$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa File: d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa (raw, json) Hash identifier: nYCGQyQZLHv6Jaq+bJtF4zJVPPVRf1fu6FwnGfj71kI= Subject key identifier: CC:4F:28:7C:E5:AD:10:09:36:8B:7B:2E:EA:0A:29:BD:D3:2F:E9:75 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584AE0311F434C55502463AFD100 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 62468 IP address blocks: 198.44.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:1f:43:4c:55:50:24:63:af:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=8b5136b2-ca2d-4fae-b253-3db9c88f8f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:65:cd:c2:67:e5:c2:3e:18:f3:14:f0:2d: a0:ec:7a:c5:17:02:53:d5:49:70:57:d0:7b:7a:2f: a0:f6:32:c9:83:12:c2:42:6b:80:39:83:f7:35:ef: 27:dc:73:7c:92:7f:24:67:35:e3:92:89:c0:b5:14: 86:8b:10:37:c0:33:b6:06:bc:a7:fc:8e:0b:ea:9e: 31:5c:74:5b:e6:ca:c2:b2:b3:97:ed:80:87:55:0e: bf:d6:09:e8:8b:17:db:5e:e7:d6:51:ea:0f:18:a6: f9:19:c0:56:c2:8f:80:17:e4:61:ff:c2:47:f8:82: 21:bb:43:37:d1:18:eb:b4:19:7c:32:03:c7:07:26: 01:3c:19:7e:e8:7d:97:e2:4e:0f:dd:a3:20:be:3b: 8e:89:51:4c:5c:f5:c1:5a:87:cc:ba:05:69:82:3d: 86:37:8e:a7:f6:6d:8a:05:54:d5:ee:c9:2f:2d:2b: 5c:f5:94:7d:3f:50:82:d2:fa:51:77:65:41:a4:c2: ee:7a:7d:ce:5c:4e:25:ba:4b:50:b0:13:68:23:a2: fd:fa:1a:a3:43:d7:d1:5a:b6:db:b5:24:17:a5:f8: 0c:e2:d1:e7:56:21:15:80:6e:65:f0:92:3d:e2:b3: 38:71:66:af:e3:11:c4:48:8f:46:72:0a:02:b9:60: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4F:28:7C:E5:AD:10:09:36:8B:7B:2E:EA:0A:29:BD:D3:2F:E9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d90f067e-e5d9-327f-9510-ee2cdae10ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:47:0d:c9:33:2e:89:cf:6f:c1:56:7c:48:c7:a6:3d:1b:c5: 6d:4b:12:03:88:ac:4b:f9:e5:b4:e3:73:4c:9d:f0:26:29:b7: 7e:fe:8c:cf:7a:c2:4a:1c:e1:7f:6a:25:31:dc:e6:0a:79:ba: 98:7a:e6:96:1d:97:16:81:ec:d1:84:75:18:54:03:6b:b4:45: ff:f5:a0:26:97:98:88:bb:a0:b4:79:59:1b:3d:87:1a:3a:5d: 91:71:3f:28:4d:01:fc:9e:17:72:a3:2a:3f:05:15:f6:fe:3c: 49:e3:68:8a:5e:55:dc:33:3a:93:9d:13:f1:74:1b:ba:31:90: 00:e8:02:d7:fa:6f:d7:e3:b5:48:6d:05:59:b6:ee:64:00:7b: 22:1b:ab:bf:bc:7d:ad:51:07:08:f4:43:d4:63:c1:f2:24:9e: e1:e9:a4:6d:1c:4f:9a:d8:23:2a:e1:62:35:9f:be:b3:4f:7b: a5:71:66:60:57:b9:6e:f4:45:49:5a:50:04:63:14:c3:70:95: b5:70:f9:7c:07:ef:00:16:19:c0:e3:8f:1a:eb:c9:32:22:3c: 8b:c9:43:5e:33:8f:7a:11:7e:89:4b:84:e7:ae:37:3b:a1:05: bb:6a:ac:d4:7a:73:a1:d6:df:64:c9:15:9a:12:94:54:6b:5f: 96:22:51:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMR9DTFVQJGOv0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk OGI1MTM2YjItY2EyZC00ZmFlLWIyNTMtM2RiOWM4OGY4Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7plzcJn5cI+GPMU8C2g7HrFFwJT1UlwV9B7 ei+g9jLJgxLCQmuAOYP3Ne8n3HN8kn8kZzXjkonAtRSGixA3wDO2Bryn/I4L6p4x XHRb5srCsrOX7YCHVQ6/1gnoixfbXufWUeoPGKb5GcBWwo+AF+Rh/8JH+IIhu0M3 0RjrtBl8MgPHByYBPBl+6H2X4k4P3aMgvjuOiVFMXPXBWofMugVpgj2GN46n9m2K BVTV7skvLStc9ZR9P1CC0vpRd2VBpMLuen3OXE4luktQsBNoI6L9+hqjQ9fRWrbb tSQXpfgM4tHnViEVgG5l8JI94rM4cWav4xHESI9GcgoCuWAEKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxPKHzlrRAJNot7LuoKKb3TL+l1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDkwZjA2N2UtZTVkOS0z MjdmLTk1MTAtZWUyY2RhZTEwYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9HDckzLonPb8FWfEjHpj0bxW1LEgOIrEv55bTjc0yd8CYpt37+jM96 wkoc4X9qJTHc5gp5uph65pYdlxaB7NGEdRhUA2u0Rf/1oCaXmIi7oLR5WRs9hxo6 XZFxPyhNAfyeF3KjKj8FFfb+PEnjaIpeVdwzOpOdE/F0G7oxkADoAtf6b9fjtUht BVm27mQAeyIbq7+8fa1RBwj0Q9RjwfIknuHppG0cT5rYIyrhYjWfvrNPe6VxZmBX uW70RUlaUARjFMNwlbVw+XwH7wAWGcDjjxrryTIiPIvJQ14zj3oRfolLhOeuNzuh BbtqrNR6c6HW32TJFZoSlFRrX5YiUaM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:35 2025 by rpki-client