$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa File: 31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa (raw, json) Hash identifier: X3LQC8Lz79cchgooFoYgFZ0aOxWx5cukTA4hyqA/aX4= Subject key identifier: 6C:01:A4:AC:DC:45:49:80:49:34:A3:C1:DF:36:69:A2:A8:21:9F:38 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B92DD9130E1993CD7B0A70960 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 29752 IP address blocks: 23.251.35.0/24 maxlen: 24 107.151.194.0/24 maxlen: 24 198.44.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:91:30:e1:99:3c:d7:b0:a7:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=cff38650-1963-406d-8b96-a6f1dfb763df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:dc:39:34:08:e4:9e:0a:b2:31:8e:00:96: 3f:d9:bd:1e:74:f6:af:a8:85:ac:2e:fc:77:b7:c7: a2:a3:67:c1:0e:66:0e:ca:df:3c:72:e7:52:85:94: 14:89:46:80:52:c4:94:6e:96:0a:79:c9:d4:c7:09: 2f:0a:dc:86:45:b6:05:af:83:c3:04:d9:89:a6:e9: 41:6e:db:50:aa:75:32:2c:d4:22:9e:11:2a:54:26: 31:d6:f1:cb:6c:71:33:83:24:d0:01:e2:28:46:6c: 54:f1:8f:dc:30:ad:f2:0e:e3:63:f6:c8:d0:9e:9b: ea:3f:e7:27:0e:ac:8b:30:33:1e:db:dd:89:a2:50: 9e:80:bd:6e:4d:2e:bb:c9:64:12:e8:e8:54:5b:92: e6:ef:1e:47:a7:3c:78:19:20:a9:c6:ee:e6:4c:dc: 92:2d:ea:fd:94:5d:2c:cf:be:3f:73:f1:04:b8:ea: 4e:d9:7d:97:d3:67:d4:ae:8c:c5:e2:aa:25:d2:fb: 1c:81:cd:68:08:61:c6:f4:ee:f5:91:4c:61:0a:07: 53:0d:22:a2:9a:86:24:a9:2a:62:78:74:42:d1:21: 73:66:99:5c:2a:cc:d9:52:77:9e:d0:11:52:c9:a2: dc:cf:89:64:1c:9f:78:a2:60:f2:63:6b:66:fd:59: 72:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:01:A4:AC:DC:45:49:80:49:34:A3:C1:DF:36:69:A2:A8:21:9F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.35.0/24 107.151.194.0/24 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5d:d9:d5:38:18:69:8d:f6:ec:67:ba:d5:61:b2:7a:67:75: db:e0:f5:1a:b3:57:c7:19:27:1c:f9:2c:71:c9:e0:73:1a:e9: aa:bd:9e:03:a9:42:3b:db:7a:a6:1a:e5:49:ab:76:23:60:4b: c4:79:3c:da:71:e8:00:a8:cc:f0:40:63:ba:c0:d0:1d:8b:2e: d8:ad:bb:db:29:7f:03:91:5e:6c:66:c1:34:18:38:65:82:6e: 39:e8:3b:13:09:0e:d4:7c:90:33:b1:2f:c2:f2:2b:78:97:ef: 88:3e:17:48:17:4b:31:d7:13:a2:cb:94:67:66:0e:ae:02:c4: 96:26:67:74:12:6b:d5:b6:41:bb:b1:8c:19:85:87:50:06:ad: f6:ff:5a:9c:a9:74:f8:ac:77:6d:ef:1a:56:92:6d:50:be:18: 67:f1:b6:a8:4e:2a:38:b7:b3:8f:52:71:07:f6:02:b5:ac:23: 9e:35:ed:61:12:c1:80:61:41:59:91:55:2e:7a:b9:fc:6d:25: 05:9d:2b:1e:a1:99:61:e7:25:01:33:66:be:60:93:cd:c1:44: 36:76:d8:9b:f1:29:ab:38:e0:a6:58:cf:53:b0:ba:e4:69:71: 93:de:7f:9a:86:52:1f:1f:1f:e5:08:a3:63:a0:cf:50:9f:03: ad:d9:09:be -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuS3ZEw4Zk817CnCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Y2ZmMzg2NTAtMTk2My00MDZkLThiOTYtYTZmMWRmYjc2M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBTcOTQI5J4KsjGOAJY/2b0edPavqIWsLvx3 t8eio2fBDmYOyt88cudShZQUiUaAUsSUbpYKecnUxwkvCtyGRbYFr4PDBNmJpulB bttQqnUyLNQinhEqVCYx1vHLbHEzgyTQAeIoRmxU8Y/cMK3yDuNj9sjQnpvqP+cn DqyLMDMe292JolCegL1uTS67yWQS6OhUW5Lm7x5Hpzx4GSCpxu7mTNySLer9lF0s z74/c/EEuOpO2X2X02fUrozF4qol0vscgc1oCGHG9O71kUxhCgdTDSKimoYkqSpi eHRC0SFzZplcKszZUnee0BFSyaLcz4lkHJ94omDyY2tm/VlydwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGwBpKzcRUmASTSjwd82aaKoIZ84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzFjMGE1ZDgtM2VkZS0z MTk5LWJhZmUtZjZhNzEzNGQ5M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF/sjAwQA a5fCAwQCxiysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEpd2dU4GGmN9uxnutVhsnpnddvg9RqzV8cZJxz5 LHHJ4HMa6aq9ngOpQjvbeqYa5UmrdiNgS8R5PNpx6ACozPBAY7rA0B2LLtitu9sp fwORXmxmwTQYOGWCbjnoOxMJDtR8kDOxL8LyK3iX74g+F0gXSzHXE6LLlGdmDq4C xJYmZ3QSa9W2QbuxjBmFh1AGrfb/WpypdPisd23vGlaSbVC+GGfxtqhOKji3s49S cQf2ArWsI5417WESwYBhQVmRVS56ufxtJQWdKx6hmWHnJQEzZr5gk83BRDZ22Jvx Kas44KZYz1OwuuRpcZPef5qGUh8fH+UIo2Ogz1CfA63ZCb4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:14 2025 by rpki-client