$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa File: c4213251-3b00-393f-bb99-fb92be27e7c1.roa (raw, json) Hash identifier: o6mW6alCSu0HQowQackw1h3ZwEMnwcCeh5ntp5kbcX8= Subject key identifier: 35:FA:04:27:94:D1:1A:5F:90:37:7B:C1:5C:A3:27:BE:2D:D5:A2:47 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B5571E1EE8EC3D98F7EB4C100 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 134365 IP address blocks: 107.151.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e1:ee:8e:c3:d9:8f:7e:b4:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=e71dd987-d59c-4f6f-9f7e-b78055501e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:31:af:71:41:87:78:42:90:51:0f:5a:47: 94:94:5c:a3:c3:6a:33:6a:02:83:ed:2d:f1:7d:88: 76:e3:5a:57:2b:bf:53:ba:42:ac:c1:bc:81:ea:93: ea:55:d6:01:5f:db:c6:b9:0a:18:17:d1:d3:87:bc: 49:eb:bd:45:9a:9b:67:6f:69:cd:a9:be:70:b1:b1: 6a:cc:52:30:6d:b6:b0:a5:6f:83:ea:c7:dd:29:50: bd:67:d8:36:86:0a:6f:60:97:ca:c2:c8:f7:e2:63: 69:2a:fe:ac:10:53:6a:1a:e6:8a:a1:f4:d8:32:af: d6:ac:df:a3:3e:33:d3:bd:66:96:9b:ba:84:78:1d: 00:29:cd:b2:3d:c0:f6:48:10:13:c5:6d:5d:c4:47: be:a8:07:c2:a2:b8:92:ed:df:e8:76:e3:3b:d8:09: 1e:10:f4:fd:d8:10:e6:4c:4c:d4:e8:93:1b:64:1f: 5d:2f:fe:7b:61:75:97:6b:ca:8e:be:56:51:79:4c: f3:86:7b:ea:ea:d2:2f:95:09:47:74:6e:25:86:ed: f7:be:c0:d2:7d:47:1a:d7:74:09:ca:4a:3c:1d:dd: 1e:3d:9a:cd:4d:e4:97:24:28:b3:7e:26:d5:e7:0b: ea:66:d2:7c:8e:2c:28:d0:00:a8:29:f2:29:d1:70: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FA:04:27:94:D1:1A:5F:90:37:7B:C1:5C:A3:27:BE:2D:D5:A2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:12:09:a0:a4:9c:75:b7:39:9f:9e:30:06:84:1f:7d:ea:f9: 2b:77:02:90:6f:ae:58:57:b5:ae:0b:30:89:65:48:3e:64:ee: 8a:03:ae:8b:94:85:46:4d:3d:4d:ff:44:96:f5:37:d4:f5:4e: c3:14:b4:c5:8f:49:bd:df:93:64:21:61:c1:f6:98:04:b4:d7: cf:42:25:7f:4b:0b:fb:3d:55:78:7d:d7:44:9e:31:62:1d:82: 15:fa:22:3c:60:55:74:53:20:47:e4:29:76:e1:3d:9a:8f:81: fa:00:2b:50:c9:8f:52:7c:80:d4:77:be:02:8c:fe:86:91:ec: fb:73:69:21:d6:35:9f:95:63:43:48:8d:14:5c:94:91:4f:97: cd:98:db:4d:f3:d4:76:38:0e:fc:26:ba:ae:bb:e1:54:5b:39: 09:9c:de:36:e5:e3:c2:b9:48:90:cf:dd:4d:e3:7a:26:3e:75: 5f:bb:00:32:76:56:fb:59:29:0d:49:ff:e3:1f:73:02:80:f3: 48:e7:a1:3f:53:de:d2:ad:63:6d:7c:38:b0:ad:d0:cc:92:0e: af:9d:2f:f5:b0:45:09:1d:09:22:79:09:9d:0e:c0:e4:ae:c8: 94:9a:e6:28:60:58:c1:90:ab:58:70:b2:4f:81:c7:72:15:b7: c0:26:85:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceHujsPZj360wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTcxZGQ5ODctZDU5Yy00ZjZmLTlmN2UtYjc4MDU1NTAxZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fkxr3FBh3hCkFEPWkeUlFyjw2ozagKD7S3x fYh241pXK79TukKswbyB6pPqVdYBX9vGuQoYF9HTh7xJ671Fmptnb2nNqb5wsbFq zFIwbbawpW+D6sfdKVC9Z9g2hgpvYJfKwsj34mNpKv6sEFNqGuaKofTYMq/WrN+j PjPTvWaWm7qEeB0AKc2yPcD2SBATxW1dxEe+qAfCoriS7d/oduM72AkeEPT92BDm TEzU6JMbZB9dL/57YXWXa8qOvlZReUzzhnvq6tIvlQlHdG4lhu33vsDSfUca13QJ yko8Hd0ePZrNTeSXJCizfibV5wvqZtJ8jiwo0ACoKfIp0XCHswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX6BCeU0RpfkDd7wVyjJ74t1aJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYzQyMTMyNTEtM2IwMC0z OTNmLWJiOTktZmI5MmJlMjdlN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUSCaCknHW3OZ+eMAaEH33q+St3ApBvrlhXta4LMIllSD5k7ooDrouU hUZNPU3/RJb1N9T1TsMUtMWPSb3fk2QhYcH2mAS0189CJX9LC/s9VXh910SeMWId ghX6IjxgVXRTIEfkKXbhPZqPgfoAK1DJj1J8gNR3vgKM/oaR7PtzaSHWNZ+VY0NI jRRclJFPl82Y203z1HY4Dvwmuq674VRbOQmc3jbl48K5SJDP3U3jeiY+dV+7ADJ2 VvtZKQ1J/+MfcwKA80jnoT9T3tKtY218OLCt0MySDq+dL/WwRQkdCSJ5CZ0OwOSu yJSa5ihgWMGQq1hwsk+Bx3IVt8AmhY4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:15 2025 by rpki-client