$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/6279d2a5-63c7-3491-9914-b935b17439b3.roa File: 6279d2a5-63c7-3491-9914-b935b17439b3.roa (raw, json) Hash identifier: l0VRF9iWxqBdhubgms9w3/PDzTImAJI6trL61Oa1eVY= Subject key identifier: 35:E0:3F:06:2E:0E:08:0B:D5:56:59:F7:71:80:D2:E6:F1:6E:4E:82 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B5571E203B3D951A8E4231500 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/6279d2a5-63c7-3491-9914-b935b17439b3.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 137547 IP address blocks: 107.151.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e2:03:b3:d9:51:a8:e4:23:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=321feb0a-fdef-4bb4-89d6-04d28426130b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:50:02:47:cb:18:10:ee:0e:00:10:a7:a0: 50:02:59:2a:d6:70:a1:7f:1a:dd:1b:14:4d:43:7f: 26:03:bd:bb:53:e9:17:84:bd:fb:9a:a9:58:11:32: fb:3a:89:54:83:d2:7e:33:07:a0:e2:0b:40:aa:2a: 58:6c:a2:8f:3c:ed:25:d5:95:ea:24:60:45:14:53: 61:02:b6:39:20:46:35:9f:2e:b9:7e:cc:3d:36:92: a9:66:6d:c0:44:2c:d7:34:e9:95:20:04:dd:66:1a: 10:bc:43:3f:96:69:3a:8f:92:04:3a:f4:79:69:5b: 43:46:e2:36:8e:4d:7f:83:38:23:f4:46:43:e8:83: 5b:ec:de:b4:f7:4d:82:7d:c3:8c:ca:f9:e8:7f:06: 61:3e:82:18:c3:fe:8a:6f:fc:94:14:37:07:16:f6: 39:e2:bf:58:25:0e:33:32:80:70:46:14:b8:5c:3e: 83:e1:93:0e:b4:d0:81:56:02:37:cf:df:c1:73:45: 5a:0c:e2:95:67:25:7c:be:70:5a:5c:32:78:a5:ac: 89:13:19:10:3e:52:da:c6:6b:4f:89:ac:40:8d:ce: ca:09:a6:fc:70:27:b9:6f:8d:be:5c:03:e0:75:ab: 13:25:ec:59:d9:11:4d:3d:95:f7:4f:46:86:26:8f: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E0:3F:06:2E:0E:08:0B:D5:56:59:F7:71:80:D2:E6:F1:6E:4E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/6279d2a5-63c7-3491-9914-b935b17439b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ae:2d:d1:66:85:de:56:8e:42:ec:e3:56:1c:b9:21:d1:24: af:57:50:51:57:0d:c5:07:64:de:43:68:9e:c0:1b:73:ef:79: 85:e9:4e:6f:07:f7:10:be:96:8a:fa:76:85:66:c5:58:6f:86: 22:67:5b:33:33:20:f9:4c:ee:4f:5f:85:13:03:98:46:8b:44: 1a:f1:e0:fb:b3:d6:a5:ea:73:b1:c7:08:d3:04:01:28:c8:68: 13:9e:95:01:4d:b0:ee:c1:43:43:52:52:1b:f8:dd:14:db:65: 21:a2:6b:69:c5:c5:08:76:41:a6:4c:bf:a1:c1:c2:8f:d9:15: e1:be:c7:7b:57:6f:99:68:5f:b8:b7:79:da:ae:2e:c7:3c:cb: 3a:1b:ef:79:2d:b0:5e:38:b5:54:97:53:2b:6f:19:83:83:52: 5b:f1:5b:03:12:f8:42:09:5f:67:5e:b7:b0:98:6b:04:0e:07: 10:58:5d:a6:e6:78:84:67:90:9d:75:f2:2b:41:20:0f:fe:97: 61:85:97:19:b9:1e:36:a3:a2:a1:07:ea:94:d2:92:be:d2:3e: 03:35:b7:47:2e:b2:60:ba:52:30:88:af:5a:d7:83:23:4d:5c: aa:97:a4:b6:c0:aa:52:35:67:e5:c9:08:1c:f3:c8:ea:52:27: fd:46:41:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceIDs9lRqOQjFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MzIxZmViMGEtZmRlZi00YmI0LTg5ZDYtMDRkMjg0MjYxMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgJQAkfLGBDuDgAQp6BQAlkq1nChfxrdGxRN Q38mA727U+kXhL37mqlYETL7OolUg9J+Mweg4gtAqipYbKKPPO0l1ZXqJGBFFFNh ArY5IEY1ny65fsw9NpKpZm3ARCzXNOmVIATdZhoQvEM/lmk6j5IEOvR5aVtDRuI2 jk1/gzgj9EZD6INb7N60902CfcOMyvnofwZhPoIYw/6Kb/yUFDcHFvY54r9YJQ4z MoBwRhS4XD6D4ZMOtNCBVgI3z9/Bc0VaDOKVZyV8vnBaXDJ4payJExkQPlLaxmtP iaxAjc7KCab8cCe5b42+XAPgdasTJexZ2RFNPZX3T0aGJo+voQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXgPwYuDggL1VZZ93GA0ubxbk6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNjI3OWQyYTUtNjNjNy0z NDkxLTk5MTQtYjkzNWIxNzQzOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmuLdFmhd5WjkLs41YcuSHRJK9XUFFXDcUHZN5DaJ7AG3PveYXpTm8H 9xC+lor6doVmxVhvhiJnWzMzIPlM7k9fhRMDmEaLRBrx4Puz1qXqc7HHCNMEASjI aBOelQFNsO7BQ0NSUhv43RTbZSGia2nFxQh2QaZMv6HBwo/ZFeG+x3tXb5loX7i3 edquLsc8yzob73ktsF44tVSXUytvGYODUlvxWwMS+EIJX2det7CYawQOBxBYXabm eIRnkJ118itBIA/+l2GFlxm5HjajoqEH6pTSkr7SPgM1t0cusmC6UjCIr1rXgyNN XKqXpLbAqlI1Z+XJCBzzyOpSJ/1GQdc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:51:21 2025 by rpki-client