$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/3923a9b7-3f7a-30c6-8330-63f9775e5b01.roa File: 3923a9b7-3f7a-30c6-8330-63f9775e5b01.roa (raw, json) Hash identifier: mTCsJDCy/XTh0Wx7J8OgLISSyEptEhLuTse99ClSYdI= Subject key identifier: 56:D3:12:5D:BC:69:AF:2B:C0:E5:23:09:10:0C:7E:DC:9D:42:31:32 Certificate issuer: /CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5 Certificate serial: 010D0C9F4328584B80B7834B8AA03D6CA2918E80 Authority key identifier: BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/3923a9b7-3f7a-30c6-8330-63f9775e5b01.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 14618 IP address blocks: 198.207.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:83:4b:8a:a0:3d:6c:a2:91:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc89758-ba53-46a7-b1cd-bb9fda66bcd5 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=eaa24b8c-3133-4fc8-8613-9251f39cb3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:31:27:68:e8:7a:89:fc:d2:84:b5:a8:8f: 92:00:e0:c1:1c:8d:53:2e:84:1e:11:25:85:68:f8: 23:b6:a8:9e:93:9a:87:b5:4a:7d:8c:40:be:92:b2: b7:86:37:da:91:db:31:29:4b:61:41:b8:8b:ba:64: ff:13:5e:30:f7:65:67:ac:4f:9f:92:3c:49:04:24: a1:99:72:14:77:73:9a:ed:6a:9c:24:92:a0:6f:23: 5a:c5:74:4d:d6:98:f9:84:10:3e:50:27:b6:bb:c2: 83:73:f0:29:69:be:8c:ba:d2:c3:f7:ee:49:ca:35: d2:42:50:6d:70:63:89:c4:71:1c:59:86:6a:49:23: c9:4b:67:39:fc:10:70:a8:4b:37:5f:28:c1:c6:9b: a2:dc:7a:64:bb:d5:5d:c7:6e:98:94:df:9b:29:20: 64:64:54:1e:1e:1f:e5:1f:63:02:d9:02:fc:71:66: 2b:33:81:4f:7e:46:92:ed:20:fe:76:b0:96:df:91: 9a:85:05:81:02:6f:75:84:5d:a6:65:54:90:9b:93: ac:7d:51:fa:cb:d2:08:cb:6b:0b:ca:86:82:de:34: 24:0d:63:04:ec:d6:01:28:f5:28:1f:ed:f5:26:1f: 85:4b:e6:40:7c:eb:3d:de:15:e3:e3:9d:a9:f4:64: 51:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D3:12:5D:BC:69:AF:2B:C0:E5:23:09:10:0C:7E:DC:9D:42:31:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/3923a9b7-3f7a-30c6-8330-63f9775e5b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.crl X509v3 Authority Key Identifier: keyid:BF:9B:BB:BF:F3:CA:37:C6:FB:EB:4B:FF:36:68:4A:EB:1D:3C:F7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dbc89758-ba53-46a7-b1cd-bb9fda66bcd5.cer sbgp-ipAddrBlock: critical IPv4: 198.207.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ef:49:b1:6c:52:d2:14:8d:9e:c5:76:2b:50:0d:46:b4:71: 39:16:9f:59:ac:88:f0:78:26:5a:15:c5:97:f7:f9:8a:3e:fb: 7a:e8:39:2a:bc:35:ad:78:74:fa:f3:c1:73:02:e3:32:75:7d: b5:b3:e6:cb:02:98:a2:b1:5d:78:6c:80:4b:03:2e:2e:27:78: 11:42:1a:44:92:f1:d8:f7:76:a0:7b:38:30:cf:a8:8c:70:99: 05:3b:51:38:d0:76:6e:19:1a:70:e5:ae:93:bb:92:01:41:65: 17:b3:a5:45:2a:95:14:ba:4b:14:f5:86:e0:66:65:4f:a6:df: 58:f6:f5:e2:96:20:1e:d1:61:38:5a:3f:05:fc:a1:0c:34:82: 16:64:97:6d:5e:54:d0:5e:98:a5:75:e2:78:b7:21:b1:09:c5: 77:71:c7:49:21:8a:0c:cc:b3:f1:a1:65:a7:f9:7d:a9:3b:a7: 34:aa:c0:ad:b9:0f:91:34:4d:04:44:62:1c:be:4b:68:3e:fe: 2f:2a:15:fa:91:ba:71:a6:fb:22:f3:b0:4a:3c:ad:ec:f1:7b: eb:94:a8:58:2c:06:f1:d5:7b:70:c7:52:13:d6:91:79:f8:9f: 69:5d:30:f4:a7:b2:b0:92:74:83:45:b6:5f:74:07:4e:a3:05: 68:b7:6b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt4NLiqA9bKKRjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjODk3NTgtYmE1My00NmE3LWIxY2QtYmI5ZmRhNjZi Y2Q1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZWFhMjRiOGMtMzEzMy00ZmM4LTg2MTMtOTI1MWYzOWNiM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLYxJ2joeon80oS1qI+SAODBHI1TLoQeESWF aPgjtqiek5qHtUp9jEC+krK3hjfakdsxKUthQbiLumT/E14w92VnrE+fkjxJBCSh mXIUd3Oa7WqcJJKgbyNaxXRN1pj5hBA+UCe2u8KDc/Apab6MutLD9+5JyjXSQlBt cGOJxHEcWYZqSSPJS2c5/BBwqEs3XyjBxpui3Hpku9Vdx26YlN+bKSBkZFQeHh/l H2MC2QL8cWYrM4FPfkaS7SD+drCW35GahQWBAm91hF2mZVSQm5OsfVH6y9IIy2sL yoaC3jQkDWME7NYBKPUoH+31Jh+FS+ZAfOs93hXj452p9GRRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbTEl28aa8rwOUjCRAMftydQjEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYmM4 OTc1OC1iYTUzLTQ2YTctYjFjZC1iYjlmZGE2NmJjZDUvMzkyM2E5YjctM2Y3YS0z MGM2LTgzMzAtNjNmOTc3NWU1YjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGJjODk3NTgtYmE1My00NmE3LWIx Y2QtYmI5ZmRhNjZiY2Q1L2RiYzg5NzU4LWJhNTMtNDZhNy1iMWNkLWJiOWZkYTY2 YmNkNS5jcmwwHwYDVR0jBBgwFoAUv5u7v/PKN8b760v/NmhK6x089+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYmM4OTc1OC1iYTUzLTQ2YTctYjFjZC1iYjlm ZGE2NmJjZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbvSbFsUtIUjZ7FditQDUa0cTkWn1msiPB4JloVxZf3+Yo++3roOSq8 Na14dPrzwXMC4zJ1fbWz5ssCmKKxXXhsgEsDLi4neBFCGkSS8dj3dqB7ODDPqIxw mQU7UTjQdm4ZGnDlrpO7kgFBZRezpUUqlRS6SxT1huBmZU+m31j29eKWIB7RYTha PwX8oQw0ghZkl21eVNBemKV14ni3IbEJxXdxx0khigzMs/GhZaf5fak7pzSqwK25 D5E0TQREYhy+S2g+/i8qFfqRunGm+yLzsEo8rezxe+uUqFgsBvHVe3DHUhPWkXn4 n2ldMPSnsrCSdINFtl90B06jBWi3a80= -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:26 2025 by rpki-client