$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa File: b38f9546-1b60-3c50-9434-3b0f45b90b58.roa (raw, json) Hash identifier: CwR3ogmznYahMsuPDM/h89c7TgebZ/qQ0jcNC9jhMvM= Subject key identifier: EB:89:3B:D6:14:84:EC:22:3A:CF:78:1D:9A:51:CF:ED:30:8D:70:D3 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B3556F29D511AEF2B7356C480 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 400866 IP address blocks: 198.44.161.0/24 maxlen: 24 198.44.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f2:9d:51:1a:ef:2b:73:56:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=50dac180-af1a-4860-bf6d-8137becbf5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:36:71:8b:8a:ff:0e:ce:88:9a:40:4f:94: fe:7d:57:87:22:0d:4f:fc:ff:f0:cd:b6:79:78:d2: 98:19:ad:60:8e:c1:6c:76:3b:f0:18:a2:48:39:c8: 26:57:73:b3:ca:1b:ee:36:3a:64:11:2e:e8:23:93: 9b:41:08:6c:70:97:d2:fe:be:e0:6e:6a:d3:3a:52: 40:e7:10:92:53:68:f6:43:d5:d6:e3:53:45:4f:c3: 67:fd:be:26:c0:f6:4b:50:f4:da:4a:21:36:be:43: d1:3a:1b:45:1b:4f:fc:ad:f1:00:b1:94:83:be:c8: 32:2d:e7:65:bd:27:88:29:a7:b5:6b:3d:8b:8f:3e: c2:ab:cc:df:6f:2f:14:aa:9b:a5:b7:2e:4e:1d:ec: 31:38:ee:2b:f5:47:c0:af:c6:a7:0d:6f:8d:5a:89: be:81:f2:17:5a:01:83:b5:a3:b2:0d:39:83:fe:92: 2f:c6:50:70:ee:3f:2b:e6:36:d8:00:26:b6:9d:d0: 5e:7b:bb:22:ef:21:e6:20:ed:83:b9:a5:42:21:e2: cb:b1:2f:3a:26:aa:8e:07:f4:f9:c5:13:08:91:96: 18:01:7b:89:03:5d:81:a8:c0:a3:56:c9:4a:dc:a5: 01:34:bb:97:fc:af:d6:df:03:dd:ff:d3:b7:d6:f3: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:89:3B:D6:14:84:EC:22:3A:CF:78:1D:9A:51:CF:ED:30:8D:70:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b38f9546-1b60-3c50-9434-3b0f45b90b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.161.0-198.44.162.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b2:2f:db:fb:43:25:fb:91:af:f4:05:ee:91:c7:0c:bd:fd: 65:7c:93:85:b4:c9:4d:3c:7d:52:59:f5:92:f4:32:ee:de:86: 10:8f:c4:fc:f2:53:76:45:c8:42:30:d8:3e:84:51:3e:3b:bb: 10:99:8e:b3:67:68:a2:ea:87:57:1d:7c:a5:b6:fa:be:85:86: 89:f5:48:88:77:83:ae:ca:bb:d3:fd:02:34:a9:56:49:58:2f: 82:0f:ca:c0:fc:b2:dc:da:5a:4c:5c:45:47:a4:2d:39:73:7d: 3f:bd:ba:85:02:e1:2b:3e:8e:25:81:6c:96:0e:b7:17:b8:0a: 0b:20:d8:4c:3f:7b:b1:8c:45:44:dd:9d:b4:75:ce:7e:5a:1e: 18:8c:33:c2:8a:02:86:db:b3:ed:3b:42:ec:0f:fc:c1:49:cc: 99:60:d8:96:0d:12:33:7e:ca:7f:64:cd:b7:a2:3c:83:98:53: 4a:16:7f:0a:de:2c:85:0a:ed:4a:19:c1:96:9f:f3:8f:ef:16: 10:6c:bd:ea:ea:d4:75:84:04:bd:46:ad:d4:d8:e8:45:fd:53: ae:2f:c4:48:7a:49:37:50:c0:b8:d6:0d:35:63:97:78:a7:66: 2d:a9:f1:75:5f:e1:cf:0b:2a:e2:91:d4:a2:ff:6f:52:f7:1f: a2:42:d3:48 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEs1VvKdURrvK3NWxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NTBkYWMxODAtYWYxYS00ODYwLWJmNmQtODEzN2JlY2JmNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr42cYuK/w7OiJpAT5T+fVeHIg1P/P/wzbZ5 eNKYGa1gjsFsdjvwGKJIOcgmV3OzyhvuNjpkES7oI5ObQQhscJfS/r7gbmrTOlJA 5xCSU2j2Q9XW41NFT8Nn/b4mwPZLUPTaSiE2vkPROhtFG0/8rfEAsZSDvsgyLedl vSeIKae1az2Ljz7Cq8zfby8Uqpulty5OHewxOO4r9UfAr8anDW+NWom+gfIXWgGD taOyDTmD/pIvxlBw7j8r5jbYACa2ndBee7si7yHmIO2DuaVCIeLLsS86JqqOB/T5 xRMIkZYYAXuJA12BqMCjVslK3KUBNLuX/K/W3wPd/9O31vPZZwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOuJO9YUhOwiOs94HZpRz+0wjXDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjM4Zjk1NDYtMWI2MC0z YzUwLTk0MzQtM2IwZjQ1YjkwYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGLKED BADGLKIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAL7Iv2/tDJfuRr/QF7pHHDL39ZXyThbTJTTx9Uln1kvQy 7t6GEI/E/PJTdkXIQjDYPoRRPju7EJmOs2doouqHVx18pbb6voWGifVIiHeDrsq7 0/0CNKlWSVgvgg/KwPyy3NpaTFxFR6QtOXN9P726hQLhKz6OJYFslg63F7gKCyDY TD97sYxFRN2dtHXOfloeGIwzwooChtuz7TtC7A/8wUnMmWDYlg0SM37Kf2TNt6I8 g5hTShZ/Ct4shQrtShnBlp/zj+8WEGy96urUdYQEvUat1NjoRf1Tri/ESHpJN1DA uNYNNWOXeKdmLanxdV/hzwsq4pHUov9vUvcfokLTSA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:31:35 2025 by rpki-client