$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa File: c4213251-3b00-393f-bb99-fb92be27e7c1.roa (raw, json) Hash identifier: +d/Ci+vbF3VlplmHENu2Frmh8UHsSo5eIKy3wWnxi7U= Subject key identifier: 70:13:5A:EE:92:07:2B:69:25:99:37:3E:76:88:78:D4:62:AB:0B:3C Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D15A2682AF014A3F8A072E600 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 134365 IP address blocks: 107.151.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:68:2a:f0:14:a3:f8:a0:72:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=cc1f7a16-9471-40d4-85ab-5576373bfbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1d:54:3c:9d:bb:c1:b7:76:47:55:ca:b5:26: ab:74:88:4f:dd:d1:91:c9:69:37:27:99:ba:b0:1f: 34:5c:50:f3:60:4d:dd:28:80:17:1d:67:ca:45:ca: 0a:a8:2a:4d:a6:90:5f:7b:29:bd:d7:52:5e:fa:bd: a9:1f:8d:a3:ad:a7:5c:65:77:aa:9b:c5:a6:be:9d: 0c:c0:22:53:be:47:26:e5:1c:28:34:10:8c:56:81: ac:35:18:13:5f:aa:ff:dc:6c:06:c9:c7:3c:c6:cb: fe:a1:e3:bc:83:a0:d6:a8:25:f5:2d:cb:af:55:65: 71:44:37:06:ab:08:ad:6a:d6:d3:9e:59:d2:3d:86: 2b:66:bd:7c:f6:03:a4:b0:45:c4:d6:42:cf:a0:dc: 12:42:f9:0d:33:61:74:14:4b:32:cd:93:c2:68:8f: d9:3e:78:94:82:01:cd:fd:72:de:7c:b6:90:e4:9b: e3:23:01:55:de:6e:cb:aa:4f:01:7e:1b:2d:b3:6b: a9:a7:14:1b:f9:49:85:05:41:9c:22:b1:3e:02:17: a4:6b:f3:0d:2a:f4:99:bf:a8:17:ac:a2:ce:4f:05: 85:02:67:c6:26:f4:68:80:96:12:d2:49:3c:04:de: 79:d1:84:3b:5b:82:81:d5:fd:6b:16:b5:79:d0:33: 91:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:13:5A:EE:92:07:2B:69:25:99:37:3E:76:88:78:D4:62:AB:0B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e5:c8:d9:0b:85:78:a2:39:c2:a2:d2:5f:59:e5:a7:b5:5f: 1f:84:99:b3:a3:77:ee:8a:28:42:40:40:31:70:da:96:11:72: 19:da:8a:a9:f5:d9:2a:a4:3e:f2:c5:64:fb:72:91:b1:8f:ff: 26:9f:09:dd:2b:d7:e9:de:e3:8a:91:d9:40:14:8e:3c:3c:db: 21:d4:3d:e6:d1:e9:c8:86:82:ca:94:85:e7:a2:8c:7d:50:bc: 2d:43:47:3c:ef:26:4c:da:49:3e:8e:49:b8:50:5a:5b:1c:ce: 47:cf:83:07:9b:82:22:72:5e:02:19:17:ae:d7:79:db:db:2e: a7:0b:c9:e9:77:7d:6d:c9:d3:30:e7:b4:e6:d9:03:e2:a8:06: b1:00:53:a7:9c:36:9d:9a:c6:dc:f1:0d:84:b0:1f:fe:02:62: c9:ec:d1:91:98:41:29:eb:28:66:e1:57:ad:bc:21:46:23:b2: ec:c7:70:70:4f:27:02:be:2a:5b:20:ae:28:ef:97:9a:b2:f7: 07:54:dd:89:5b:19:df:7c:aa:c1:45:e5:c6:1a:b5:c3:96:89: f2:9b:6a:15:f7:e7:db:a5:15:1f:61:27:ee:84:cc:6b:df:66: 25:5e:80:25:14:d5:4e:6d:5d:cf:c3:a1:16:c4:c2:fc:42:5c: 4e:b3:6a:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vomgq8BSj+KBy5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk Y2MxZjdhMTYtOTQ3MS00MGQ0LTg1YWItNTU3NjM3M2JmYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx1UPJ27wbd2R1XKtSardIhP3dGRyWk3J5m6 sB80XFDzYE3dKIAXHWfKRcoKqCpNppBfeym911Je+r2pH42jradcZXeqm8Wmvp0M wCJTvkcm5RwoNBCMVoGsNRgTX6r/3GwGycc8xsv+oeO8g6DWqCX1LcuvVWVxRDcG qwitatbTnlnSPYYrZr189gOksEXE1kLPoNwSQvkNM2F0FEsyzZPCaI/ZPniUggHN /XLefLaQ5JvjIwFV3m7Lqk8Bfhsts2uppxQb+UmFBUGcIrE+Aheka/MNKvSZv6gX rKLOTwWFAmfGJvRogJYS0kk8BN550YQ7W4KB1f1rFrV50DORqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHATWu6SBytpJZk3PnaIeNRiqws8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYzQyMTMyNTEtM2IwMC0z OTNmLWJiOTktZmI5MmJlMjdlN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTlyNkLhXiiOcKi0l9Z5ae1Xx+EmbOjd+6KKEJAQDFw2pYRchnaiqn1 2SqkPvLFZPtykbGP/yafCd0r1+ne44qR2UAUjjw82yHUPebR6ciGgsqUheeijH1Q vC1DRzzvJkzaST6OSbhQWlsczkfPgwebgiJyXgIZF67XedvbLqcLyel3fW3J0zDn tObZA+KoBrEAU6ecNp2axtzxDYSwH/4CYsns0ZGYQSnrKGbhV628IUYjsuzHcHBP JwK+Klsgrijvl5qy9wdU3YlbGd98qsFF5cYatcOWifKbahX359ulFR9hJ+6EzGvf ZiVegCUU1U5tXc/DoRbEwvxCXE6zavY= -----END CERTIFICATE-----Generated at Sat Mar 7 07:42:59 2026 by rpki-client