$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ecf5a16d-40f9-35f8-b246-85f847170ba9.roa File: ecf5a16d-40f9-35f8-b246-85f847170ba9.roa (raw, json) Hash identifier: hlL2FaP7WHvkIFQW6fWPIDHwU9u6JulbnBYe49kfJWA= Subject key identifier: 4B:5A:CB:60:A3:51:B9:0F:CC:43:69:4F:05:E7:51:3E:91:C6:A0:D7 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B4E7719676BBDE2D64E21BF00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ecf5a16d-40f9-35f8-b246-85f847170ba9.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 55933 IP address blocks: 198.44.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:19:67:6b:bd:e2:d6:4e:21:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=f15818b6-e04d-4620-96ea-1a7b42059dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:a0:b8:21:9d:53:72:a1:35:fc:8c:70:b6: 2a:5a:e4:bc:25:23:d5:f6:d2:b1:26:5d:0c:92:be: 25:35:64:95:cb:ed:ed:51:8a:2e:da:ef:c1:2a:54: 85:b5:d0:48:f3:fc:4c:0b:4e:e2:12:40:65:72:32: 63:50:77:6f:cd:47:7d:28:4d:1c:14:e9:28:04:a0: ce:e9:66:cf:e5:a6:fc:07:63:bd:0b:bb:07:43:4c: 42:c8:4d:4e:b0:ca:12:66:24:91:69:f7:55:78:80: cf:e8:14:c7:e2:1c:1d:2a:b0:f5:7d:f3:fb:ac:32: 42:9e:8f:eb:43:98:9f:1a:8e:61:ef:ec:36:15:04: 40:d4:56:85:4a:58:16:e3:68:b4:9b:13:10:e7:13: 1e:4f:a9:a8:75:20:a4:0a:08:90:d2:6b:ed:fc:e8: ed:ab:db:f7:5a:98:ae:b6:fa:a8:60:e2:79:39:92: 6e:45:c6:e7:f7:bc:e7:5a:69:4d:95:8e:35:61:de: f5:14:d0:75:84:8a:b6:a4:e5:b2:f2:b8:a5:65:a6: fe:c8:2e:20:7b:a5:0c:1e:72:34:0b:7e:62:21:31: 3b:eb:30:ff:9b:df:88:6e:7e:01:31:ee:3b:6f:82: 63:ef:2d:b2:6d:45:be:f4:46:7a:5a:5e:9b:5c:15: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5A:CB:60:A3:51:B9:0F:CC:43:69:4F:05:E7:51:3E:91:C6:A0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ecf5a16d-40f9-35f8-b246-85f847170ba9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:38:fe:fe:38:9f:71:38:18:3d:de:1d:a8:a7:20:a4:87:4c: 50:ee:4b:6e:aa:22:d5:d1:b5:4f:78:04:bd:5d:f0:46:f1:47: a4:ef:9e:c5:71:8b:a3:bb:16:04:59:47:03:00:ea:5e:73:1c: ca:c1:df:87:5b:ea:c6:fa:a1:5a:69:8f:af:db:d5:00:1e:16: 0c:48:ca:ad:56:a6:13:ef:9a:f1:3c:d8:90:4e:b6:ea:54:7b: 1e:db:a2:24:53:5e:a4:70:9e:9a:8d:6e:74:52:04:e8:43:e1: 5d:5b:80:cc:8d:e4:c9:c0:72:71:e5:91:95:f2:61:ea:4a:37: ca:5a:cf:91:7b:42:ab:88:17:78:8e:8f:bc:52:22:83:c7:e2: ca:ce:32:e1:0d:78:0b:9a:f2:78:80:07:83:2e:18:62:37:57: d9:97:53:a9:27:c3:82:55:5d:24:68:8b:17:6a:21:f3:e8:6e: 5a:30:e9:e1:2d:23:50:10:ac:20:ee:1e:e0:2c:e9:af:7d:48: c9:f9:dc:7a:88:02:cf:a9:3d:17:75:35:55:3c:a6:60:45:46: ff:bd:72:15:97:3d:15:e3:b3:bb:f6:6f:50:8c:5e:5f:cf:88: 0a:bc:b4:dc:f9:35:38:6d:e0:dd:07:76:33:c5:30:8b:52:a6: a5:f3:d4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxlna73i1k4hvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjE1ODE4YjYtZTA0ZC00NjIwLTk2ZWEtMWE3YjQyMDU5ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEKguCGdU3KhNfyMcLYqWuS8JSPV9tKxJl0M kr4lNWSVy+3tUYou2u/BKlSFtdBI8/xMC07iEkBlcjJjUHdvzUd9KE0cFOkoBKDO 6WbP5ab8B2O9C7sHQ0xCyE1OsMoSZiSRafdVeIDP6BTH4hwdKrD1ffP7rDJCno/r Q5ifGo5h7+w2FQRA1FaFSlgW42i0mxMQ5xMeT6modSCkCgiQ0mvt/Ojtq9v3Wpiu tvqoYOJ5OZJuRcbn97znWmlNlY41Yd71FNB1hIq2pOWy8rilZab+yC4ge6UMHnI0 C35iITE76zD/m9+Ibn4BMe47b4Jj7y2ybUW+9EZ6Wl6bXBVofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtay2CjUbkPzENpTwXnUT6RxqDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZWNmNWExNmQtNDBmOS0z NWY4LWIyNDYtODVmODQ3MTcwYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU4/v44n3E4GD3eHainIKSHTFDuS26qItXRtU94BL1d8EbxR6TvnsVx i6O7FgRZRwMA6l5zHMrB34db6sb6oVppj6/b1QAeFgxIyq1WphPvmvE82JBOtupU ex7boiRTXqRwnpqNbnRSBOhD4V1bgMyN5MnAcnHlkZXyYepKN8paz5F7QquIF3iO j7xSIoPH4srOMuENeAua8niAB4MuGGI3V9mXU6knw4JVXSRoixdqIfPoblow6eEt I1AQrCDuHuAs6a99SMn53HqIAs+pPRd1NVU8pmBFRv+9chWXPRXjs7v2b1CMXl/P iAq8tNz5NTht4N0HdjPFMItSpqXz1ME= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:26 2025 by rpki-client