$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa File: c4213251-3b00-393f-bb99-fb92be27e7c1.roa (raw, json) Hash identifier: h3OYVnGcTJEW02+R6sTIFBeD0xDj9QcMaORxmLkVbzc= Subject key identifier: 49:24:D1:EC:97:8F:25:B0:E8:25:38:D3:6B:70:AC:B0:28:AD:FB:21 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584A74B5E05832D3DB2D3F8FC200 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 134365 IP address blocks: 107.151.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:e0:58:32:d3:db:2d:3f:8f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=c92e6035-4c0e-4bb2-b633-3f15930bbc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:14:3e:12:33:eb:f8:6d:8b:76:f0:99:76:71: 06:66:b5:89:41:94:e6:c7:27:e6:6e:52:3d:c2:fe: bf:b6:dd:ae:82:3e:81:a9:bf:78:c1:d1:27:f1:13: 36:45:1f:1f:04:91:9d:88:e6:53:28:df:51:0b:41: 10:ff:97:b3:e3:2c:c8:63:87:df:a6:4c:a3:ce:c7: 56:47:02:20:4f:9b:08:1b:ae:2f:bb:29:50:04:49: c0:90:01:bf:e6:e0:45:94:92:55:00:a9:c3:85:a8: 36:1a:35:8d:b3:b8:18:2e:80:8b:39:83:3e:db:06: 59:b0:e4:ff:81:fd:99:48:a0:46:a2:4c:a1:9b:a1: d5:98:f7:e5:5c:00:24:62:8e:36:49:1f:96:96:12: 68:bb:10:19:9c:63:90:7e:12:2c:8a:a0:ff:38:e5: aa:ed:a2:65:09:10:b7:40:16:ec:91:1a:51:c7:66: 60:eb:00:02:8b:aa:bb:21:48:64:73:bc:a3:da:cf: 6f:8c:d9:23:37:e3:fc:2b:60:ee:76:be:c8:ad:a3: c8:86:a5:43:b6:e3:d1:1f:a3:b5:c0:2b:46:28:8f: 77:40:47:52:78:19:3a:4c:a1:56:6f:2f:05:15:16: 9f:96:8f:ea:ec:b9:19:a8:ae:87:b4:ec:58:57:9a: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:24:D1:EC:97:8F:25:B0:E8:25:38:D3:6B:70:AC:B0:28:AD:FB:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:af:e2:b2:90:69:ff:a4:79:e9:d7:5a:c3:87:91:38:8d:3e: 07:97:c4:20:56:b8:7e:8f:87:41:0a:02:f1:43:54:98:e2:2d: 04:81:f6:35:82:c6:d3:24:97:2c:4e:cb:a1:1d:3c:b5:a5:17: a6:7a:48:a2:c9:6e:63:1a:ff:57:a4:a9:b7:10:b9:26:14:67: 41:55:a3:5e:16:b1:52:03:df:05:31:6b:8f:33:45:9b:0d:78: 3d:ba:c6:7d:00:68:43:59:c3:92:57:f1:d1:ce:24:ad:d7:1b: ce:bd:c0:85:df:e1:3d:43:7d:3a:fb:47:d3:43:73:4c:15:75: c1:6d:f8:c4:02:70:5a:d4:69:6f:5d:cc:dd:44:84:0b:41:e0: 70:07:66:5b:85:cd:db:67:40:1a:1f:a4:30:5c:89:65:04:9f: 54:93:d6:6a:11:62:54:a3:4d:a3:a8:45:ba:39:45:28:cc:6f: 9e:9b:94:85:e4:cf:bf:b5:ea:c4:9c:a2:ca:ea:01:da:6d:6e: 56:8b:42:fb:0e:34:2d:4b:bb:f3:68:2d:03:4a:cf:97:00:ab: 49:e7:46:82:c9:f1:b3:17:a5:42:02:1c:48:40:7e:f3:40:9b: f1:f0:25:06:ea:da:f6:c9:e8:1a:f7:b4:20:2e:46:89:52:73: 7c:6a:d9:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0teBYMtPbLT+PwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk YzkyZTYwMzUtNGMwZS00YmIyLWI2MzMtM2YxNTkzMGJiYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRQ+EjPr+G2LdvCZdnEGZrWJQZTmxyfmblI9 wv6/tt2ugj6Bqb94wdEn8RM2RR8fBJGdiOZTKN9RC0EQ/5ez4yzIY4ffpkyjzsdW RwIgT5sIG64vuylQBEnAkAG/5uBFlJJVAKnDhag2GjWNs7gYLoCLOYM+2wZZsOT/ gf2ZSKBGokyhm6HVmPflXAAkYo42SR+WlhJouxAZnGOQfhIsiqD/OOWq7aJlCRC3 QBbskRpRx2Zg6wACi6q7IUhkc7yj2s9vjNkjN+P8K2Dudr7IraPIhqVDtuPRH6O1 wCtGKI93QEdSeBk6TKFWby8FFRaflo/q7LkZqK6HtOxYV5puOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkk0eyXjyWw6CU402twrLAorfshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYzQyMTMyNTEtM2IwMC0z OTNmLWJiOTktZmI5MmJlMjdlN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOv4rKQaf+keenXWsOHkTiNPgeXxCBWuH6Ph0EKAvFDVJjiLQSB9jWC xtMklyxOy6EdPLWlF6Z6SKLJbmMa/1ekqbcQuSYUZ0FVo14WsVID3wUxa48zRZsN eD26xn0AaENZw5JX8dHOJK3XG869wIXf4T1DfTr7R9NDc0wVdcFt+MQCcFrUaW9d zN1EhAtB4HAHZluFzdtnQBofpDBciWUEn1ST1moRYlSjTaOoRbo5RSjMb56blIXk z7+16sScosrqAdptblaLQvsONC1Lu/NoLQNKz5cAq0nnRoLJ8bMXpUICHEhAfvNA m/HwJQbq2vbJ6Br3tCAuRolSc3xq2Zc= -----END CERTIFICATE-----Generated at Fri Aug 8 19:33:15 2025 by rpki-client