$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa File: 85f98e65-2751-3810-a444-50aba1a6735e.roa (raw, json) Hash identifier: BIWPDizEd/T1rNYvrqgoYsrVnEPKQJB3u30K0HZ6xUc= Subject key identifier: D1:75:F2:CC:6D:1D:61:C5:F9:4C:F1:D4:40:DB:3A:08:E7:30:D5:99 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B3DB70271A69F535940F9A140 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 62468 IP address blocks: 107.151.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:02:71:a6:9f:53:59:40:f9:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4c014180-8be2-4787-ab52-3be66cc7e1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e8:ac:73:db:e4:c5:c8:30:e2:d7:d3:e1:6e: 8a:2d:e4:86:a1:43:c4:16:36:87:99:1a:1e:f2:13: a7:dd:8e:ea:47:d2:0b:31:04:4c:e3:10:23:6c:c4: 86:e0:d8:43:c1:8b:25:f8:02:23:81:b5:04:4c:eb: 9d:ec:bc:4e:31:fe:d9:21:d0:d4:e7:61:05:09:e1: b9:fc:54:26:01:0d:14:5a:f0:94:d3:73:4f:97:c8: 96:d7:77:34:3b:76:2d:f1:f2:e3:fe:19:4c:e9:f5: 96:0b:4b:1f:2b:e7:d5:4a:76:51:75:77:46:12:8b: 75:61:d1:3f:98:37:73:ed:45:6c:0c:c1:a0:00:95: 7a:ba:04:2b:cf:5f:d9:85:01:7d:a7:06:75:86:90: 90:d4:35:cc:01:e4:19:02:b3:ba:41:65:7c:29:e1: 38:68:35:d9:f2:92:8c:fc:ea:eb:ec:53:c0:b5:26: 7f:c1:98:77:99:94:0f:eb:36:10:b8:61:30:9d:3b: e5:e9:0a:65:89:e4:87:22:ed:e1:ac:36:a1:0e:9e: 01:91:11:c2:62:4e:0e:82:33:1f:a8:0b:4e:7b:30: 24:8d:e8:00:7a:a2:cd:0d:25:c0:1d:16:a3:19:91: 3f:8a:31:88:9b:e2:93:c9:7c:d8:99:e9:4b:e8:9a: 0a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:F2:CC:6D:1D:61:C5:F9:4C:F1:D4:40:DB:3A:08:E7:30:D5:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fa:2b:be:a0:09:ee:56:b3:63:ec:96:1e:71:68:55:4e:17: d7:ab:3e:7a:88:32:f9:af:fc:ae:d7:f4:4e:dc:35:11:07:89: 36:cf:46:56:79:71:de:5a:91:f4:41:b4:00:0d:e0:09:dc:75: 60:6c:e3:b9:a1:75:05:16:8d:28:1b:74:67:e3:c0:31:a6:4a: 41:ec:46:40:20:72:82:db:9b:3a:c5:5b:aa:2f:76:83:ce:d9: 4d:9f:af:6e:04:03:d6:a9:8e:66:ed:2b:b6:83:74:d5:13:d3: a3:14:df:2a:d5:ed:76:f8:f3:e9:1a:2d:6f:b6:ee:1c:44:c1: a9:e4:72:20:18:a2:5c:2f:57:0b:4e:65:e5:60:e9:be:f3:97: 27:38:bc:6d:ff:cd:9f:1f:76:91:94:7a:c0:74:9a:6a:4c:1d: 61:02:3c:f7:ed:fe:bb:73:2e:12:52:55:af:ad:22:6d:a7:73: e6:da:bc:c5:b8:92:a2:13:95:3e:f5:64:e2:dc:24:f9:c8:7f: c2:18:c0:4a:9f:ff:29:15:49:0f:d5:72:16:d7:40:96:74:85: 6d:01:cc:f4:44:a4:83:33:e4:54:fe:39:b7:de:78:21:79:bf: 1a:10:d2:67:37:cd:fa:e0:a3:c6:91:17:51:51:be:4f:ec:d8: bc:a5:02:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twJxpp9TWUD5oUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NGMwMTQxODAtOGJlMi00Nzg3LWFiNTItM2JlNjZjYzdlMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneisc9vkxcgw4tfT4W6KLeSGoUPEFjaHmRoe 8hOn3Y7qR9ILMQRM4xAjbMSG4NhDwYsl+AIjgbUETOud7LxOMf7ZIdDU52EFCeG5 /FQmAQ0UWvCU03NPl8iW13c0O3Yt8fLj/hlM6fWWC0sfK+fVSnZRdXdGEot1YdE/ mDdz7UVsDMGgAJV6ugQrz1/ZhQF9pwZ1hpCQ1DXMAeQZArO6QWV8KeE4aDXZ8pKM /Orr7FPAtSZ/wZh3mZQP6zYQuGEwnTvl6QplieSHIu3hrDahDp4BkRHCYk4OgjMf qAtOezAkjegAeqLNDSXAHRajGZE/ijGIm+KTyXzYmelL6JoKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNF18sxtHWHF+Uzx1EDbOgjnMNWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODVmOThlNjUtMjc1MS0z ODEwLWE0NDQtNTBhYmExYTY3MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz6K76gCe5Ws2Pslh5xaFVOF9erPnqIMvmv/K7X9E7cNREHiTbPRlZ5 cd5akfRBtAAN4AncdWBs47mhdQUWjSgbdGfjwDGmSkHsRkAgcoLbmzrFW6ovdoPO 2U2fr24EA9apjmbtK7aDdNUT06MU3yrV7Xb48+kaLW+27hxEwankciAYolwvVwtO ZeVg6b7zlyc4vG3/zZ8fdpGUesB0mmpMHWECPPft/rtzLhJSVa+tIm2nc+bavMW4 kqITlT71ZOLcJPnIf8IYwEqf/ykVSQ/VchbXQJZ0hW0BzPREpIMz5FT+ObfeeCF5 vxoQ0mc3zfrgo8aRF1FRvk/s2LylAiI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:00:32 2025 by rpki-client