$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa File: 57a86509-535e-3f39-9aa9-5dafe9726ec5.roa (raw, json) Hash identifier: b8J3SDUggZT6N/9J7j41j2WjB+cocFPYJ5eBHvfmkwc= Subject key identifier: FA:13:01:29:7C:93:58:35:BF:BC:34:8E:33:E4:85:24:66:48:BB:59 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B3556E2FC91A7C9D0E5A6FC90 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 62610 IP address blocks: 107.151.227.0/24 maxlen: 24 107.151.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e2:fc:91:a7:c9:d0:e5:a6:fc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=cd438ddb-9d91-4ffa-b0ff-9447ba3e3377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:41:a7:4b:76:69:3a:9b:41:5e:89:0a:3a: 5d:ff:41:16:6a:95:e0:f1:9a:9d:9c:c8:16:c4:b6: 06:7f:b2:64:07:b1:be:ab:8d:64:87:1c:d2:d6:34: 7b:37:21:6c:2b:6b:1d:84:67:c6:51:78:6a:68:c1: c3:32:d4:65:d1:e6:3a:4c:24:45:9c:3f:20:bc:95: b2:68:b4:5f:07:44:27:52:ef:a1:31:f7:e3:8d:f7: dc:e5:27:7d:f3:ba:24:57:d3:e1:9c:03:31:8d:92: 25:cb:ad:0b:f2:9b:3f:7f:17:10:54:72:50:af:49: 12:6f:fe:03:02:74:61:09:81:b0:55:be:de:26:4d: 25:7b:68:4c:79:96:ec:d7:70:c7:f7:78:d3:8a:4d: ff:67:55:24:67:86:1e:de:56:9c:70:53:99:6f:22: 3d:dd:17:78:e4:41:55:24:02:9f:9a:99:41:7e:6c: eb:78:10:a1:0d:99:43:36:53:4d:d4:b0:34:48:78: c6:b4:ee:64:25:05:07:3a:cf:c4:86:4d:62:1d:7c: c7:27:9b:18:26:ab:80:da:44:ea:64:97:1d:c5:dd: fc:eb:44:9b:3c:4e:5b:49:ad:40:03:cf:ee:25:15: 3e:12:13:ce:f4:4c:2e:70:45:cd:8c:18:3b:1d:c1: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:13:01:29:7C:93:58:35:BF:BC:34:8E:33:E4:85:24:66:48:BB:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.227.0-107.151.228.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c2:b4:ef:b2:3e:57:94:4b:d9:06:9c:17:9a:b4:a9:8c:2e: 48:66:45:4e:b9:91:3e:0a:ad:da:02:b4:13:36:6a:29:a7:4d: 76:4b:20:1b:41:f0:dc:d7:95:db:5d:aa:c1:48:fa:b9:2a:d7: 72:aa:ff:95:fa:fe:50:7f:ac:fd:9e:00:e0:d2:9a:0f:33:1b: 73:f3:d1:e5:6d:6d:8e:3c:e6:51:7a:79:7e:5a:d9:cb:06:7b: 9a:1d:07:0d:c7:c5:75:1d:56:1d:54:07:63:39:84:39:fe:79: 04:4f:63:fb:35:80:26:f0:4d:f1:fb:25:f6:33:2d:56:75:b4: ba:13:4d:fd:e4:f2:ca:9b:e2:1b:98:40:d3:b5:59:47:50:ca: 15:4a:25:8d:e9:be:af:95:5a:e0:23:cf:0e:64:03:ad:d1:78: 1c:4f:b0:29:a5:0a:68:5f:98:e1:7c:40:88:1f:7f:be:ad:fd: 69:c3:f5:4a:0a:07:d9:bc:01:34:85:11:c6:c8:d0:ba:49:81: 7b:fb:a3:13:99:b1:10:20:38:06:ef:c1:06:93:e8:ec:fd:33: c6:6a:ca:7a:b8:5c:47:6b:a4:e2:4a:49:39:f2:19:8a:a4:99: 39:41:29:6e:2e:64:5f:65:8a:1b:a3:77:98:6e:c9:9e:6c:9e: dd:79:65:5d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEs1VuL8kafJ0OWm/JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q0MzhkZGItOWQ5MS00ZmZhLWIwZmYtOTQ0N2JhM2UzMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArklBp0t2aTqbQV6JCjpd/0EWapXg8ZqdnMgW xLYGf7JkB7G+q41khxzS1jR7NyFsK2sdhGfGUXhqaMHDMtRl0eY6TCRFnD8gvJWy aLRfB0QnUu+hMffjjffc5Sd987okV9PhnAMxjZIly60L8ps/fxcQVHJQr0kSb/4D AnRhCYGwVb7eJk0le2hMeZbs13DH93jTik3/Z1UkZ4Ye3laccFOZbyI93Rd45EFV JAKfmplBfmzreBChDZlDNlNN1LA0SHjGtO5kJQUHOs/Ehk1iHXzHJ5sYJquA2kTq ZJcdxd3860SbPE5bSa1AA8/uJRU+EhPO9EwucEXNjBg7HcElNQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPoTASl8k1g1v7w0jjPkhSRmSLtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNTdhODY1MDktNTM1ZS0z ZjM5LTlhYTktNWRhZmU5NzI2ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABrl+MD BABrl+QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANsK077I+V5RL2QacF5q0qYwuSGZFTrmRPgqt2gK0EzZq KadNdksgG0Hw3NeV212qwUj6uSrXcqr/lfr+UH+s/Z4A4NKaDzMbc/PR5W1tjjzm UXp5flrZywZ7mh0HDcfFdR1WHVQHYzmEOf55BE9j+zWAJvBN8fsl9jMtVnW0uhNN /eTyypviG5hA07VZR1DKFUoljem+r5Va4CPPDmQDrdF4HE+wKaUKaF+Y4XxAiB9/ vq39acP1SgoH2bwBNIURxsjQukmBe/ujE5mxECA4Bu/BBpPo7P0zxmrKerhcR2uk 4kpJOfIZiqSZOUEpbi5kX2WKG6N3mG7Jnmye3XllXQ== -----END CERTIFICATE-----Generated at Mon Oct 20 03:56:53 2025 by rpki-client