$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa File: 31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa (raw, json) Hash identifier: wkk0BeqBbTJo97ASKieXpl5duknxarj0XH0E8roDXgc= Subject key identifier: BE:A5:96:65:88:D8:86:70:94:CD:8B:32:9F:B4:18:18:F0:FD:18:CE Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584ED43258F4027FD030609D9680 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 29752 IP address blocks: 23.251.35.0/24 maxlen: 24 107.151.194.0/24 maxlen: 24 198.44.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:58:f4:02:7f:d0:30:60:9d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=515b3a1d-cdb3-4951-9352-a424a116c06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:f6:7e:34:bd:2d:b7:dd:59:0f:39:35:7c: ed:13:d3:74:49:a5:2a:e7:31:fb:d4:88:15:33:11: fb:bd:79:a5:a5:d7:67:e9:6b:e6:10:44:bf:f2:4e: 8b:9b:91:55:fb:d6:3d:ad:41:1d:2c:1b:e1:4d:bc: ab:94:b9:36:65:43:90:27:a8:81:a0:a0:ec:46:4f: a7:24:0c:e6:78:40:12:d7:69:19:59:24:fb:11:ea: 2a:96:6c:6f:0c:6a:98:38:e7:03:88:23:84:77:10: a1:97:9d:dd:13:2e:28:3b:1d:d1:16:85:98:24:3a: 06:1a:53:4e:60:bf:1c:a2:4d:7d:cf:dc:fa:62:54: 8f:89:3a:97:42:e4:7c:66:86:c5:14:25:94:af:5d: f6:1b:fa:0d:93:26:62:af:32:dc:60:cc:74:3d:c2: 34:83:6b:1b:94:8b:93:9b:9a:a4:4a:48:bf:75:c7: 3f:60:32:ad:de:2f:6f:0d:e4:91:48:7c:c0:c7:48: b7:4e:87:56:3d:02:fe:e6:f8:45:d3:0b:92:be:31: 75:09:ff:50:d1:2f:51:d3:2c:6f:25:a4:0c:28:24: 23:e6:59:7f:3c:fd:4b:51:b1:38:c3:27:a2:22:11: 99:4c:e9:f9:39:e6:50:34:93:d6:b2:e4:e8:bd:1a: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A5:96:65:88:D8:86:70:94:CD:8B:32:9F:B4:18:18:F0:FD:18:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.35.0/24 107.151.194.0/24 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:3e:96:0e:08:57:e9:3f:f4:4d:c4:5c:fa:f6:61:6a:fa:48: 1a:18:3c:e9:fb:2d:b7:5e:1e:4e:11:a3:68:05:d1:7e:9a:e2: 45:46:8d:64:2f:f3:f2:c7:49:74:95:79:54:fa:cb:84:47:a3: d1:ae:da:37:f2:46:95:be:cc:95:97:54:2b:08:2a:e5:9a:b0: b9:5b:d3:29:ff:2b:a7:d3:70:9e:7b:de:7c:fe:34:31:71:f9: 86:85:3d:a3:11:7c:c2:b8:5e:00:e3:58:c7:e9:43:a5:62:bd: 93:66:4b:9e:e4:cf:03:dc:0e:ff:53:3d:44:b8:48:9c:57:ca: cf:e6:3d:3b:c4:9b:c0:31:40:0e:14:09:9b:4a:2f:69:95:3e: 74:39:97:32:54:0d:d3:ba:94:67:8c:ef:97:05:b8:73:6d:ee: 12:8b:59:d2:79:42:08:55:f8:e0:51:63:69:0a:4d:73:b8:66: fb:54:24:2b:af:fb:f9:1d:0a:eb:3d:1c:69:16:cb:ff:ad:a5: 23:f5:f8:b1:8b:3f:40:f8:33:93:2f:78:bb:9f:1e:02:e0:6c: f4:b7:c4:8f:a9:23:e3:41:78:aa:c7:da:65:59:df:96:5c:48: 72:8a:8d:11:21:1d:3a:7b:ea:eb:9e:59:a1:eb:2a:6b:ce:87: ca:24:8b:3c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7UMlj0An/QMGCdloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTE1YjNhMWQtY2RiMy00OTUxLTkzNTItYTQyNGExMTZjMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB/2fjS9LbfdWQ85NXztE9N0SaUq5zH71IgV MxH7vXmlpddn6WvmEES/8k6Lm5FV+9Y9rUEdLBvhTbyrlLk2ZUOQJ6iBoKDsRk+n JAzmeEAS12kZWST7EeoqlmxvDGqYOOcDiCOEdxChl53dEy4oOx3RFoWYJDoGGlNO YL8cok19z9z6YlSPiTqXQuR8ZobFFCWUr132G/oNkyZirzLcYMx0PcI0g2sblIuT m5qkSki/dcc/YDKt3i9vDeSRSHzAx0i3TodWPQL+5vhF0wuSvjF1Cf9Q0S9R0yxv JaQMKCQj5ll/PP1LUbE4wyeiIhGZTOn5OeZQNJPWsuTovRoSMQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFL6llmWI2IZwlM2LMp+0GBjw/RjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzFjMGE1ZDgtM2VkZS0z MTk5LWJhZmUtZjZhNzEzNGQ5M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF/sjAwQA a5fCAwQCxiysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA4+lg4IV+k/9E3EXPr2YWr6SBoYPOn7LbdeHk4R o2gF0X6a4kVGjWQv8/LHSXSVeVT6y4RHo9Gu2jfyRpW+zJWXVCsIKuWasLlb0yn/ K6fTcJ573nz+NDFx+YaFPaMRfMK4XgDjWMfpQ6VivZNmS57kzwPcDv9TPUS4SJxX ys/mPTvEm8AxQA4UCZtKL2mVPnQ5lzJUDdO6lGeM75cFuHNt7hKLWdJ5QghV+OBR Y2kKTXO4ZvtUJCuv+/kdCus9HGkWy/+tpSP1+LGLP0D4M5MveLufHgLgbPS3xI+p I+NBeKrH2mVZ35ZcSHKKjREhHTp76uueWaHrKmvOh8okizw= -----END CERTIFICATE-----Generated at Sat Aug 15 11:44:37 2026 by rpki-client