$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa File: 4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa (raw, json) Hash identifier: EzltawvoH+9pUlSfuh2x+9paacmr9ht8HvS+G1mAqsE= Subject key identifier: EE:E4:F6:08:77:15:80:D6:8B:26:90:FF:7C:A3:57:A2:63:8A:4E:9F Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584DE84B42E48611132EA16BEC40 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 21859 IP address blocks: 107.151.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:42:e4:86:11:13:2e:a1:6b:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=709e22b3-02fd-4cc9-92ef-04a8828c984f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6e:4b:e1:07:8a:65:67:2b:2b:3d:4c:e9:41: 00:21:2c:48:16:db:25:bb:56:b1:53:b2:04:14:51: 20:e1:e8:8a:db:c1:58:f5:fe:b7:3b:9e:a1:7b:1a: 69:b7:29:53:80:06:9a:c6:e6:4c:cd:86:4d:91:46: b9:f2:cc:a8:ed:eb:1b:cf:78:e0:ea:f2:cd:cf:2a: ae:d4:bd:a0:c4:5a:5d:dc:a5:d7:92:52:9b:db:f3: be:34:58:b9:21:98:29:73:66:08:36:ef:bd:b0:17: ab:1a:08:74:eb:6a:1e:c8:b1:71:b3:c7:37:f4:20: a2:e8:c8:7c:21:9f:14:6c:6c:6a:5b:68:93:a8:79: 17:d2:d0:66:81:e1:14:c2:85:6f:cf:ff:4b:cb:8c: ef:aa:73:ca:5e:d9:1c:78:7a:e7:aa:48:ee:04:c6: 50:43:eb:de:39:14:06:79:44:20:1e:f4:09:f5:f1: 7e:4a:9a:e1:53:e1:15:2b:47:72:eb:f6:43:05:aa: c7:a3:a1:a7:f8:fa:a8:21:10:d5:27:cc:67:d7:49: 83:4c:11:e4:5a:ef:e2:26:6b:dc:f7:95:e3:9c:57: b2:72:5d:e9:22:ed:07:7d:7d:18:f5:a5:90:93:9b: 2e:d7:84:03:bd:81:e6:22:be:21:85:6d:cc:2d:c8: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E4:F6:08:77:15:80:D6:8B:26:90:FF:7C:A3:57:A2:63:8A:4E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:69:5b:bd:75:ff:85:89:7f:d5:22:da:1b:bd:1a:b3:03:39: 27:ea:e2:3f:db:82:0f:b6:91:04:dd:0e:a8:05:fe:38:ab:bb: 6c:15:9b:45:0a:3f:b7:8c:9a:7c:29:1f:8d:5e:13:bc:da:73: ad:d5:eb:0b:8b:60:4d:f4:c8:db:90:fa:80:28:a9:7f:6e:45: 57:ef:22:09:2d:e6:c1:2f:74:8f:c2:44:16:59:96:ad:88:fc: 97:07:5b:ce:75:ab:a0:56:cd:2f:a7:39:ae:26:39:66:ba:f4: 1b:2f:9a:9b:18:90:4b:68:52:68:b5:b3:04:23:c5:71:b2:58: c2:1b:ba:37:19:50:54:b2:25:c9:91:b3:7b:45:53:5d:33:49: 4d:63:82:da:69:e6:0e:d3:c2:08:2c:49:17:5f:2e:33:93:2b: 05:6f:e0:fd:55:e5:fc:89:85:a9:10:ee:1f:08:3c:f5:02:30: e6:2d:d0:e1:61:23:33:ba:f0:28:d4:f2:bf:81:a7:65:42:8b: 0f:9c:a8:83:39:52:06:ea:41:55:35:a2:5d:6c:b9:57:35:3d: 9d:c9:c3:e0:46:9c:1c:f4:07:1f:e2:83:4a:e4:94:ac:30:70: 30:99:19:bf:cf:52:c9:54:e7:4c:ba:25:e8:d4:79:23:51:4c: ef:a8:30:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS0LkhhETLqFr7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk NzA5ZTIyYjMtMDJmZC00Y2M5LTkyZWYtMDRhODgyOGM5ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm5L4QeKZWcrKz1M6UEAISxIFtslu1axU7IE FFEg4eiK28FY9f63O56hexpptylTgAaaxuZMzYZNkUa58syo7esbz3jg6vLNzyqu 1L2gxFpd3KXXklKb2/O+NFi5IZgpc2YINu+9sBerGgh062oeyLFxs8c39CCi6Mh8 IZ8UbGxqW2iTqHkX0tBmgeEUwoVvz/9Ly4zvqnPKXtkceHrnqkjuBMZQQ+veORQG eUQgHvQJ9fF+SprhU+EVK0dy6/ZDBarHo6Gn+PqoIRDVJ8xn10mDTBHkWu/iJmvc 95XjnFeycl3pIu0HfX0Y9aWQk5su14QDvYHmIr4hhW3MLciAzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7k9gh3FYDWiyaQ/3yjV6Jjik6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGJiODFkMmEtMWYyOC0z OTc1LTlmODEtZDRkNjAxYmU0ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5frMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5pW711/4WJf9Ui2hu9GrMDOSfq4j/bgg+2kQTdDqgF/jiru2wVm0UK P7eMmnwpH41eE7zac63V6wuLYE30yNuQ+oAoqX9uRVfvIgkt5sEvdI/CRBZZlq2I /JcHW851q6BWzS+nOa4mOWa69BsvmpsYkEtoUmi1swQjxXGyWMIbujcZUFSyJcmR s3tFU10zSU1jgtpp5g7TwggsSRdfLjOTKwVv4P1V5fyJhakQ7h8IPPUCMOYt0OFh IzO68CjU8r+Bp2VCiw+cqIM5UgbqQVU1ol1suVc1PZ3Jw+BGnBz0Bx/ig0rklKww cDCZGb/PUslU50y6JejUeSNRTO+oMMk= -----END CERTIFICATE-----Generated at Sat Jun 6 08:25:59 2026 by rpki-client