$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa File: bbbef458-a29e-3dfc-a20b-8890d6d24246.roa (raw, json) Hash identifier: r2TbyGvoMDq2qyoq3Q2I5G10Y6Fd/K3IFffOHnl3b+Y= Subject key identifier: A5:7D:85:77:8E:CF:51:00:C1:C5:CF:09:00:30:B2:7F:A5:AE:68:61 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B715CB6B2E1676D2B8E4C0080 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 137443 IP address blocks: 107.151.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b6:b2:e1:67:6d:2b:8e:4c:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=79b6a276-18f2-4a8e-b3a6-e3113d5a397e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:92:bd:91:77:58:1b:9e:65:1a:d0:8f:61: 2e:d0:ce:21:8e:20:b8:11:03:6c:cf:ba:af:07:37: c0:0c:03:53:96:3c:27:86:a9:22:a1:3f:f4:ac:da: 14:30:f1:60:e3:ed:fb:6f:99:21:c9:17:60:80:9a: 5e:8b:ba:99:f0:21:ea:d0:ef:e0:91:77:11:c0:86: c3:bf:c9:60:a1:20:be:32:c7:99:ae:26:aa:11:f8: c2:85:88:e8:a8:6f:0f:ca:38:48:86:8a:32:33:75: 68:b5:08:b9:52:d9:85:18:a3:ba:cd:7b:dd:69:0c: 97:1a:a3:52:7b:ac:11:97:19:b7:fe:32:75:6c:d3: 0d:48:ac:d9:20:59:bd:64:98:3d:4a:88:23:cf:5b: 23:19:c4:97:a2:07:f7:f2:a5:47:7b:ee:5c:f6:c1: 82:b2:2c:de:fc:f9:86:8f:38:cc:39:3b:f6:5d:00: 70:7c:38:e2:f0:38:4e:06:3b:e4:92:ab:69:8a:ac: 22:05:31:97:83:38:12:c0:5d:c3:b6:5a:07:6c:98: 7d:f6:40:8a:9c:75:3d:1e:30:83:4b:d5:56:a5:6a: a3:23:61:e0:16:12:ff:a5:9d:1a:22:c9:97:ca:a2: 7f:04:56:f4:99:67:3d:01:fb:c5:47:df:02:7f:6c: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7D:85:77:8E:CF:51:00:C1:C5:CF:09:00:30:B2:7F:A5:AE:68:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4b:bc:db:93:da:97:d2:53:0d:3c:2c:db:e3:bf:3d:ae:64: c3:57:36:5c:af:91:2a:34:49:7b:a5:d3:10:a7:ed:51:ad:5c: cf:bf:bb:7d:38:cd:8c:ee:28:33:49:77:bd:b7:b3:6c:ca:68: 8c:02:cb:05:23:53:a5:30:52:2e:0a:a7:4b:64:e3:83:a9:ad: 68:95:ff:ae:70:65:08:65:88:79:c5:f9:66:db:92:ac:d2:e9: a6:df:a7:27:2e:f5:dc:63:ce:18:57:71:8f:d5:2a:96:c3:d0: 01:13:06:ea:19:67:17:18:94:cd:3e:c5:0f:52:de:d1:e5:fe: 3c:1d:bd:42:02:5d:33:54:7c:4c:d2:a0:e6:b4:52:c3:c3:48: 44:3e:e0:df:88:f2:5b:ec:d9:09:d1:e7:1f:ef:8c:1d:2b:ae: e5:57:57:08:7a:7a:5b:39:dd:dc:ad:2f:dc:2f:1b:dc:59:19: 13:1f:78:5c:d6:c6:a6:ab:26:3c:64:b7:21:8e:ba:f8:be:f2: 40:64:96:9a:85:92:a9:82:20:75:b4:f7:03:ca:c8:1e:64:b1: be:5d:b8:01:7e:74:ce:7d:8a:b0:b7:66:72:1a:66:b7:1b:f2: 7c:ad:84:86:f3:87:99:e5:98:dc:35:c6:c8:3f:81:13:d6:67: 49:4b:69:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLay4WdtK45MAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzliNmEyNzYtMThmMi00YThlLWIzYTYtZTMxMTNkNWEzOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCSSvZF3WBueZRrQj2Eu0M4hjiC4EQNsz7qv BzfADANTljwnhqkioT/0rNoUMPFg4+37b5khyRdggJpei7qZ8CHq0O/gkXcRwIbD v8lgoSC+MseZriaqEfjChYjoqG8PyjhIhooyM3VotQi5UtmFGKO6zXvdaQyXGqNS e6wRlxm3/jJ1bNMNSKzZIFm9ZJg9Sogjz1sjGcSXogf38qVHe+5c9sGCsize/PmG jzjMOTv2XQBwfDji8DhOBjvkkqtpiqwiBTGXgzgSwF3DtloHbJh99kCKnHU9HjCD S9VWpWqjI2HgFhL/pZ0aIsmXyqJ/BFb0mWc9AfvFR98Cf2zEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV9hXeOz1EAwcXPCQAwsn+lrmhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYmJiZWY0NTgtYTI5ZS0z ZGZjLWEyMGItODg5MGQ2ZDI0MjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5f7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFLvNuT2pfSUw08LNvjvz2uZMNXNlyvkSo0SXul0xCn7VGtXM+/u304 zYzuKDNJd723s2zKaIwCywUjU6UwUi4Kp0tk44OprWiV/65wZQhliHnF+WbbkqzS 6abfpycu9dxjzhhXcY/VKpbD0AETBuoZZxcYlM0+xQ9S3tHl/jwdvUICXTNUfEzS oOa0UsPDSEQ+4N+I8lvs2QnR5x/vjB0rruVXVwh6els53dytL9wvG9xZGRMfeFzW xqarJjxktyGOuvi+8kBklpqFkqmCIHW09wPKyB5ksb5duAF+dM59irC3ZnIaZrcb 8nythIbzh5nlmNw1xsg/gRPWZ0lLaYk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:33:48 2025 by rpki-client