$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa File: 2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa (raw, json) Hash identifier: CtH0rHI6W9FwIqUhAcwhiTg7tuYgeR4B7pV3LumTFVo= Subject key identifier: 7B:FC:04:9A:F1:2D:18:3E:49:74:A5:E0:06:66:6D:DA:E4:30:A4:36 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F49773B6A2F1561220E454960 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 139880 IP address blocks: 107.151.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:3b:6a:2f:15:61:22:0e:45:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2df62527-8d47-4dfa-9bdd-74ae86cec078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:e1:e8:42:b8:36:fe:d9:b1:08:65:84:6c: 12:66:82:03:fa:88:60:08:33:d6:45:a4:33:29:b7: 8a:63:9b:d1:76:d2:43:08:77:0c:ec:92:df:f0:a1: a5:ff:c3:2e:b1:ba:1c:95:6b:f8:8f:cc:b7:40:24: 07:dc:c5:6d:e9:b5:4c:5a:0d:a4:75:1b:c1:37:95: 06:ff:d0:e2:76:76:9f:f2:62:44:c0:52:b5:b6:e6: 8b:59:2c:de:74:8a:06:b6:ca:06:8e:e4:48:a3:0d: 78:fc:3d:ca:12:00:80:f1:b2:da:46:43:54:bd:1e: 43:4b:12:e0:18:31:d6:ad:fe:dd:58:da:0f:b5:46: 58:74:1c:e2:cd:a1:02:e2:0c:ee:9c:39:46:88:1b: d8:83:55:39:53:2f:ec:7b:76:fd:f9:af:4f:e8:12: bf:f9:b0:2b:be:68:9a:d1:38:30:b7:9c:8e:74:cf: 7e:a4:6e:1c:19:30:81:f4:87:64:bd:1e:a8:ab:cf: e9:ac:be:d3:04:87:7f:0a:dc:85:2c:6f:e7:1b:48: 6e:ab:bf:56:c1:b7:4d:2f:26:2e:6f:ec:f5:06:88: 85:c9:68:fb:46:65:f2:4d:dd:56:4b:2c:0b:51:27: e5:58:66:cd:46:2f:89:a4:09:e0:a6:f9:b5:38:4a: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FC:04:9A:F1:2D:18:3E:49:74:A5:E0:06:66:6D:DA:E4:30:A4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b9:de:cc:a9:a6:87:a3:6c:cd:12:5c:28:ad:d3:68:1e:67: 6f:c3:bf:96:4b:9d:6c:c9:d0:77:43:81:7d:84:08:15:94:61: 04:54:b4:2d:35:d4:4c:c4:3d:fd:02:4a:98:a4:28:75:94:72: 1d:bf:62:92:aa:b0:8a:e8:70:3e:38:4f:39:a9:5b:53:b3:da: d4:8d:0c:1f:89:9a:5a:10:e4:e0:91:40:66:8d:7f:9f:d3:41: 9b:7d:dc:8f:15:e5:4a:31:65:1c:ce:25:df:fe:00:83:ff:8b: 92:b4:38:15:cc:c9:db:7e:f9:19:e7:f7:f4:23:59:90:83:7b: 4f:05:ad:16:89:28:d3:d9:b1:b6:f3:df:0f:08:54:91:53:b3: ee:12:a2:34:f6:83:23:dd:48:97:a7:38:73:dd:c5:18:6a:02: ea:0b:6a:62:e3:c1:6f:8e:81:1c:cc:ca:48:e1:e3:52:74:d3: ff:bc:28:6d:34:f7:59:bc:48:07:2b:57:0d:8d:06:93:06:65: 47:16:b1:7b:17:51:9c:53:85:2d:7e:4e:d4:c4:2c:62:48:7d: 78:df:9c:57:a5:27:f1:e9:c8:58:1a:dd:77:c9:6a:79:bb:4e: 45:1d:dd:72:7e:74:8b:72:b0:5e:d2:89:c4:a0:21:e5:9f:4b: d0:7c:e3:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdztqLxVhIg5FSWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmRmNjI1MjctOGQ0Ny00ZGZhLTliZGQtNzRhZTg2Y2VjMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBbh6EK4Nv7ZsQhlhGwSZoID+ohgCDPWRaQz KbeKY5vRdtJDCHcM7JLf8KGl/8MusboclWv4j8y3QCQH3MVt6bVMWg2kdRvBN5UG /9Didnaf8mJEwFK1tuaLWSzedIoGtsoGjuRIow14/D3KEgCA8bLaRkNUvR5DSxLg GDHWrf7dWNoPtUZYdBzizaEC4gzunDlGiBvYg1U5Uy/se3b9+a9P6BK/+bArvmia 0Tgwt5yOdM9+pG4cGTCB9IdkvR6oq8/prL7TBId/CtyFLG/nG0huq79WwbdNLyYu b+z1BoiFyWj7RmXyTd1WSywLUSflWGbNRi+JpAngpvm1OEqngQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv8BJrxLRg+SXSl4AZmbdrkMKQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMmIzOWYyMmQtMTZhMS0z ZGFkLTk0NGEtYzc5Y2ExZWE3NzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS53syppoejbM0SXCit02geZ2/Dv5ZLnWzJ0HdDgX2ECBWUYQRUtC01 1EzEPf0CSpikKHWUch2/YpKqsIrocD44TzmpW1Oz2tSNDB+JmloQ5OCRQGaNf5/T QZt93I8V5UoxZRzOJd/+AIP/i5K0OBXMydt++Rnn9/QjWZCDe08FrRaJKNPZsbbz 3w8IVJFTs+4SojT2gyPdSJenOHPdxRhqAuoLamLjwW+OgRzMykjh41J00/+8KG00 91m8SAcrVw2NBpMGZUcWsXsXUZxThS1+TtTELGJIfXjfnFelJ/HpyFga3XfJanm7 TkUd3XJ+dItysF7SicSgIeWfS9B840o= -----END CERTIFICATE-----Generated at Sat Oct 3 22:38:23 2026 by rpki-client