$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa File: 30859cb8-c929-30aa-bad4-950f640e28f0.roa (raw, json) Hash identifier: 0sH9pURMehesiHjCFPzxeCron6HEjUpf4DAdiyU5bvE= Subject key identifier: A7:12:EC:0A:21:D5:06:DD:39:72:51:BD:7E:7F:03:B2:9A:2F:0C:39 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584ACE0B9E93E50AB9E350BE4660 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 142032 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9e:93:e5:0a:b9:e3:50:be:46:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=e4358ef9-1799-4dbc-bf4f-99495610bf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9f:ef:e5:cd:df:d2:7f:63:a0:bc:fe:60:19: 86:3d:cf:b8:5d:f6:7a:ae:12:f4:c9:75:0d:e8:fb: 8b:dd:eb:2c:64:2e:1c:52:ea:4b:35:88:3d:69:dc: 2d:c9:c7:11:85:ea:ab:44:5e:c6:cf:d2:61:f5:62: 16:5a:ab:0f:9e:e3:74:88:db:54:aa:9a:d8:4e:5f: 5e:26:15:1e:1e:78:fd:b7:48:bd:58:bf:a9:c2:2c: 85:01:e6:09:22:d2:e4:04:6d:31:38:51:62:14:13: 52:59:85:8e:53:c0:4b:9b:2a:ac:dd:31:c7:7a:bd: 22:3f:6e:d0:9e:54:92:b5:de:b4:69:30:7e:1f:9d: 34:fd:28:0b:3f:8b:34:69:f5:1c:4a:33:18:eb:93: 23:b8:22:a2:20:38:03:51:72:77:ca:7f:54:9a:02: 4e:ac:c8:d2:43:05:cc:3d:55:84:05:78:90:b9:2d: f0:e5:c1:8b:47:4e:aa:b5:d7:e0:71:25:dc:aa:04: 3d:02:64:0a:5a:69:02:fb:00:1f:d7:df:17:15:08: d1:95:6f:65:d7:75:5d:d3:f8:81:39:35:ee:d1:34: f3:b7:e2:18:18:14:bc:89:68:1f:bc:7b:ae:a3:c9: 23:ff:74:9f:35:20:1e:4d:e6:a5:5d:32:52:8b:f2: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:12:EC:0A:21:D5:06:DD:39:72:51:BD:7E:7F:03:B2:9A:2F:0C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8e:40:d6:6e:bb:01:0a:56:c0:8a:c6:26:3d:7e:2f:23:3e: 6b:6e:2b:7e:6e:a4:37:ad:80:bf:3b:da:2f:a6:d3:e7:2f:86: 8e:7c:54:3f:81:6f:ae:00:44:e9:b2:6a:b8:4b:66:f8:56:ae: 18:4a:94:b6:b6:f4:f4:0b:81:44:09:74:6a:3a:a3:1f:7c:5b: 33:40:b9:ea:55:74:37:6a:7e:b5:01:6e:38:ec:59:8f:c9:a7: 4c:e0:0b:47:29:2c:ad:85:e1:8c:7c:79:3c:0d:d7:71:c9:b4: 5d:03:9c:dc:b5:b6:20:e7:ff:ca:ea:2b:99:c6:5b:62:63:c6: 73:b4:0c:66:03:5d:ab:ce:59:38:3a:54:5e:ea:5b:95:25:15: e2:2d:2d:9e:05:b5:e2:55:f1:61:77:a3:15:21:53:fc:0f:de: af:c5:6b:9f:56:ad:aa:1b:5f:4e:98:ae:bb:6f:bd:6b:5c:c8: 53:54:a9:df:65:3a:4f:18:50:4e:eb:5d:41:fd:1b:fa:5a:6e: c8:50:f9:1e:08:e0:c9:f4:44:00:fc:d2:7f:bd:75:ac:9a:7b: ac:10:ca:ed:d5:3f:ff:b1:a7:c2:af:16:7d:f4:9f:73:b4:66: a9:0e:9f:95:f3:4f:13:48:87:d6:93:93:b1:03:e1:dc:97:ee: 05:4d:39:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC56T5Qq541C+RmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZTQzNThlZjktMTc5OS00ZGJjLWJmNGYtOTk0OTU2MTBiZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5/v5c3f0n9joLz+YBmGPc+4XfZ6rhL0yXUN 6PuL3essZC4cUupLNYg9adwtyccRheqrRF7Gz9Jh9WIWWqsPnuN0iNtUqprYTl9e JhUeHnj9t0i9WL+pwiyFAeYJItLkBG0xOFFiFBNSWYWOU8BLmyqs3THHer0iP27Q nlSStd60aTB+H500/SgLP4s0afUcSjMY65MjuCKiIDgDUXJ3yn9UmgJOrMjSQwXM PVWEBXiQuS3w5cGLR06qtdfgcSXcqgQ9AmQKWmkC+wAf198XFQjRlW9l13Vd0/iB OTXu0TTzt+IYGBS8iWgfvHuuo8kj/3SfNSAeTealXTJSi/JAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcS7Aoh1QbdOXJRvX5/A7KaLww5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzA4NTljYjgtYzkyOS0z MGFhLWJhZDQtOTUwZjY0MGUyOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuOQNZuuwEKVsCKxiY9fi8jPmtuK35upDetgL872i+m0+cvho58VD+B b64AROmyarhLZvhWrhhKlLa29PQLgUQJdGo6ox98WzNAuepVdDdqfrUBbjjsWY/J p0zgC0cpLK2F4Yx8eTwN13HJtF0DnNy1tiDn/8rqK5nGW2JjxnO0DGYDXavOWTg6 VF7qW5UlFeItLZ4FteJV8WF3oxUhU/wP3q/Fa59WraobX06YrrtvvWtcyFNUqd9l Ok8YUE7rXUH9G/pabshQ+R4I4Mn0RAD80n+9dayae6wQyu3VP/+xp8KvFn30n3O0 ZqkOn5XzTxNIh9aTk7ED4dyX7gVNOfk= -----END CERTIFICATE-----Generated at Tue Oct 28 00:37:57 2025 by rpki-client