$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa File: bbbef458-a29e-3dfc-a20b-8890d6d24246.roa (raw, json) Hash identifier: hoy0w2YlRWeC71hI7V1CvC16f3DbDAy/CD+gWUwwJzQ= Subject key identifier: FF:47:8F:06:90:A1:9E:26:A2:3E:09:DA:D4:2B:D3:0F:08:37:A9:9C Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F549D6BCB9CC9FA9D7ED02380 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 137443 IP address blocks: 107.151.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:6b:cb:9c:c9:fa:9d:7e:d0:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=7b33d4f4-bb1b-42f9-9a76-8a08965f0c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:3d:18:9e:3b:c1:50:7c:7f:7e:bf:67:e7: 55:2a:9a:de:61:ad:ba:44:7d:2f:8f:cd:bc:31:2a: 9d:54:00:9d:4b:fc:f6:92:e6:07:e3:85:e4:54:80: cd:ab:93:50:2f:e7:a4:f8:14:c0:99:7a:18:49:cd: 05:7b:7c:a3:41:e1:e7:e1:7d:bb:1b:f2:3a:5b:b7: 24:aa:71:c4:fe:86:b4:c0:71:c5:90:ab:a1:67:65: 74:38:86:dd:b1:5f:d6:e3:e8:c8:8e:73:74:cd:1d: e0:91:aa:6d:b8:2e:67:85:d4:4f:11:ad:99:68:3a: f9:22:5c:b2:90:02:f4:0c:e7:33:29:7e:93:d0:c4: c7:4b:a3:0d:d1:6b:e0:be:48:3a:c8:89:dc:56:98: d0:60:75:5d:16:9e:c2:8c:39:51:70:bf:87:77:be: f7:b3:53:57:38:78:73:5b:56:84:7d:a0:86:b2:84: f8:ea:77:0e:3f:a0:0d:e5:46:45:89:2d:e9:da:42: aa:2c:15:de:b6:c7:87:98:bf:ff:d7:f4:ea:48:ca: 5d:8d:b8:d3:0b:9b:dd:b7:d8:5d:fc:01:65:f7:aa: 56:62:45:1f:b6:01:bd:de:49:7d:48:1f:48:09:1b: 4f:b9:41:49:20:3c:2a:48:41:a8:2d:7e:38:a0:f8: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:47:8F:06:90:A1:9E:26:A2:3E:09:DA:D4:2B:D3:0F:08:37:A9:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:37:9b:66:04:38:98:76:88:61:95:18:d6:24:cb:65:76:5c: 8a:9b:b1:25:fe:5e:2f:a9:b7:43:c3:f4:b4:0a:64:6d:7d:ce: ae:89:fe:88:23:d4:89:e6:72:8c:17:af:61:40:e2:0b:5f:e2: 14:42:b0:5a:a1:a5:af:f3:71:13:b8:ad:90:b0:61:30:a7:4e: 92:e7:da:85:20:e8:82:e8:bc:6a:ca:2c:aa:c3:8b:32:fe:e6: 57:1d:27:cf:d0:37:e4:e5:ed:6a:fc:7f:d6:2b:d4:0e:7a:51: 69:b8:af:62:f7:bf:ac:2d:36:b6:ea:39:51:9d:82:72:7c:b2: 7c:0c:69:a2:ce:df:a2:49:cb:ad:33:c7:9c:21:e0:77:ad:10: 11:b7:4c:35:bf:ac:4f:74:0e:52:79:1f:b9:e2:43:5f:9b:24: 99:c4:c0:f2:ff:f8:fd:b3:a1:67:50:19:25:e7:8f:b3:8d:df: 42:03:8c:84:bb:72:97:74:c0:66:e9:8a:c5:70:8e:de:61:2c: 02:f1:fa:81:40:9c:aa:c7:3a:d8:67:f1:dd:bc:51:d9:ad:27: 15:41:d0:55:15:04:39:25:ae:ad:00:2a:08:62:2a:cf:84:f6: 13:94:02:7d:8b:0c:ab:58:51:f2:4f:86:ec:a0:c2:81:f3:ac: 2f:c2:75:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWvLnMn6nX7QI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk N2IzM2Q0ZjQtYmIxYi00MmY5LTlhNzYtOGEwODk2NWYwYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjok9GJ47wVB8f36/Z+dVKpreYa26RH0vj828 MSqdVACdS/z2kuYH44XkVIDNq5NQL+ek+BTAmXoYSc0Fe3yjQeHn4X27G/I6W7ck qnHE/oa0wHHFkKuhZ2V0OIbdsV/W4+jIjnN0zR3gkaptuC5nhdRPEa2ZaDr5Ilyy kAL0DOczKX6T0MTHS6MN0Wvgvkg6yIncVpjQYHVdFp7CjDlRcL+Hd773s1NXOHhz W1aEfaCGsoT46ncOP6AN5UZFiS3p2kKqLBXetseHmL//1/TqSMpdjbjTC5vdt9hd /AFl96pWYkUftgG93kl9SB9ICRtPuUFJIDwqSEGoLX44oPhSGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9HjwaQoZ4moj4J2tQr0w8IN6mcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYmJiZWY0NTgtYTI5ZS0z ZGZjLWEyMGItODg5MGQ2ZDI0MjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5f7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg3m2YEOJh2iGGVGNYky2V2XIqbsSX+Xi+pt0PD9LQKZG19zq6J/ogj 1InmcowXr2FA4gtf4hRCsFqhpa/zcRO4rZCwYTCnTpLn2oUg6ILovGrKLKrDizL+ 5lcdJ8/QN+Tl7Wr8f9Yr1A56UWm4r2L3v6wtNrbqOVGdgnJ8snwMaaLO36JJy60z x5wh4HetEBG3TDW/rE90DlJ5H7niQ1+bJJnEwPL/+P2zoWdQGSXnj7ON30IDjIS7 cpd0wGbpisVwjt5hLALx+oFAnKrHOthn8d28UdmtJxVB0FUVBDklrq0AKghiKs+E 9hOUAn2LDKtYUfJPhuygwoHzrC/Cdck= -----END CERTIFICATE-----Generated at Mon Oct 26 21:17:28 2026 by rpki-client