$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa File: bbbef458-a29e-3dfc-a20b-8890d6d24246.roa (raw, json) Hash identifier: 1QFIRIjNo+NCrea7BH+wAMlkB6naZL+Gy22FHiMzpns= Subject key identifier: 47:A4:24:0C:6A:FB:FB:04:71:3A:82:F9:17:F5:F1:3B:B2:6F:E5:BA Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584E104EEDF856DAFB93A1FA1D00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 137443 IP address blocks: 107.151.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:ed:f8:56:da:fb:93:a1:fa:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=64803eeb-84e9-411f-aa3c-3cf16cabb3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:78:03:67:ac:e1:5f:c3:95:70:63:2d:de:af: 65:c8:16:b5:1f:88:d5:54:2e:77:98:36:55:cc:0d: 17:d6:40:5d:ad:03:5c:0c:af:0c:2c:ce:7c:0a:df: 0e:3c:a2:05:7a:b3:3c:3e:f1:28:5c:3a:8b:80:d4: 84:2e:df:3f:3e:58:ba:77:8a:cb:b0:3d:b4:f1:73: ab:39:ad:a9:f8:14:d2:88:10:24:de:ec:72:f6:39: 96:3c:99:90:78:2b:15:ec:79:68:11:b6:7f:9c:74: a6:23:6e:16:64:48:fc:79:65:73:8f:1e:5c:2c:03: ea:64:07:ac:e4:a5:10:9b:3c:60:e2:89:bc:53:57: 26:bb:6c:18:b0:88:f0:20:27:0d:fd:73:e7:fd:5b: 92:13:8a:45:82:83:d6:13:2c:af:96:4f:e8:61:47: d5:3e:ad:7e:9a:c4:69:e0:af:70:81:f8:8b:4d:53: 66:67:74:e8:be:19:16:c7:71:be:37:92:ca:48:c6: 4f:07:7d:64:7b:cd:39:26:8c:98:45:a4:aa:6d:f2: 1a:d8:f7:6b:c5:e2:fd:53:8d:30:9f:19:d0:56:2d: 68:3a:55:ad:81:2a:e8:d5:c5:7f:cf:39:e5:b3:7d: da:73:5b:47:c6:66:0d:3c:bf:12:6a:6b:1c:91:eb: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A4:24:0C:6A:FB:FB:04:71:3A:82:F9:17:F5:F1:3B:B2:6F:E5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bbbef458-a29e-3dfc-a20b-8890d6d24246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b0:3b:08:8c:57:eb:70:ea:47:df:a9:e7:9f:e4:a0:f8:ba: 0d:61:03:2a:ca:8c:2c:53:b4:64:f2:f5:10:b5:94:d6:8a:3c: e5:db:f1:7e:e5:08:e2:cd:1c:c4:f0:c1:b0:c8:b0:17:2e:ae: 2d:c5:52:a5:cf:c1:0f:ab:1d:8b:07:59:42:31:2e:15:4b:9e: b3:03:32:86:9e:63:bd:34:5a:f3:2a:fc:f4:f7:6d:17:8b:13: 43:d4:5d:3f:ac:b9:6e:e3:28:ec:38:26:db:de:39:19:19:96: 01:ca:b4:fb:51:cb:19:39:b9:ce:03:38:f7:32:bb:48:6e:aa: 34:35:62:04:33:8a:66:5b:04:d6:5f:b1:17:e0:b8:37:14:a1: b9:0e:d5:42:3e:8a:41:34:c8:e4:f8:bb:00:27:e0:3a:64:44: df:b9:9c:5c:fd:41:e6:16:7a:85:40:27:80:68:16:61:3b:1e: 11:ed:85:bc:a9:d0:55:1e:83:c0:24:06:a3:eb:ad:ee:c1:e4: 71:49:ee:73:2a:79:59:b8:4c:9c:0e:c3:00:87:2b:99:d4:c7: d4:4a:81:40:97:4f:37:e7:66:1b:c5:0f:ee:b8:16:96:1a:35: ad:e1:fa:58:96:9f:ab:c1:4a:b9:07:3e:38:e0:10:35:ea:e8: 8d:67:1b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTu34Vtr7k6H6HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NjQ4MDNlZWItODRlOS00MTFmLWFhM2MtM2NmMTZjYWJiM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3gDZ6zhX8OVcGMt3q9lyBa1H4jVVC53mDZV zA0X1kBdrQNcDK8MLM58Ct8OPKIFerM8PvEoXDqLgNSELt8/Pli6d4rLsD208XOr Oa2p+BTSiBAk3uxy9jmWPJmQeCsV7HloEbZ/nHSmI24WZEj8eWVzjx5cLAPqZAes 5KUQmzxg4om8U1cmu2wYsIjwICcN/XPn/VuSE4pFgoPWEyyvlk/oYUfVPq1+msRp 4K9wgfiLTVNmZ3TovhkWx3G+N5LKSMZPB31ke805JoyYRaSqbfIa2PdrxeL9U40w nxnQVi1oOlWtgSro1cV/zznls33ac1tHxmYNPL8SamsckeuoEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEekJAxq+/sEcTqC+Rf18Tuyb+W6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYmJiZWY0NTgtYTI5ZS0z ZGZjLWEyMGItODg5MGQ2ZDI0MjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5f7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2wOwiMV+tw6kffqeef5KD4ug1hAyrKjCxTtGTy9RC1lNaKPOXb8X7l COLNHMTwwbDIsBcuri3FUqXPwQ+rHYsHWUIxLhVLnrMDMoaeY700WvMq/PT3bReL E0PUXT+suW7jKOw4JtveORkZlgHKtPtRyxk5uc4DOPcyu0huqjQ1YgQzimZbBNZf sRfguDcUobkO1UI+ikE0yOT4uwAn4DpkRN+5nFz9QeYWeoVAJ4BoFmE7HhHthbyp 0FUeg8AkBqPrre7B5HFJ7nMqeVm4TJwOwwCHK5nUx9RKgUCXTzfnZhvFD+64FpYa Na3h+liWn6vBSrkHPjjgEDXq6I1nG4E= -----END CERTIFICATE-----Generated at Sat Jun 6 08:25:28 2026 by rpki-client