$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa File: 4b0406a0-d232-31f1-bb38-282832e4317a.roa (raw, json) Hash identifier: KeknY1ZAwrZ07LT4ydrsl24WgspTQrSBMzGStMiYd9U= Subject key identifier: 95:FC:98:4A:39:13:BF:87:29:4E:4F:DE:00:DE:18:2D:B0:DF:8F:E3 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F4976863EC18D13A2BCEDEB80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 137443 IP address blocks: 198.44.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:86:3e:c1:8d:13:a2:bc:ed:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4eef033-4c98-4370-8b9a-6792add5cbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:8f:2d:65:48:9f:5c:61:c7:59:fd:d4:24: 81:87:af:4d:4a:17:1f:fe:7f:67:40:b4:e4:df:fb: 16:62:af:30:76:9a:60:06:aa:f1:72:70:ce:4f:e8: c0:0f:7f:3e:7b:86:03:96:a9:91:2e:f7:d2:ed:40: b0:8c:a7:1b:b9:58:87:9a:ba:1f:4c:37:ab:23:4e: 8b:2e:ff:11:c7:bc:13:ed:ee:5d:ab:cb:58:17:14: 12:b6:d0:c5:c9:89:f3:f9:9d:3f:30:c3:d7:61:ed: 9c:f0:30:f1:ef:8f:6f:b1:3d:ed:81:ed:72:32:8d: a4:47:e7:64:04:0e:d3:14:1e:ea:bf:7a:5d:30:50: d6:d3:7a:50:62:25:34:a2:b3:01:1e:84:3d:8e:31: 77:37:c1:d1:1c:ed:93:05:5f:30:93:db:a7:8a:95: cb:a3:d9:36:6d:1e:5b:14:a9:d0:c3:cd:0f:05:c9: 83:b9:fa:bb:f2:13:66:ed:0e:a5:ce:66:bf:e1:d4: 61:50:62:ef:c5:c4:a1:cb:4f:7c:b7:f2:1d:c5:b0: 9a:df:df:a6:b4:07:b6:84:c6:5d:6c:28:33:9c:30: d2:be:49:65:f8:b2:94:1e:68:0f:96:be:16:07:3a: 9f:e4:67:38:13:56:82:87:b3:b4:ef:1b:11:7e:8f: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FC:98:4A:39:13:BF:87:29:4E:4F:DE:00:DE:18:2D:B0:DF:8F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:22:29:e5:41:00:96:3a:de:67:67:20:7d:de:b0:e2:c1:b7: fb:d1:62:b1:b0:fa:5f:a7:e8:b8:0e:c3:bd:07:a3:a8:c9:64: 02:63:17:42:40:ae:d4:06:aa:c3:b7:8e:34:4f:32:e6:2f:10: aa:64:99:42:e8:c6:ff:59:65:cc:ca:62:19:71:24:02:44:77: 21:4e:0b:fb:28:f5:aa:cb:0c:39:be:e4:f8:cb:24:47:f1:b0: f2:23:f9:30:2b:f0:a3:49:a7:c8:8c:b1:bb:5d:e3:23:36:5e: c5:83:7a:28:38:72:37:2c:4b:22:9d:af:f3:60:62:2f:43:9e: 11:08:34:2e:ac:cd:d1:cc:73:09:7c:9f:5a:47:76:ee:eb:9b: 14:46:1a:71:1d:0c:65:b3:f3:b9:e1:30:ea:6a:b3:0a:8a:15: cb:1a:4a:59:9d:9f:24:69:a6:99:73:62:91:fc:8f:db:76:e8: 5d:d2:12:89:c3:9a:46:a4:23:b1:7c:d3:94:f7:d1:3e:c8:99: ce:11:47:eb:72:e4:79:c4:ea:60:bb:30:e8:2f:44:4b:e6:35: 4e:15:92:63:5e:d3:f3:24:c6:ef:12:a9:2c:de:3f:86:26:4e: cc:6c:4e:12:bc:81:25:79:1f:80:f8:a5:76:5e:01:2a:fc:dd: 80:a0:be:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdoY+wY0Torzt64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRlZWYwMzMtNGM5OC00MzcwLThiOWEtNjc5MmFkZDVjYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CPLWVIn1xhx1n91CSBh69NShcf/n9nQLTk 3/sWYq8wdppgBqrxcnDOT+jAD38+e4YDlqmRLvfS7UCwjKcbuViHmrofTDerI06L Lv8Rx7wT7e5dq8tYFxQSttDFyYnz+Z0/MMPXYe2c8DDx749vsT3tge1yMo2kR+dk BA7TFB7qv3pdMFDW03pQYiU0orMBHoQ9jjF3N8HRHO2TBV8wk9unipXLo9k2bR5b FKnQw80PBcmDufq78hNm7Q6lzma/4dRhUGLvxcShy098t/IdxbCa39+mtAe2hMZd bCgznDDSvkll+LKUHmgPlr4WBzqf5Gc4E1aCh7O07xsRfo+CvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX8mEo5E7+HKU5P3gDeGC2w34/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGIwNDA2YTAtZDIzMi0z MWYxLWJiMzgtMjgyODMyZTQzMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoiKeVBAJY63mdnIH3esOLBt/vRYrGw+l+n6LgOw70Ho6jJZAJjF0JA rtQGqsO3jjRPMuYvEKpkmULoxv9ZZczKYhlxJAJEdyFOC/so9arLDDm+5PjLJEfx sPIj+TAr8KNJp8iMsbtd4yM2XsWDeig4cjcsSyKdr/NgYi9DnhEINC6szdHMcwl8 n1pHdu7rmxRGGnEdDGWz87nhMOpqswqKFcsaSlmdnyRppplzYpH8j9t26F3SEonD mkakI7F805T30T7Imc4RR+ty5HnE6mC7MOgvREvmNU4VkmNe0/Mkxu8SqSzeP4Ym TsxsThK8gSV5H4D4pXZeASr83YCgvnQ= -----END CERTIFICATE-----Generated at Fri Sep 25 18:58:46 2026 by rpki-client