:fe:01:ec: 3b:7f:05:d6:df:04:12:d6:85:e7:8a:7f:9a:6f:e6:1c:6a:96: 24:4e:cd:d5:d4:d7:05:21:7a:04:35:85:5c:b5:3e:c6:cd:0f: b7:e9:53:d1:aa:c5:f4:38:b0:ab:d6:36:c2:e2:e1:ec:07:dd: dc:f9:84:f1:18:1c:d5:9e:38:4c:e7:a6:2a:8e:51:4e:c4:73: 55:4d:97:b7:16:5c:1a:6a:aa:bd:a4:47:d2:f4:6f:53:0c:4a: 74:66:f2:2c:fb:3c:24:ee:f2:48:20:fc:79:85:f6:71:4a:b5: 84:85:14:42:75:8c:07:72:32:3e:97:22:c8:22:cc:3d:1f:9b: 4d:eb:aa:58 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuOrPEM9csO3ESaTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZThmYTg2M2ItNzM5MC00YjBiLWE5ZmEtYjc1YjMzZjc4OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHik9MpVSdnt2H5nJ/ZHT0sJFZPl6HfpK/NZ XwcdHVaKkPUcnEhXiqfQu4Tlot6L1yHmGtfxJj5iwuYIXI2c0thNsCJVn+Gjws2r /Si4zXCV3xHh/Y5z9ln4acN4LMLmaDjP+Ny4m/iiopu6e/z2DMnztsYO2jsgVgf2 85dJzKO+zc8tSn4yMAQlP3EKzuY9uEZtFSjR/B4PPK/OQKPlvxVh91HBVdJdMi/+ viVtrOePkrk4mMTfGBDxAib4zgHHrmeKxYdTIISj5vuTMxhzLCs9V1Jt/62vRckb mRdWJ0z0CGZT5zID4CkYHs9hv/+3MgijXI6yUKizrvThI6Hu7wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFN6qw6vQ4qmt/Rh2DVAgGFjDlkq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMDQ1ZTU4NWUtODI5Mi0z ODlkLWExZjEtODdlNWFhOWQzZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVrl+AD BAFrl+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAND7NQStUa4tJ6bjcXXaYlhWfCBrHWNHCLXNbzN7r+SuP 9DCbvgGm476ashT/fUM14Y3u2qh9JufdngFfduJiZtjEGjSklZd9mq+zsG+y4PMN gQzrJPl+ULdVkSptZurA6ScZIjldk2EvAlFA6jjYzmbKAVo/55++ttzS/gHsO38F 1t8EEtaF54p/mm/mHGqWJE7N1dTXBSF6BDWFXLU+xs0Pt+lT0arF9Diwq9Y2wuLh 7Afd3PmE8Rgc1Z44TOemKo5RTsRzVU2XtxZcGmqqvaRH0vRvUwxKdGbyLPs8JO7y SCD8eYX2cUq1hIUUQnWMB3IyPpciyCLMPR+bTeuqWA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:02 2025 by rpki-client