$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8664bab9-f4cb-3429-aa9c-b577fdb1a1a7.roa File: 8664bab9-f4cb-3429-aa9c-b577fdb1a1a7.roa (raw, json) Hash identifier: aiA4nGgbyj0h6zjTuQWobzWGdOaeupQCY2T2JiirC2s= Subject key identifier: CE:AD:5C:3E:71:32:58:77:76:98:E9:E7:81:AD:83:A9:BB:EE:DA:77 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B609CB75756EDCC1FDEE949D0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8664bab9-f4cb-3429-aa9c-b577fdb1a1a7.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 40779 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:b7:57:56:ed:cc:1f:de:e9:49:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=05392f30-4b75-4cae-a336-8bcbebe2d55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:92:fe:c9:dd:f5:7b:29:22:50:dc:9b:f0: 6f:42:26:37:03:bd:27:50:77:20:0a:4e:f4:4b:56: 1c:f6:b6:44:55:5d:e1:28:bf:51:5e:c7:5b:c1:95: e7:3f:a9:1c:21:28:6d:97:82:77:f9:d9:76:61:11: 1d:89:b4:b1:ae:62:50:09:60:d2:6d:4f:00:48:a3: c1:13:f8:a5:6b:3e:1c:0b:6d:cc:26:95:b6:91:a0: 52:b8:58:95:41:a0:75:db:95:20:9c:03:eb:97:c8: 41:9e:c6:e5:a1:b7:13:21:a4:96:4e:34:20:a1:b3: a4:0d:6b:b4:a2:51:6a:f3:67:58:85:52:ae:a7:e6: 10:d0:21:d8:be:78:87:07:4b:4e:88:ff:c9:ca:9c: d4:a3:8d:b0:f9:7d:b7:92:0d:36:29:49:89:7d:83: 9c:7f:4d:9e:ab:a0:fd:6c:22:9a:70:7d:19:ae:e5: 6c:28:af:8f:d1:08:c8:c0:86:fd:cc:d5:fe:4e:69: 30:71:24:ff:fe:d7:e9:af:c6:72:5f:dc:9c:84:89: 90:07:b7:a7:ec:16:67:6f:44:5b:15:5d:78:3b:1c: 42:22:b5:86:f7:aa:55:bc:c9:fe:8c:24:6b:33:8e: 3c:8a:58:56:0c:07:82:5d:d1:54:01:cf:9f:63:13: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AD:5C:3E:71:32:58:77:76:98:E9:E7:81:AD:83:A9:BB:EE:DA:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8664bab9-f4cb-3429-aa9c-b577fdb1a1a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:be:3d:f4:6e:f2:bb:b3:fc:47:cc:be:01:1f:34:09:12:96: e2:08:a4:e4:c8:af:48:61:b9:ee:21:76:fc:45:0f:32:cb:db: 34:09:ca:57:58:20:93:85:be:af:1e:9f:d8:ba:e5:03:f5:86: 43:9c:19:aa:88:2a:26:ad:e3:8d:19:43:35:a9:f5:68:22:cd: 24:a4:f6:59:f8:f5:dd:64:b8:70:65:10:07:e5:0e:0c:e9:78: 39:b3:35:a3:33:d2:d3:e4:11:23:92:ef:b7:b8:ab:65:46:7f: c9:58:11:ab:df:88:5c:a7:ab:8a:5d:c6:ca:4c:5f:89:91:6b: 48:38:84:a6:a4:cf:6a:83:95:e3:c3:a1:71:13:1e:44:9a:2a: 9b:d4:c4:d9:bf:9c:07:e4:3c:a9:ce:8f:a1:52:d9:62:19:10: 2f:2e:d3:bb:39:6c:47:77:9f:37:25:a9:92:2f:3a:e9:a8:04: ce:c9:b9:d1:aa:e4:3f:bb:a0:a8:a2:93:46:55:aa:7e:83:0c: 52:44:bd:16:05:20:89:18:33:20:c7:5e:c3:97:34:03:2b:2d: f2:ea:19:63:3e:c3:09:7d:6e:9b:8c:96:70:d4:76:cd:88:89: 5b:e0:6f:a4:94:b3:8a:55:79:e0:4a:8c:98:0a:6e:f2:29:12: 6e:bc:94:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnLdXVu3MH97pSdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MDUzOTJmMzAtNGI3NS00Y2FlLWEzMzYtOGJjYmViZTJkNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvKS/snd9XspIlDcm/BvQiY3A70nUHcgCk70 S1Yc9rZEVV3hKL9RXsdbwZXnP6kcIShtl4J3+dl2YREdibSxrmJQCWDSbU8ASKPB E/ilaz4cC23MJpW2kaBSuFiVQaB125UgnAPrl8hBnsblobcTIaSWTjQgobOkDWu0 olFq82dYhVKup+YQ0CHYvniHB0tOiP/JypzUo42w+X23kg02KUmJfYOcf02eq6D9 bCKacH0ZruVsKK+P0QjIwIb9zNX+TmkwcST//tfpr8ZyX9ychImQB7en7BZnb0Rb FV14OxxCIrWG96pVvMn+jCRrM448ilhWDAeCXdFUAc+fYxMOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6tXD5xMlh3dpjp54Gtg6m77tp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODY2NGJhYjktZjRjYi0z NDI5LWFhOWMtYjU3N2ZkYjFhMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK+PfRu8ruz/EfMvgEfNAkSluIIpOTIr0hhue4hdvxFDzLL2zQJyldY IJOFvq8en9i65QP1hkOcGaqIKiat440ZQzWp9WgizSSk9ln49d1kuHBlEAflDgzp eDmzNaMz0tPkESOS77e4q2VGf8lYEavfiFynq4pdxspMX4mRa0g4hKakz2qDlePD oXETHkSaKpvUxNm/nAfkPKnOj6FS2WIZEC8u07s5bEd3nzclqZIvOumoBM7JudGq 5D+7oKiik0ZVqn6DDFJEvRYFIIkYMyDHXsOXNAMrLfLqGWM+wwl9bpuMlnDUds2I iVvgb6SUs4pVeeBKjJgKbvIpEm68lKw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:27 2025 by rpki-client