$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa File: a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa (raw, json) Hash identifier: CnKF7ZZkk8XfOYkYnjd+4k4wqDfvLXDB50Pw2sdN85s= Subject key identifier: 20:0E:3A:52:F4:70:5F:C9:06:11:3B:2B:F4:55:3E:82:FE:EB:B2:B3 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B5C6C79F701E972CA238F7010 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 137443 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:79:f7:01:e9:72:ca:23:8f:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=c7feaaa5-fb13-45ec-baed-b64a1a8b8e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:71:87:5b:7d:a2:74:09:6f:d0:27:92:c9: 1c:bf:d9:76:3e:f5:0c:a7:bc:ec:85:7d:aa:21:a0: d9:78:e4:80:3c:b0:84:61:2b:28:84:3b:d0:ef:55: a7:5b:8c:db:16:4a:5f:6c:f1:03:3f:21:43:af:b1: 22:d0:17:88:e2:96:df:08:38:fc:ae:93:17:3b:6e: ce:bb:cc:de:71:cb:3c:29:5d:7f:c5:a4:32:fc:69: 39:27:d1:d3:c2:35:68:18:52:99:06:05:5c:62:f3: 3d:3c:7b:97:52:ed:8f:08:55:af:20:05:7e:6b:24: a9:ea:c9:6c:0f:b0:f9:7e:28:9c:a5:e5:d9:1d:23: b9:61:e5:a8:cf:4c:3d:8f:ad:0f:4b:2a:0a:2f:ec: c1:9a:97:f9:17:15:5d:a7:12:ca:04:72:ff:cd:62: 70:3c:1c:58:0c:20:cd:98:91:b7:06:e7:7b:4e:fe: 94:47:f4:b4:44:00:5f:1b:ab:7a:c9:3f:6a:fc:fd: bb:b8:7e:45:8f:1c:32:dd:21:74:0c:f3:2a:6a:0b: b7:82:fd:86:91:c5:5e:95:7d:b9:4a:b1:13:f9:6c: 36:5b:d8:2c:aa:0e:96:22:b3:8a:30:f7:ee:3b:3c: 9c:05:a4:25:9d:89:f0:24:a1:46:32:99:e7:72:08: 5e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0E:3A:52:F4:70:5F:C9:06:11:3B:2B:F4:55:3E:82:FE:EB:B2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9c:37:cf:9a:65:36:de:cc:d7:78:1e:ab:42:6b:5a:be:d2: 5e:e4:0a:d2:32:16:2f:31:e3:b0:2b:06:55:2e:74:c4:cf:35: c1:6a:68:ec:54:c3:99:e7:82:66:ef:a0:a6:7f:66:f7:c8:b3: 89:10:47:63:1d:4b:d6:04:84:48:22:76:38:cb:91:68:5b:3b: 4f:90:8a:b9:59:f4:6a:03:ec:18:85:45:f2:d8:de:d1:bb:1e: 7b:51:96:a1:52:29:6c:8c:71:d1:6b:b1:f8:5f:7e:61:45:2e: 6b:d2:87:cc:36:a1:02:44:fa:59:ae:ce:09:97:17:cb:a5:58: 97:42:4a:d8:0a:6d:78:55:98:85:54:5a:4e:d7:1c:75:8e:4a: d2:b8:29:f2:1d:51:87:51:b8:b5:0c:1a:7b:71:07:d9:45:14: f7:b7:56:db:8a:b4:0b:89:53:f1:b8:b2:59:3d:33:3d:a0:9f: 04:a1:81:1c:18:df:5b:1f:b2:c9:17:31:0d:a2:c1:4c:b7:ba: 91:11:30:e4:5b:5e:e8:3e:d9:6c:19:a3:0d:ae:47:f4:e9:e8: dc:2c:f0:8b:f2:ec:47:34:f3:8d:5b:3e:7b:a4:e6:74:6d:62: 52:b5:81:66:b5:a9:83:e9:61:d4:38:ea:a3:41:5f:c3:62:db: f6:eb:b5:52 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtcbHn3AelyyiOPcBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk YzdmZWFhYTUtZmIxMy00NWVjLWJhZWQtYjY0YTFhOGI4ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt55xh1t9onQJb9Ankskcv9l2PvUMp7zshX2q IaDZeOSAPLCEYSsohDvQ71WnW4zbFkpfbPEDPyFDr7Ei0BeI4pbfCDj8rpMXO27O u8zeccs8KV1/xaQy/Gk5J9HTwjVoGFKZBgVcYvM9PHuXUu2PCFWvIAV+aySp6sls D7D5fiicpeXZHSO5YeWoz0w9j60PSyoKL+zBmpf5FxVdpxLKBHL/zWJwPBxYDCDN mJG3Bud7Tv6UR/S0RABfG6t6yT9q/P27uH5Fjxwy3SF0DPMqagu3gv2GkcVelX25 SrET+Ww2W9gsqg6WIrOKMPfuOzycBaQlnYnwJKFGMpnncghe9QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCAOOlL0cF/JBhE7K/RVPoL+67KzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYThiODlhODEtZWZkNy0z YzAzLTlmN2EtNzdjZThlOTk3ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAF2cN8+aZTbezNd4HqtCa1q+0l7kCtIyFi8x47Ar BlUudMTPNcFqaOxUw5nngmbvoKZ/ZvfIs4kQR2MdS9YEhEgidjjLkWhbO0+QirlZ 9GoD7BiFRfLY3tG7HntRlqFSKWyMcdFrsfhffmFFLmvSh8w2oQJE+lmuzgmXF8ul WJdCStgKbXhVmIVUWk7XHHWOStK4KfIdUYdRuLUMGntxB9lFFPe3VtuKtAuJU/G4 slk9Mz2gnwShgRwY31sfsskXMQ2iwUy3upERMORbXug+2WwZow2uR/Tp6Nws8Ivy 7Ec0841bPnuk5nRtYlK1gWa1qYPpYdQ46qNBX8Ni2/brtVI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:33:27 2025 by rpki-client