$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80e5ab84-a929-32f4-948d-aba406bd0ac0.roa File: 80e5ab84-a929-32f4-948d-aba406bd0ac0.roa (raw, json) Hash identifier: PlvTZ/lNNMQDcB6nJKL2lMVL0Dhr6xc1uLC7Bgp/6TY= Subject key identifier: B2:16:76:99:65:E0:9D:4B:03:0C:D7:1C:62:42:BC:83:63:ED:FC:91 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B05E13D612B96268C9F883B00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80e5ab84-a929-32f4-948d-aba406bd0ac0.roa Signing time: Sat 30 Aug 2025 01:00:34 +0000 ROA not before: Sat 30 Aug 2025 01:00:34 +0000 ROA not after: Fri 28 Nov 2025 02:00:34 +0000 asID: 16509 IP address blocks: 107.151.224.0/21 maxlen: 21 107.151.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:05:e1:3d:61:2b:96:26:8c:9f:88:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Aug 30 01:00:34 2025 GMT Not After : Nov 28 02:00:34 2025 GMT Subject: CN=cdec988a-c982-4e2c-9b04-ecac4831affe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:c2:ae:6e:03:da:14:56:ac:57:88:f0:81: 32:ca:82:a5:36:f1:73:eb:c1:34:2a:ee:ba:31:41: d6:cf:0a:9c:6c:bc:41:6e:96:21:08:ae:4c:91:e1: f8:ab:da:ff:6f:9c:94:e7:cf:d7:59:45:b8:f6:fc: 03:28:c3:86:02:60:e3:66:e7:f7:b6:68:94:7a:a3: 83:16:4a:0d:20:eb:77:33:0c:b4:01:84:5e:9d:74: b2:03:72:53:89:53:2b:69:1b:45:91:8a:75:08:d2: 24:fb:0c:b1:c5:56:1c:d7:fe:c3:0b:fa:86:26:78: d9:8b:9e:ac:e2:c1:b4:6b:dc:f3:97:ee:b5:f5:2c: 23:cc:3b:46:21:21:a2:c0:53:8e:b4:f5:02:56:26: 2e:92:e6:23:9a:a6:a0:bf:5a:e6:f1:72:52:fc:e4: 78:fb:df:54:a9:c8:91:f3:ff:f0:37:41:85:b7:35: 03:dc:6f:bb:2d:c3:4b:2b:e1:76:56:f0:65:56:ce: 41:6f:b7:b3:74:bd:98:7b:d6:c4:d2:88:6a:db:b4: b5:0a:2d:7b:2d:c0:4d:1e:56:49:4b:bb:bd:8d:e5: ea:d5:d2:57:e0:5f:24:7c:c9:ff:08:52:cd:c7:87: 65:92:7c:aa:30:2f:1e:72:11:27:34:d3:6e:3a:1f: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:16:76:99:65:E0:9D:4B:03:0C:D7:1C:62:42:BC:83:63:ED:FC:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/80e5ab84-a929-32f4-948d-aba406bd0ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.224.0-107.151.233.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0a:8d:07:80:53:77:5c:cb:13:65:79:07:ce:69:ac:ad:21: 90:e0:d5:4b:2b:d8:dd:f3:0f:a8:5c:9a:bf:11:d9:24:cf:cb: 00:17:74:27:3e:e9:87:2b:53:9e:22:1b:8b:64:df:d8:e6:6a: 36:09:3d:f4:5e:e4:de:39:d1:e4:a2:1f:f0:a9:d2:d4:93:57: b2:5a:69:65:b9:97:fd:8e:9d:ee:57:08:bd:09:4c:f9:4f:9c: 01:c0:5a:25:0d:a3:98:69:91:bb:98:22:7e:34:3a:2e:96:1a: 7e:cb:ca:50:6a:60:bf:e7:cd:19:ca:a7:dc:07:44:51:a1:10: 4e:c1:5c:72:82:39:49:96:3e:16:8b:74:24:46:69:06:f9:fa: 0b:fe:59:d0:ed:c7:2b:fc:7b:89:c8:50:5a:13:27:38:b9:4c: 3d:7e:8f:04:31:8a:e6:df:70:ef:aa:6c:74:db:f3:9c:a4:ab: 49:a5:71:96:fc:47:c0:2c:8b:a9:b7:1a:a5:4e:76:1c:73:28: 08:27:1c:fa:bb:5f:46:cb:43:08:d0:0e:42:a2:fd:ea:f1:c6: fc:84:9a:a8:ed:59:ee:6f:94:bb:80:a1:c3:81:78:f1:99:af: b4:38:d6:17:eb:c4:60:ed:0d:ad:1e:7e:bf:71:d0:41:69:7d: b8:b3:d1:42 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsF4T1hK5YmjJ+IOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk Y2RlYzk4OGEtYzk4Mi00ZTJjLTliMDQtZWNhYzQ4MzFhZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDzCrm4D2hRWrFeI8IEyyoKlNvFz68E0Ku66 MUHWzwqcbLxBbpYhCK5MkeH4q9r/b5yU58/XWUW49vwDKMOGAmDjZuf3tmiUeqOD FkoNIOt3Mwy0AYRenXSyA3JTiVMraRtFkYp1CNIk+wyxxVYc1/7DC/qGJnjZi56s 4sG0a9zzl+619SwjzDtGISGiwFOOtPUCViYukuYjmqagv1rm8XJS/OR4+99UqciR 8//wN0GFtzUD3G+7LcNLK+F2VvBlVs5Bb7ezdL2Ye9bE0ohq27S1Ci17LcBNHlZJ S7u9jeXq1dJX4F8kfMn/CFLNx4dlknyqMC8echEnNNNuOh8qBwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLIWdpll4J1LAwzXHGJCvINj7fyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODBlNWFiODQtYTkyOS0z MmY0LTk0OGQtYWJhNDA2YmQwYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVrl+AD BAFrl+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXAqNB4BTd1zLE2V5B85prK0hkODVSyvY3fMPqFyavxHZ JM/LABd0Jz7phytTniIbi2Tf2OZqNgk99F7k3jnR5KIf8KnS1JNXslppZbmX/Y6d 7lcIvQlM+U+cAcBaJQ2jmGmRu5gifjQ6LpYafsvKUGpgv+fNGcqn3AdEUaEQTsFc coI5SZY+Fot0JEZpBvn6C/5Z0O3HK/x7ichQWhMnOLlMPX6PBDGK5t9w76psdNvz nKSrSaVxlvxHwCyLqbcapU52HHMoCCcc+rtfRstDCNAOQqL96vHG/ISaqO1Z7m+U u4Chw4F48ZmvtDjWF+vEYO0NrR5+v3HQQWl9uLPRQg== -----END CERTIFICATE-----Generated at Sun Sep 7 15:45:55 2025 by rpki-client