$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa File: 57a86509-535e-3f39-9aa9-5dafe9726ec5.roa (raw, json) Hash identifier: kxqsYykMjp9rX9jNkMTLu7LPqZe/SXSVGcazKj35rZI= Subject key identifier: 00:BB:14:45:F9:6E:8A:78:6D:8B:44:D5:65:F6:6E:52:6A:D0:DC:FC Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584A549B190DB649EF27553D6A30 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 62610 IP address blocks: 107.151.227.0/24 maxlen: 24 107.151.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:19:0d:b6:49:ef:27:55:3d:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=6770cd6d-991d-48ea-b9a0-769279c40d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:15:dc:e9:8c:7e:44:d8:6b:32:94:08:c9: 88:2d:6e:78:3e:98:02:73:c0:50:bb:8d:3d:f9:9d: 86:7e:04:b4:96:f7:8b:19:f4:ae:f2:70:3d:38:2d: c3:60:d7:3c:94:dc:65:ba:89:8a:dc:d8:03:31:0c: 9f:4c:5c:ca:30:ae:00:b9:9d:aa:81:07:b0:ef:c1: 3a:ec:bd:33:17:96:82:d8:29:3f:b1:a2:b7:9e:16: c7:88:3b:62:e8:ae:ec:77:42:4e:3c:a3:64:fc:66: 8b:d3:2b:92:cb:bd:5b:ef:0a:d8:08:60:a0:dc:61: 10:37:c3:1f:be:c2:be:c9:de:6c:80:01:fc:45:79: e6:d6:60:0a:f5:df:53:fd:c3:f4:63:17:32:90:38: 2d:ec:b5:3d:f4:a3:4c:6c:b8:66:a2:6b:93:1b:d1: c8:d4:86:c3:66:c9:99:6f:80:38:22:38:45:16:61: 21:2a:09:18:0e:03:dd:bc:8d:1b:02:dd:5a:f9:17: 09:58:a9:65:20:8f:bd:38:47:3f:7d:5e:94:d3:41: 8c:72:f9:15:84:fd:fb:83:29:3e:16:19:7f:f6:5a: 1a:fd:0a:75:d2:30:e1:c3:12:45:01:df:08:f0:c5: bf:db:e9:f0:39:98:3a:77:d6:26:8e:fc:7d:ab:f6: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:14:45:F9:6E:8A:78:6D:8B:44:D5:65:F6:6E:52:6A:D0:DC:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/57a86509-535e-3f39-9aa9-5dafe9726ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.227.0-107.151.228.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5f:89:fa:ec:e6:2d:ec:07:64:77:2f:71:5a:21:44:e3:83: 97:d9:1d:b8:13:ec:d4:91:7e:fa:6b:77:86:1b:c9:7c:b0:fc: fd:ba:3e:65:51:6b:89:4c:57:dc:f6:d6:e8:4c:1b:da:7a:e7: 8d:4c:8c:f8:34:35:1f:57:b5:71:ad:a4:ad:a0:18:29:2c:19: 19:05:92:23:fc:a3:16:e3:73:b8:89:50:b7:ac:85:6e:6b:39: 4c:61:aa:dd:3b:3d:df:1a:ef:d5:2d:71:cb:14:9c:8d:d4:36: 38:62:17:c3:ad:a1:63:b2:5a:b4:2f:56:1d:02:b3:f2:8a:d5: c7:1b:5a:7f:59:98:db:5e:54:43:ec:a0:2c:7a:86:79:90:12: d0:ed:ad:7b:94:32:61:a7:54:f3:fe:fb:10:e4:14:c0:17:0d: 80:f9:89:43:99:44:a8:5f:8d:2a:75:0e:60:b3:70:1c:20:42: 72:76:27:dd:93:14:13:4b:eb:e3:e4:c8:45:31:2c:f9:d5:4a: 75:7c:c4:a1:74:be:11:b2:24:57:24:1a:d3:0c:8e:ca:66:1c: 03:97:c8:31:33:2b:5b:ff:21:9d:66:1d:34:a3:82:55:4d:b0: 57:a6:42:03:a7:1d:c5:de:61:bb:84:2d:9a:0d:7b:b3:ca:f1: 68:f1:d8:a5 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEpUmxkNtknvJ1U9ajAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk Njc3MGNkNmQtOTkxZC00OGVhLWI5YTAtNzY5Mjc5YzQwZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjosV3OmMfkTYazKUCMmILW54PpgCc8BQu409 +Z2GfgS0lveLGfSu8nA9OC3DYNc8lNxluomK3NgDMQyfTFzKMK4AuZ2qgQew78E6 7L0zF5aC2Ck/saK3nhbHiDti6K7sd0JOPKNk/GaL0yuSy71b7wrYCGCg3GEQN8Mf vsK+yd5sgAH8RXnm1mAK9d9T/cP0YxcykDgt7LU99KNMbLhmomuTG9HI1IbDZsmZ b4A4IjhFFmEhKgkYDgPdvI0bAt1a+RcJWKllII+9OEc/fV6U00GMcvkVhP37gyk+ Fhl/9loa/Qp10jDhwxJFAd8I8MW/2+nwOZg6d9Ymjvx9q/YHGwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFAC7FEX5bop4bYtE1WX2blJq0Nz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNTdhODY1MDktNTM1ZS0z ZjM5LTlhYTktNWRhZmU5NzI2ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABrl+MD BABrl+QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANl+J+uzmLewHZHcvcVohROODl9kduBPs1JF++mt3hhvJ fLD8/bo+ZVFriUxX3PbW6Ewb2nrnjUyM+DQ1H1e1ca2kraAYKSwZGQWSI/yjFuNz uIlQt6yFbms5TGGq3Ts93xrv1S1xyxScjdQ2OGIXw62hY7JatC9WHQKz8orVxxta f1mY215UQ+ygLHqGeZAS0O2te5QyYadU8/77EOQUwBcNgPmJQ5lEqF+NKnUOYLNw HCBCcnYn3ZMUE0vr4+TIRTEs+dVKdXzEoXS+EbIkVyQa0wyOymYcA5fIMTMrW/8h nWYdNKOCVU2wV6ZCA6cdxd5hu4Qtmg17s8rxaPHYpQ== -----END CERTIFICATE-----Generated at Tue Jul 1 18:33:38 2025 by rpki-client