$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa File: 4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa (raw, json) Hash identifier: X5XlCs2Q3ZR7iy1ZKzEEkmj+wBHkoO0ZcjqZFI1veKU= Subject key identifier: 36:C1:AC:F4:B2:DD:11:52:79:CA:32:DE:85:F9:39:86:9F:DC:00:9E Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F4975A0A1A747D9A663236780 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21859 IP address blocks: 107.151.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:a0:a1:a7:47:d9:a6:63:23:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3615ccd8-82e0-435f-936f-e0b10f2f4cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:c9:92:21:51:0a:44:2b:4e:58:c1:43:a5: 4c:f5:4e:ce:0f:7c:e8:40:e7:6b:0d:41:37:c5:9c: c8:64:31:ca:3f:cc:71:24:6d:43:0e:0f:f2:fb:b1: c0:e9:d9:df:10:93:ae:30:a6:80:87:19:7d:af:64: 71:51:a6:f9:72:e1:83:ec:52:2c:d0:d6:8b:05:16: a9:07:45:08:ec:74:0e:87:40:20:0b:c5:ce:1b:09: 8e:4c:c9:12:8a:f1:70:2a:dc:85:f9:4e:ad:9c:da: a2:db:7f:93:16:60:07:cb:d6:13:6f:fc:e5:02:7a: e6:45:29:78:b6:25:e7:6f:64:d8:db:41:a9:46:b8: 67:40:ff:df:e0:eb:24:cf:02:0e:db:3f:dc:25:6f: 1b:8f:57:77:68:6b:78:a9:79:bf:da:d2:35:61:bd: 8c:6f:0d:3e:df:5e:df:75:d5:a6:c1:5e:eb:53:a0: 4e:3b:c1:95:65:de:d9:34:76:3c:78:ec:08:7d:fb: f1:15:56:74:c3:c9:e5:45:da:54:12:d5:79:61:d8: e2:4d:a1:77:80:03:47:dd:6d:e7:47:11:69:fb:40: fb:36:e8:fa:6c:c9:c0:6f:9b:02:bc:97:7d:44:bd: aa:b7:4d:b9:ce:50:a0:6d:2e:9a:41:3b:53:c0:f9: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C1:AC:F4:B2:DD:11:52:79:CA:32:DE:85:F9:39:86:9F:DC:00:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4a:92:53:39:8b:38:b6:61:03:68:8d:09:a4:36:c7:69:14: 89:9d:89:0a:b9:ba:17:85:de:b3:c8:a3:28:fe:97:ff:fa:3b: 5f:cb:ba:29:fb:50:cb:1b:99:93:d5:e1:bd:50:d9:69:d8:7e: fb:2e:d1:cd:39:9a:c9:27:b8:5e:cc:5d:31:90:a8:60:1e:54: 87:00:ff:82:3a:3e:22:78:bf:cf:4e:4a:c9:9f:90:2e:d7:89: 45:bf:d1:47:0c:43:65:9b:6f:ae:65:cc:7f:07:fa:f5:7e:58: 36:fc:df:3f:20:d6:e8:96:a5:b3:79:55:bc:21:81:e9:a2:cb: d5:f2:22:cb:6d:1a:4c:30:bb:2f:53:8e:62:c3:02:1b:04:a0: d3:12:99:b8:64:46:66:a8:b4:1d:11:57:a9:4f:7f:64:18:47: 9f:c7:87:42:d9:98:59:ac:ee:f2:3c:ed:ca:cd:4e:a0:33:3a: 2d:02:1d:a6:0e:d7:34:bb:62:18:b5:f3:13:6e:eb:79:a5:61: fd:dc:98:d1:42:78:81:2a:64:bd:31:f7:57:ef:de:bd:d5:45: 59:8d:ec:d3:da:ef:f5:7e:34:2d:51:ed:99:e8:56:be:29:64: 8b:c8:30:e3:a7:4d:29:16:7e:ba:68:48:53:f5:e8:63:8b:74: dc:f7:4e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdaChp0fZpmMjZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzYxNWNjZDgtODJlMC00MzVmLTkzNmYtZTBiMTBmMmY0Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIPJkiFRCkQrTljBQ6VM9U7OD3zoQOdrDUE3 xZzIZDHKP8xxJG1DDg/y+7HA6dnfEJOuMKaAhxl9r2RxUab5cuGD7FIs0NaLBRap B0UI7HQOh0AgC8XOGwmOTMkSivFwKtyF+U6tnNqi23+TFmAHy9YTb/zlAnrmRSl4 tiXnb2TY20GpRrhnQP/f4OskzwIO2z/cJW8bj1d3aGt4qXm/2tI1Yb2Mbw0+317f ddWmwV7rU6BOO8GVZd7ZNHY8eOwIffvxFVZ0w8nlRdpUEtV5YdjiTaF3gANH3W3n RxFp+0D7Nuj6bMnAb5sCvJd9RL2qt025zlCgbS6aQTtTwPmL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbBrPSy3RFSecoy3oX5OYaf3ACeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGJiODFkMmEtMWYyOC0z OTc1LTlmODEtZDRkNjAxYmU0ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5frMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARKklM5izi2YQNojQmkNsdpFImdiQq5uheF3rPIoyj+l//6O1/Luin7 UMsbmZPV4b1Q2WnYfvsu0c05msknuF7MXTGQqGAeVIcA/4I6PiJ4v89OSsmfkC7X iUW/0UcMQ2Wbb65lzH8H+vV+WDb83z8g1uiWpbN5Vbwhgemiy9XyIsttGkwwuy9T jmLDAhsEoNMSmbhkRmaotB0RV6lPf2QYR5/Hh0LZmFms7vI87crNTqAzOi0CHaYO 1zS7Yhi18xNu63mlYf3cmNFCeIEqZL0x91fv3r3VRVmN7NPa7/V+NC1R7ZnoVr4p ZIvIMOOnTSkWfrpoSFP16GOLdNz3Tl8= -----END CERTIFICATE-----Generated at Mon Oct 26 16:59:30 2026 by rpki-client