$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa File: 85b18b62-aeab-38eb-af37-ca27cd92722d.roa (raw, json) Hash identifier: KheQ9RgljPMQDDrxY5q/+4kSZdM8d0BSOgJNjO6gmrg= Subject key identifier: 5E:A0:F3:DD:F2:AA:87:B6:40:DA:F0:D8:EE:8C:BF:11:B1:B7:D1:61 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584C6E218C8CD294BEF090AE6100 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 107.151.224.0/24 maxlen: 24 107.151.225.0/24 maxlen: 24 107.151.226.0/24 maxlen: 24 107.151.227.0/24 maxlen: 24 107.151.228.0/24 maxlen: 24 107.151.229.0/24 maxlen: 24 107.151.230.0/24 maxlen: 24 107.151.231.0/24 maxlen: 24 107.151.232.0/24 maxlen: 24 107.151.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:8c:8c:d2:94:be:f0:90:ae:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=60bcf61e-8920-4c07-80b6-012600e62c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:f4:b4:a9:05:d4:4e:d1:17:49:48:3f:0f: 6e:57:97:a9:a2:6e:de:ad:59:db:2d:25:f3:de:f1: 5b:94:d6:44:dd:8e:c5:8f:3b:de:1f:8e:4f:29:63: d4:98:60:b4:52:10:a7:ed:24:4a:64:d3:0f:3b:dd: 6c:63:46:4e:c2:16:3b:73:5c:41:37:db:d5:9d:c8: 41:0a:09:8c:e4:01:e7:88:8b:d9:e7:1f:29:3c:46: 08:12:66:3c:d4:c7:3d:cd:fe:7a:d1:1f:a0:e8:8a: d0:ae:66:96:5f:77:7b:a7:f0:72:df:c4:7f:98:18: 10:e8:72:65:ed:cf:72:68:94:01:25:f7:64:f1:6c: 8f:0a:8e:c5:16:09:ca:97:19:6b:cc:0c:5a:51:7a: 4d:b4:6b:35:e0:02:63:df:ea:65:f1:92:57:30:8a: 5f:ce:a9:cd:f6:13:ff:96:b2:e6:ff:2c:8a:f3:ff: 45:72:aa:39:e5:34:68:20:17:f3:74:a5:bb:5a:c7: 85:5b:3b:b9:b2:e4:9a:71:d6:4a:16:70:69:9e:a7: 22:7c:da:37:dc:b2:78:74:3d:a4:75:44:a8:a4:31: 64:dc:4c:91:3e:0b:34:fa:5a:be:3b:c0:67:06:67: 77:10:f3:0f:39:90:9c:be:56:67:b3:a9:49:2e:b5: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A0:F3:DD:F2:AA:87:B6:40:DA:F0:D8:EE:8C:BF:11:B1:B7:D1:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.224.0-107.151.233.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:86:b7:10:67:95:a4:c1:d8:2c:a2:f8:b6:0d:74:0d:7e:fb: be:51:68:b1:07:b9:e6:04:db:9d:3c:e5:f3:35:ab:07:5b:a4: cc:ea:0b:cd:ea:66:24:3d:52:21:b2:c3:b0:d3:14:11:70:4b: e6:b7:d3:d8:82:99:5b:30:c5:01:14:54:f1:b5:99:86:b3:93: 9b:67:76:eb:e0:2c:ee:61:57:12:78:93:c0:ef:8e:02:c8:57: 9e:ca:6f:a1:93:0f:ad:63:e1:9e:82:ba:7f:9f:88:37:aa:6f: fa:0e:bd:20:23:e9:b0:3b:ad:35:14:a6:5d:14:76:02:0c:66: 61:55:dc:f4:9b:7a:0c:88:fd:0c:f0:cd:c1:d8:3f:34:21:a8: fa:25:8d:92:35:e8:db:c6:06:dc:f5:e4:40:51:7d:01:68:ba: 1d:50:6a:19:57:69:de:99:28:58:40:c5:12:63:dc:f7:36:70: 9a:82:b0:13:ef:4f:50:2e:1a:90:17:01:85:2c:03:b1:5f:57: 35:c2:f3:ce:aa:f4:1b:77:47:35:11:d9:00:7e:73:c5:b6:21: e5:21:6a:7e:d8:9a:84:b1:1c:cd:e4:2e:2f:0a:a7:ce:7f:b1: 21:91:96:a3:02:51:e0:4e:79:ce:1c:f2:9c:6e:0c:35:cb:e1: 38:59:5c:05 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWExuIYyM0pS+8JCuYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk NjBiY2Y2MWUtODkyMC00YzA3LTgwYjYtMDEyNjAwZTYyYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRb0tKkF1E7RF0lIPw9uV5epom7erVnbLSXz 3vFblNZE3Y7FjzveH45PKWPUmGC0UhCn7SRKZNMPO91sY0ZOwhY7c1xBN9vVnchB CgmM5AHniIvZ5x8pPEYIEmY81Mc9zf560R+g6IrQrmaWX3d7p/By38R/mBgQ6HJl 7c9yaJQBJfdk8WyPCo7FFgnKlxlrzAxaUXpNtGs14AJj3+pl8ZJXMIpfzqnN9hP/ lrLm/yyK8/9Fcqo55TRoIBfzdKW7WseFWzu5suSacdZKFnBpnqcifNo33LJ4dD2k dUSopDFk3EyRPgs0+lq+O8BnBmd3EPMPOZCcvlZns6lJLrX+lwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFF6g893yqoe2QNrw2O6MvxGxt9FhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODViMThiNjItYWVhYi0z OGViLWFmMzctY2EyN2NkOTI3MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVrl+AD BAFrl+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAm4a3EGeVpMHYLKL4tg10DX77vlFosQe55gTbnTzl8zWr B1ukzOoLzepmJD1SIbLDsNMUEXBL5rfT2IKZWzDFARRU8bWZhrOTm2d26+As7mFX EniTwO+OAshXnspvoZMPrWPhnoK6f5+IN6pv+g69ICPpsDutNRSmXRR2AgxmYVXc 9Jt6DIj9DPDNwdg/NCGo+iWNkjXo28YG3PXkQFF9AWi6HVBqGVdp3pkoWEDFEmPc 9zZwmoKwE+9PUC4akBcBhSwDsV9XNcLzzqr0G3dHNRHZAH5zxbYh5SFqftiahLEc zeQuLwqnzn+xIZGWowJR4E55zhzynG4MNcvhOFlcBQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:15:59 2026 by rpki-client