$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa File: 4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa (raw, json) Hash identifier: M1P+fj/X1ZSXG3twARRGmQYv4GtZkcqqa7egvFpxYsA= Subject key identifier: 14:AD:60:10:0E:4E:AA:18:7D:E7:C5:60:D5:1E:2C:1B:82:95:06:EC Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F6C583773C0E74C3B60E47EC0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 137443 IP address blocks: 198.44.172.0/23 maxlen: 23 198.44.172.0/24 maxlen: 24 198.44.173.0/24 maxlen: 24 198.44.174.0/23 maxlen: 23 198.44.174.0/24 maxlen: 24 198.44.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:37:73:c0:e7:4c:3b:60:e4:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=975d6ac0-a98e-4dcf-9cfd-cac092e6cd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:23:50:98:56:c5:38:60:59:2a:3f:30:fe:8f: 3c:e6:ba:11:d9:ef:61:2b:70:f9:29:b8:14:0f:5c: db:91:03:de:80:ba:36:86:2a:48:7f:9c:46:bc:2a: b4:e9:92:2e:62:24:a1:2b:d9:74:5a:36:c7:68:dc: 70:a8:b7:b6:59:4e:4a:a2:4a:8c:1b:5a:1f:0b:1a: f7:ba:e5:21:a2:ce:61:06:6d:9f:31:a9:4a:75:dd: e8:01:e0:a7:88:5d:bc:87:c4:67:ec:16:b5:8c:ab: 5f:b2:06:6e:cb:f7:06:9a:07:89:44:1b:7e:de:b4: f5:95:5b:1d:e4:b7:4d:6d:72:01:ea:3d:44:42:c5: 2d:8a:ce:37:f9:98:41:80:d5:a4:70:85:4a:83:2d: 86:5a:27:0c:ea:53:12:05:fa:6d:2a:24:24:e2:3a: 80:b3:9c:0d:ae:b2:c6:0e:77:35:f3:39:bd:8a:e6: f9:07:86:b9:da:c3:53:8a:52:84:72:7c:91:25:43: 1e:f9:57:8d:66:59:9a:4e:6c:45:a6:e9:2b:c8:4c: ea:58:86:97:ad:9a:be:4b:d4:a1:93:d7:51:0d:85: 1e:d2:52:f1:2d:cf:86:af:bc:4e:e6:dd:64:65:40: 87:36:bb:2e:c6:28:c8:53:c3:67:a4:1c:77:6c:bc: 3b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AD:60:10:0E:4E:AA:18:7D:E7:C5:60:D5:1E:2C:1B:82:95:06:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:96:d6:11:6e:3d:6b:5b:dd:67:97:4d:02:7c:15:de:c3:87: f9:66:87:3d:01:a5:38:91:ca:9c:c7:f3:1d:e0:47:2f:bd:12: 35:3e:03:a4:ae:fa:90:ed:eb:27:6c:75:4c:5e:02:9f:03:fa: 82:b3:6a:71:e8:dd:5d:ac:7f:54:75:9d:f4:a5:ed:d3:22:aa: fd:6f:0a:f1:70:ee:b3:9d:b7:0f:2e:b8:8a:84:61:0d:be:a1: 52:6c:cb:74:c0:36:7f:a1:ee:bd:01:c4:65:35:d3:73:0f:98: a4:bb:b9:0d:19:f6:3d:76:9d:45:b3:8e:ad:1b:3a:ad:9b:f1: 59:9e:62:52:97:3a:2c:73:88:20:d5:11:44:54:8a:3f:9f:ae: c6:67:fd:9a:1a:b3:7e:2f:1f:ba:04:70:db:7e:2d:f7:a9:b7: e5:2f:72:13:65:da:dc:3a:36:94:41:86:d1:d0:4a:da:23:99: cc:3b:52:ed:0c:fc:2b:75:c2:fe:45:d1:b5:51:0b:3a:92:a6: 60:07:08:ad:00:a3:4e:af:d5:fb:c3:c6:34:1a:9f:5e:ea:c6: b9:ec:a0:3c:cc:c3:9c:98:23:19:f0:c8:83:62:68:a9:d6:c6: 4e:69:51:14:ac:25:eb:ac:38:36:ec:82:e7:2b:7a:5a:34:01: 67:f0:34:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDdzwOdMO2DkfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk OTc1ZDZhYzAtYTk4ZS00ZGNmLTljZmQtY2FjMDkyZTZjZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCNQmFbFOGBZKj8w/o885roR2e9hK3D5KbgU D1zbkQPegLo2hipIf5xGvCq06ZIuYiShK9l0WjbHaNxwqLe2WU5KokqMG1ofCxr3 uuUhos5hBm2fMalKdd3oAeCniF28h8Rn7Ba1jKtfsgZuy/cGmgeJRBt+3rT1lVsd 5LdNbXIB6j1EQsUtis43+ZhBgNWkcIVKgy2GWicM6lMSBfptKiQk4jqAs5wNrrLG Dnc18zm9iub5B4a52sNTilKEcnyRJUMe+VeNZlmaTmxFpukryEzqWIaXrZq+S9Sh k9dRDYUe0lLxLc+Gr7xO5t1kZUCHNrsuxijIU8NnpBx3bLw7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBStYBAOTqoYfefFYNUeLBuClQbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGUyY2Q3ZmUtNzMzYy0z NDNlLThlYzktOTE2NjRjYTczZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSW1hFuPWtb3WeXTQJ8Fd7Dh/lmhz0BpTiRypzH8x3gRy+9EjU+A6Su +pDt6ydsdUxeAp8D+oKzanHo3V2sf1R1nfSl7dMiqv1vCvFw7rOdtw8uuIqEYQ2+ oVJsy3TANn+h7r0BxGU103MPmKS7uQ0Z9j12nUWzjq0bOq2b8VmeYlKXOixziCDV EURUij+frsZn/Zoas34vH7oEcNt+Lfept+UvchNl2tw6NpRBhtHQStojmcw7Uu0M /Ct1wv5F0bVRCzqSpmAHCK0Ao06v1fvDxjQan17qxrnsoDzMw5yYIxnwyINiaKnW xk5pURSsJeusODbsgucrelo0AWfwNF0= -----END CERTIFICATE-----Generated at Mon Oct 26 11:45:23 2026 by rpki-client