$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa File: c4213251-3b00-393f-bb99-fb92be27e7c1.roa (raw, json) Hash identifier: nBEgYL1N4ZT5ho6SuwST9CaLfxnNakLswygnDbxfyW8= Subject key identifier: 7E:41:5E:F0:86:0E:F1:3C:6E:3F:E1:D5:3A:01:D0:E2:D2:B1:FB:23 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584EA79748121068A3283FA94280 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 134365 IP address blocks: 107.151.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:48:12:10:68:a3:28:3f:a9:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a6711544-350d-41eb-90c5-9cf1a8d8cd96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b3:00:1d:c8:63:9e:29:84:df:0a:3f:74:34: e1:06:e1:1a:c0:c0:2c:af:39:12:fb:c1:83:fa:78: c8:96:5d:af:0f:34:87:8e:20:f7:84:39:93:3f:81: f7:49:5e:bb:d4:89:57:14:6e:45:41:b0:36:fd:27: b8:62:c2:5a:b9:1b:8b:c7:a3:9b:f1:e3:e3:64:fb: 93:d9:7b:b6:38:56:b2:12:9b:de:bc:5e:76:18:3a: 3c:23:43:e3:b9:32:9c:35:14:f9:c5:36:41:3f:f1: 24:2e:2b:b8:76:6c:e9:86:f3:43:ea:69:40:49:07: 28:ad:6a:98:d9:34:73:7c:df:e8:6e:a3:fc:97:d2: b4:f5:20:ef:03:c1:15:68:ab:05:4d:07:a3:bc:7f: 76:23:e6:7d:23:40:d2:f4:8a:59:45:11:10:3d:65: 32:d6:d0:df:7c:cd:43:c7:d6:45:47:0a:ae:23:04: 76:d4:ad:cf:eb:29:5b:56:7d:77:68:d2:8d:67:d3: 4a:8a:a8:43:d8:dc:5b:d1:ff:3b:bb:6c:e0:eb:89: b2:5b:96:28:47:d5:98:09:dc:20:19:2a:be:15:a0: 7b:ed:68:78:b8:27:da:89:27:f5:e1:5c:4c:30:82: 7a:86:9d:73:96:04:32:99:19:dd:a7:fd:6f:ce:1b: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:41:5E:F0:86:0E:F1:3C:6E:3F:E1:D5:3A:01:D0:E2:D2:B1:FB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:17:b1:20:1b:21:bd:93:f3:5e:1e:11:f2:45:63:a3:34:73: 7f:dd:6f:43:97:da:45:4c:b1:50:9a:fa:f0:76:f2:27:56:36: 4c:57:5d:98:77:35:a4:a5:bb:46:a5:3e:18:be:df:7a:54:46: da:26:3d:da:0a:a8:bc:25:4a:db:d6:5f:91:9b:4a:61:b4:23: 94:1b:81:8e:b2:93:55:97:fd:5d:ed:1d:ba:7c:fb:cc:b7:f6: 0a:33:32:64:d6:14:f8:7a:c3:30:4a:e6:24:11:2f:b8:14:27: 28:bb:f3:67:73:7f:ec:16:59:48:13:83:ff:10:d7:a4:b0:70: d4:78:b0:0a:9a:4f:81:c1:fb:79:40:71:33:f9:be:2f:cd:fb: 73:69:e8:84:ae:17:76:69:92:c6:c7:b4:70:a5:6f:1a:6f:c3: 74:60:0a:09:d1:be:f5:ea:f0:5b:bf:de:9b:58:74:2e:ce:85: fe:7c:75:ab:37:cb:c5:5e:b8:a2:28:c2:95:c4:1c:92:41:24: f3:f8:22:45:13:a6:30:cb:31:d8:c8:12:7a:a7:46:b0:b0:5b: d6:08:88:91:ae:68:f9:4b:89:fb:c4:8b:92:c0:75:f7:a5:2b: 7c:b6:09:f2:b9:cc:e4:1c:7e:0b:42:55:0e:72:94:f1:cf:e7: 81:df:34:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl0gSEGijKD+pQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTY3MTE1NDQtMzUwZC00MWViLTkwYzUtOWNmMWE4ZDhjZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rMAHchjnimE3wo/dDThBuEawMAsrzkS+8GD +njIll2vDzSHjiD3hDmTP4H3SV671IlXFG5FQbA2/Se4YsJauRuLx6Ob8ePjZPuT 2Xu2OFayEpvevF52GDo8I0PjuTKcNRT5xTZBP/EkLiu4dmzphvND6mlASQcorWqY 2TRzfN/obqP8l9K09SDvA8EVaKsFTQejvH92I+Z9I0DS9IpZRREQPWUy1tDffM1D x9ZFRwquIwR21K3P6ylbVn13aNKNZ9NKiqhD2Nxb0f87u2zg64myW5YoR9WYCdwg GSq+FaB77Wh4uCfaiSf14VxMMIJ6hp1zlgQymRndp/1vzhvg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5BXvCGDvE8bj/h1ToB0OLSsfsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYzQyMTMyNTEtM2IwMC0z OTNmLWJiOTktZmI5MmJlMjdlN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsXsSAbIb2T814eEfJFY6M0c3/db0OX2kVMsVCa+vB28idWNkxXXZh3 NaSlu0alPhi+33pURtomPdoKqLwlStvWX5GbSmG0I5QbgY6yk1WX/V3tHbp8+8y3 9gozMmTWFPh6wzBK5iQRL7gUJyi782dzf+wWWUgTg/8Q16SwcNR4sAqaT4HB+3lA cTP5vi/N+3Np6ISuF3ZpksbHtHClbxpvw3RgCgnRvvXq8Fu/3ptYdC7Ohf58das3 y8VeuKIowpXEHJJBJPP4IkUTpjDLMdjIEnqnRrCwW9YIiJGuaPlLifvEi5LAdfel K3y2CfK5zOQcfgtCVQ5ylPHP54HfNME= -----END CERTIFICATE-----Generated at Wed Jul 29 05:11:04 2026 by rpki-client