$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa File: 685ceee8-b900-37c5-8e47-74eadff0d2fe.roa (raw, json) Hash identifier: S5qtpqszlXXUFtUY+coBeTHXmiW1Su6SKJmsb4yfglM= Subject key identifier: 02:23:8E:10:E1:A1:84:EC:23:34:F1:40:1E:03:43:43:1F:E4:33:31 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D1B1A0D50B8703135A5CA9C30 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 62468 IP address blocks: 107.151.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:0d:50:b8:70:31:35:a5:ca:9c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=d6f9b20d-8107-418b-9cf0-1193b4453104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:00:c2:82:ba:a1:f6:71:08:e3:a6:48:45: cc:ab:a3:08:a2:8b:f5:35:65:47:c8:a9:5e:0c:26: c1:c8:16:6f:80:02:58:cb:bf:8c:c5:8b:43:ef:74: a0:d5:d3:56:fc:34:fc:b0:e1:1f:cb:a0:94:70:b3: 4c:28:7c:6b:fa:c3:b6:6b:ca:49:2c:eb:3b:fc:a9: c8:aa:0f:35:c2:06:71:fc:4a:78:2b:1b:3b:d9:5c: 24:7b:35:6d:69:58:eb:b7:e0:1d:26:22:df:3f:95: 36:b7:d7:0a:d6:0d:79:bd:ca:4e:d8:12:dc:a2:c2: 3d:7a:a4:52:b0:a3:7b:8c:d6:f6:47:47:e6:22:fc: 3e:f5:ef:09:f9:23:e1:33:a0:2f:9c:b5:a4:9b:01: 69:af:3a:56:85:d5:ba:47:0e:9b:8e:71:32:74:f4: e2:ba:69:c7:93:f6:2c:1a:83:66:10:1d:81:ba:04: 74:d2:8b:a9:db:1f:62:42:fe:59:bc:b5:e3:f3:bd: 84:59:20:0a:ca:48:45:17:9b:60:42:e1:b9:04:0b: 53:de:fb:bc:72:a9:6e:51:c6:8d:5c:57:a0:06:d9: a9:a6:05:8d:90:21:4c:e7:75:55:15:f8:f3:30:5c: fd:c0:21:b0:93:fd:be:b4:06:8c:f3:98:38:b7:80: 1f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:8E:10:E1:A1:84:EC:23:34:F1:40:1E:03:43:43:1F:E4:33:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:88:33:10:4c:8a:62:8a:a5:da:c0:02:02:d0:09:7f:3e:af: 30:03:84:9e:99:11:d4:21:4f:4a:d2:eb:8e:f2:e2:75:5a:a6: 77:d7:d6:88:7f:f5:14:d4:c4:b9:24:fc:0c:40:1f:57:eb:40: 80:a7:bf:b7:6c:c2:70:56:e6:c6:58:24:da:77:a7:2b:23:54: 9b:62:d5:b0:9c:c7:c3:a1:c2:96:d3:ae:e4:93:87:3c:03:dc: 06:a4:9d:e4:23:a8:5b:ce:ce:33:c1:20:af:82:48:ba:59:d0: b6:2b:81:b3:29:9d:17:80:79:00:c1:32:81:18:54:c4:05:d2: 31:59:6d:a0:26:82:cb:ef:8e:c4:48:fa:1f:a7:10:b0:e8:ba: 6e:d3:28:10:7c:93:c9:cf:18:7b:1b:a9:b2:c3:ac:a9:a0:96: 8c:cb:16:0d:56:bd:4e:9c:31:7e:ca:42:02:44:84:d9:35:0a: e7:63:ec:8e:c9:77:0a:16:68:a0:aa:c0:2a:ec:21:00:fe:a3: c4:8d:1a:32:fc:ff:a2:48:df:17:e7:13:f1:93:9d:cf:8a:84: 14:67:ac:ef:4e:ac:f4:e6:20:47:a6:92:46:60:63:90:a2:35: 2b:ba:63:93:af:0a:e0:2a:3d:8b:f7:67:d6:f6:fa:31:84:d4: e9:d0:4d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGg1QuHAxNaXKnDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZDZmOWIyMGQtODEwNy00MThiLTljZjAtMTE5M2I0NDUzMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMkAwoK6ofZxCOOmSEXMq6MIoov1NWVHyKle DCbByBZvgAJYy7+MxYtD73Sg1dNW/DT8sOEfy6CUcLNMKHxr+sO2a8pJLOs7/KnI qg81wgZx/Ep4Kxs72VwkezVtaVjrt+AdJiLfP5U2t9cK1g15vcpO2BLcosI9eqRS sKN7jNb2R0fmIvw+9e8J+SPhM6AvnLWkmwFprzpWhdW6Rw6bjnEydPTiumnHk/Ys GoNmEB2BugR00oup2x9iQv5ZvLXj872EWSAKykhFF5tgQuG5BAtT3vu8cqluUcaN XFegBtmppgWNkCFM53VVFfjzMFz9wCGwk/2+tAaM85g4t4Af/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIjjhDhoYTsIzTxQB4DQ0Mf5DMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNjg1Y2VlZTgtYjkwMC0z N2M1LThlNDctNzRlYWRmZjBkMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5fqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKIMxBMimKKpdrAAgLQCX8+rzADhJ6ZEdQhT0rS647y4nVapnfX1oh/ 9RTUxLkk/AxAH1frQICnv7dswnBW5sZYJNp3pysjVJti1bCcx8OhwpbTruSThzwD 3AakneQjqFvOzjPBIK+CSLpZ0LYrgbMpnReAeQDBMoEYVMQF0jFZbaAmgsvvjsRI +h+nELDoum7TKBB8k8nPGHsbqbLDrKmglozLFg1WvU6cMX7KQgJEhNk1Cudj7I7J dwoWaKCqwCrsIQD+o8SNGjL8/6JI3xfnE/GTnc+KhBRnrO9OrPTmIEemkkZgY5Ci NSu6Y5OvCuAqPYv3Z9b2+jGE1OnQTVw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:55 2026 by rpki-client