$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa File: 4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa (raw, json) Hash identifier: gliI+Mt3nAnBcsY/72R15GUKQdR9n2Pi8Vk9R1FT4wE= Subject key identifier: 26:21:36:E2:DE:9D:A8:31:39:F0:82:D6:CA:F5:92:BE:2A:F1:69:23 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D07ACFEC148850CA6708781AC Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 21859 IP address blocks: 107.151.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fe:c1:48:85:0c:a6:70:87:81:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=51c3a657-b3d1-4980-a13d-c06f8126d8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:68:a0:d9:2d:ae:94:f4:42:bd:aa:f2:9c: e5:12:08:df:bb:12:fa:33:ef:48:67:a1:80:0d:67: 1e:39:81:c4:8a:9c:e8:00:92:3c:32:a6:32:26:0c: 7f:f8:3e:2b:0c:2d:a7:b9:7a:bf:ec:76:32:86:1f: 8f:69:48:8b:19:d4:2a:b3:f8:1f:69:91:2f:7b:cc: 21:d3:16:c0:68:fd:13:c4:9f:ed:0c:21:d7:63:e9: 51:e1:a6:7f:83:a9:a6:7d:f2:8c:48:19:c9:b7:1a: be:8b:96:15:68:bc:d5:6e:0f:f8:b6:ab:1e:1f:9e: 45:6b:49:97:f2:6e:a4:80:88:c9:2c:b8:fa:da:42: e0:3d:aa:97:ff:f6:6e:f8:8f:16:c5:fa:92:9b:0a: b4:a8:49:42:35:d7:23:2e:07:5a:c0:4a:69:05:cd: 8b:34:ed:94:65:7c:d6:27:1e:69:78:68:ac:96:a1: bb:53:9c:d9:d8:a8:1c:28:f5:77:94:fc:3c:ae:13: 92:75:ff:31:61:cc:9e:dc:7e:b1:5c:99:e1:2b:83: ba:e6:f7:9d:c8:b6:7f:35:41:4e:d1:74:a3:f7:36: 89:2f:65:11:5c:81:91:c9:cd:ce:24:81:06:c9:3a: 3d:fa:84:4c:e5:7f:07:f7:aa:b5:cf:2c:70:42:47: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:21:36:E2:DE:9D:A8:31:39:F0:82:D6:CA:F5:92:BE:2A:F1:69:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c1:b9:e1:1d:32:3b:5e:50:06:65:cd:2a:e3:e2:bc:e6:6b: d0:c6:0d:ef:28:75:1b:ff:12:a0:30:47:43:86:eb:19:f2:5b: a7:7e:2b:d2:53:7a:fc:a9:80:4d:21:27:01:e2:01:7e:1e:d1: 61:7f:e9:5f:3c:50:ad:ee:4f:6d:92:7c:44:38:06:4c:79:67: 72:a2:fd:97:7f:32:5a:a8:28:89:9e:c5:a3:13:84:43:53:e9: 0f:0f:5b:1a:e0:d7:bf:1b:84:71:9b:c8:1d:6c:34:cc:3d:07: 2d:cd:36:a9:7b:4b:fb:17:3a:1f:6b:d2:8c:e9:33:86:55:d1: 41:8c:27:88:9b:16:b4:d0:e3:7c:93:d7:81:7d:14:b4:07:c0: 8c:28:78:9b:18:9d:0e:1d:8a:03:ae:7e:86:42:89:2d:49:9f: f5:85:d3:ef:50:c5:f2:79:26:36:4b:96:e1:f3:d9:04:e8:ef: 10:a7:36:9c:68:8f:d9:7a:9d:8d:73:ba:33:a8:3e:79:f0:87: 06:cc:ae:aa:bc:69:4e:71:4a:d0:f9:b6:33:70:9c:c8:3a:56: de:e1:30:9c:9b:14:30:68:28:0c:9c:c6:cf:fa:5f:07:13:51: 70:07:65:13:b9:91:31:d3:b8:e8:e7:b5:65:d3:e4:7a:ce:30: e9:e6:d3:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrP7BSIUMpnCHgawwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NTFjM2E2NTctYjNkMS00OTgwLWExM2QtYzA2ZjgxMjZkOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1pooNktrpT0Qr2q8pzlEgjfuxL6M+9IZ6GA DWceOYHEipzoAJI8MqYyJgx/+D4rDC2nuXq/7HYyhh+PaUiLGdQqs/gfaZEve8wh 0xbAaP0TxJ/tDCHXY+lR4aZ/g6mmffKMSBnJtxq+i5YVaLzVbg/4tqseH55Fa0mX 8m6kgIjJLLj62kLgPaqX//Zu+I8WxfqSmwq0qElCNdcjLgdawEppBc2LNO2UZXzW Jx5peGislqG7U5zZ2KgcKPV3lPw8rhOSdf8xYcye3H6xXJnhK4O65vedyLZ/NUFO 0XSj9zaJL2URXIGRyc3OJIEGyTo9+oRM5X8H96q1zyxwQkcYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYhNuLenagxOfCC1sr1kr4q8WkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGJiODFkMmEtMWYyOC0z OTc1LTlmODEtZDRkNjAxYmU0ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5frMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvBueEdMjteUAZlzSrj4rzma9DGDe8odRv/EqAwR0OG6xnyW6d+K9JT evypgE0hJwHiAX4e0WF/6V88UK3uT22SfEQ4Bkx5Z3Ki/Zd/MlqoKImexaMThENT 6Q8PWxrg178bhHGbyB1sNMw9By3NNql7S/sXOh9r0ozpM4ZV0UGMJ4ibFrTQ43yT 14F9FLQHwIwoeJsYnQ4digOufoZCiS1Jn/WF0+9QxfJ5JjZLluHz2QTo7xCnNpxo j9l6nY1zujOoPnnwhwbMrqq8aU5xStD5tjNwnMg6Vt7hMJybFDBoKAycxs/6XwcT UXAHZRO5kTHTuOjntWXT5HrOMOnm0yc= -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:10 2026 by rpki-client