$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa File: a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa (raw, json) Hash identifier: cTSoH6goyDam43UDotE2NATQwNXbwnmjSN09CTZssgM= Subject key identifier: 5E:8D:AD:D6:6B:CB:FD:AE:58:3E:B9:F9:F4:77:70:74:6F:59:7C:DC Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F4976BBFA068AD4599EA51A80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 137443 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:bb:fa:06:8a:d4:59:9e:a5:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3ebcccaf-524b-4f39-9e0e-b0a321eed13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:0e:f9:ab:1c:13:ad:40:e0:3a:9c:0c:60: f1:19:88:8d:24:8f:29:8d:58:40:aa:3f:f5:1e:a5: 5e:ae:63:df:7a:3f:db:57:fb:03:3d:cc:3a:d8:13: cd:91:ed:c1:ed:68:3b:9a:7e:0b:24:f2:03:74:90: be:84:81:8c:b7:c3:4f:90:c7:41:a0:0d:8c:e7:f2: 79:86:77:23:b1:34:87:52:75:b6:5a:a3:23:24:d8: 80:07:20:25:6b:94:02:07:dd:af:55:4e:ef:6a:91: e5:67:99:b2:50:b6:01:04:3e:4e:5c:c6:2e:09:e7: db:d9:2c:f7:72:ad:04:63:27:8f:17:24:2c:ad:1d: ea:a4:63:ed:58:ca:07:99:8a:7d:95:6c:c6:da:10: 69:07:ed:fd:7a:e3:03:58:b1:ea:9f:2e:f7:d9:7d: 3e:32:0a:17:ae:d6:ee:0d:22:54:0b:43:42:8f:e2: 82:c8:97:93:cf:a1:b3:c9:5a:70:59:95:31:49:e8: d3:07:cb:76:ee:fe:33:55:04:4f:cc:f2:2b:02:e8: e5:ce:2e:15:9d:74:c5:aa:95:e1:46:95:60:4c:df: 34:4e:f1:90:f8:92:bd:a0:4e:3d:19:f9:d8:7f:9f: 1c:eb:9c:75:a4:98:27:97:e4:71:69:c3:d7:fa:ee: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:AD:D6:6B:CB:FD:AE:58:3E:B9:F9:F4:77:70:74:6F:59:7C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:cc:fc:97:e7:f2:7a:68:6a:db:ba:60:9b:6e:59:ee:cf:72: 4c:8a:5e:39:ec:68:64:f3:5f:66:76:29:29:65:2f:7e:49:2a: a3:23:8c:17:b7:4a:61:0c:ca:bb:11:b4:21:f4:23:f8:11:62: f6:b8:7d:1b:82:78:a1:8e:03:97:41:57:96:48:d0:a8:49:9c: 19:2a:90:3c:58:b1:cb:cd:18:d4:7d:f1:b9:d1:25:9a:1f:dd: 9a:82:fa:85:7e:80:86:e8:c4:c4:41:29:7d:55:92:fa:99:00: 6e:09:dd:9a:2e:58:50:c8:8b:71:4e:ae:8b:aa:9f:1c:08:32: c8:48:9a:7c:ba:fc:15:3b:00:36:af:9d:37:51:ee:dc:e3:65: 1c:37:d8:29:60:e7:a0:53:1a:bb:02:cd:db:46:fb:a5:c5:db: 86:69:dc:15:2a:58:8c:7a:3b:0a:f9:d2:30:6b:e5:9e:28:a9: 31:85:50:9f:bf:af:3d:9c:15:70:26:df:08:d3:87:d2:cb:f1: 52:85:a1:9d:96:ee:20:1f:c2:a0:19:06:79:67:e3:48:a1:7f: cd:86:70:77:9b:a1:79:23:6a:04:20:b8:30:4a:4d:43:17:ea: 1c:2d:0a:15:04:ef:73:c3:55:cb:b8:89:65:2b:81:8e:d0:e6: b7:6e:ff:71 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9Jdrv6BorUWZ6lGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ViY2NjYWYtNTI0Yi00ZjM5LTllMGUtYjBhMzIxZWVkMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+oO+ascE61A4DqcDGDxGYiNJI8pjVhAqj/1 HqVermPfej/bV/sDPcw62BPNke3B7Wg7mn4LJPIDdJC+hIGMt8NPkMdBoA2M5/J5 hncjsTSHUnW2WqMjJNiAByAla5QCB92vVU7vapHlZ5myULYBBD5OXMYuCefb2Sz3 cq0EYyePFyQsrR3qpGPtWMoHmYp9lWzG2hBpB+39euMDWLHqny732X0+MgoXrtbu DSJUC0NCj+KCyJeTz6GzyVpwWZUxSejTB8t27v4zVQRPzPIrAujlzi4VnXTFqpXh RpVgTN80TvGQ+JK9oE49GfnYf58c65x1pJgnl+RxacPX+u6AfQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFF6NrdZry/2uWD65+fR3cHRvWXzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYThiODlhODEtZWZkNy0z YzAzLTlmN2EtNzdjZThlOTk3ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABrM/Jfn8npoatu6YJtuWe7PckyKXjnsaGTzX2Z2 KSllL35JKqMjjBe3SmEMyrsRtCH0I/gRYva4fRuCeKGOA5dBV5ZI0KhJnBkqkDxY scvNGNR98bnRJZof3ZqC+oV+gIboxMRBKX1VkvqZAG4J3ZouWFDIi3FOrouqnxwI MshImny6/BU7ADavnTdR7tzjZRw32Clg56BTGrsCzdtG+6XF24Zp3BUqWIx6Owr5 0jBr5Z4oqTGFUJ+/rz2cFXAm3wjTh9LL8VKFoZ2W7iAfwqAZBnln40ihf82GcHeb oXkjagQguDBKTUMX6hwtChUE73PDVcu4iWUrgY7Q5rdu/3E= -----END CERTIFICATE-----Generated at Mon Oct 26 02:27:56 2026 by rpki-client