$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa File: 2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa (raw, json) Hash identifier: qjt+RbCOesOJoZlxdLudgS04GtwFRVihPX/dJ4XjNmM= Subject key identifier: E8:03:EA:05:E6:F4:46:F0:ED:BB:E1:F4:05:F9:BF:56:30:7D:7A:8B Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D0EA7C1F84A83CFD8354EEFB0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 139880 IP address blocks: 107.151.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:c1:f8:4a:83:cf:d8:35:4e:ef:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=e12be0aa-9711-4a8e-a3b2-c44a33cdac81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:05:7e:e9:0f:66:74:7f:5d:34:ce:8f:48:b0: 03:22:df:cf:b0:75:62:e0:c4:c0:11:e5:5b:e8:36: 21:a5:70:46:25:45:79:77:2f:55:a0:cf:5b:32:73: c4:a7:51:36:7c:ed:e9:e1:dd:d8:de:67:4c:92:7c: 69:0b:08:82:a0:ff:ec:04:6a:2e:8d:b0:1a:fc:74: db:b5:f1:57:5a:eb:e5:89:87:7f:cd:82:96:c8:92: 82:97:3a:a5:9b:c3:2d:90:1a:cc:b1:f7:a7:90:94: c5:b4:6e:f7:c3:55:6f:94:2a:8b:32:6b:75:2c:cc: 4c:93:a9:ad:59:c3:db:e3:00:cd:9c:99:26:38:f9: 87:52:a9:5c:89:d7:b3:8b:e7:db:43:f2:8c:0e:d8: a1:93:28:23:30:77:fc:19:b5:d8:59:04:4b:6c:aa: 7a:48:28:b3:b5:10:9c:63:0c:0e:40:bd:18:1f:0c: 32:4f:31:44:e2:e4:8f:b6:57:1d:2a:3c:1a:1a:ed: ed:08:8c:8f:23:bf:8b:36:07:ce:8a:8a:4f:21:ef: 18:a9:c7:b3:17:6d:16:f0:b5:61:39:5c:cd:fb:74: c9:75:71:e5:6f:60:6d:bb:23:47:16:44:8e:08:99: 28:fb:20:3f:26:83:e1:6a:4c:15:d0:73:21:50:4b: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:03:EA:05:E6:F4:46:F0:ED:BB:E1:F4:05:F9:BF:56:30:7D:7A:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:02:56:d8:ee:e3:ae:96:fb:7e:26:f9:95:df:1a:e5:ce:19: bc:fb:10:24:e6:63:84:2d:21:c2:e8:81:d9:0a:b4:0d:03:1e: 93:2d:a5:e0:17:2e:b5:92:23:5a:02:b3:90:18:87:21:2f:70: 26:80:bd:fe:9d:fe:04:2d:31:e7:fa:85:a0:67:9d:24:31:bf: 1f:e6:16:4f:04:52:59:61:28:5c:a9:c1:89:60:9c:6d:8c:aa: 48:ee:24:f1:ed:82:71:b6:b4:e3:6a:ac:d4:b7:39:21:a9:ab: 70:31:c3:c9:3a:aa:39:30:d7:3a:07:9a:63:33:7d:2e:f4:5d: 29:f2:93:16:a0:31:0c:fa:6b:ac:6e:61:e4:0c:79:59:bb:5d: 49:eb:79:5c:ee:ae:dc:c3:07:82:70:64:15:83:31:ba:97:aa: ee:8a:f5:36:be:5a:0e:d2:8a:58:ef:53:70:41:13:d8:a2:21: e4:b4:39:0d:7b:e9:80:95:53:2c:30:d2:2a:4b:bf:e3:01:32: cf:ec:93:60:c4:c2:24:fe:b5:7e:31:2f:0e:89:c5:44:55:dc: c7:84:39:de:88:42:a4:ef:65:07:b4:76:b0:61:9a:93:7d:13: 78:5d:98:55:ef:0e:97:82:68:bf:7d:e9:5c:e7:30:a5:72:80: 85:13:08:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op8H4SoPP2DVO77AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZTEyYmUwYWEtOTcxMS00YThlLWEzYjItYzQ0YTMzY2RhYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAV+6Q9mdH9dNM6PSLADIt/PsHVi4MTAEeVb 6DYhpXBGJUV5dy9VoM9bMnPEp1E2fO3p4d3Y3mdMknxpCwiCoP/sBGoujbAa/HTb tfFXWuvliYd/zYKWyJKClzqlm8MtkBrMsfenkJTFtG73w1VvlCqLMmt1LMxMk6mt WcPb4wDNnJkmOPmHUqlcidezi+fbQ/KMDtihkygjMHf8GbXYWQRLbKp6SCiztRCc YwwOQL0YHwwyTzFE4uSPtlcdKjwaGu3tCIyPI7+LNgfOiopPIe8YqcezF20W8LVh OVzN+3TJdXHlb2BtuyNHFkSOCJko+yA/JoPhakwV0HMhUEsHCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgD6gXm9Ebw7bvh9AX5v1YwfXqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMmIzOWYyMmQtMTZhMS0z ZGFkLTk0NGEtYzc5Y2ExZWE3NzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4CVtju466W+34m+ZXfGuXOGbz7ECTmY4QtIcLogdkKtA0DHpMtpeAX LrWSI1oCs5AYhyEvcCaAvf6d/gQtMef6haBnnSQxvx/mFk8EUllhKFypwYlgnG2M qkjuJPHtgnG2tONqrNS3OSGpq3Axw8k6qjkw1zoHmmMzfS70XSnykxagMQz6a6xu YeQMeVm7XUnreVzurtzDB4JwZBWDMbqXqu6K9Ta+Wg7SiljvU3BBE9iiIeS0OQ17 6YCVUyww0ipLv+MBMs/sk2DEwiT+tX4xLw6JxURV3MeEOd6IQqTvZQe0drBhmpN9 E3hdmFXvDpeCaL996VznMKVygIUTCC0= -----END CERTIFICATE-----Generated at Sat Mar 7 07:43:02 2026 by rpki-client