$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa File: b2ed4966-d792-34c7-806d-aaa85e042841.roa (raw, json) Hash identifier: 2tFiq6pxrgg0y1X0bkEIFDAG2otkGigw9Ag5ub3JYhI= Subject key identifier: 10:A3:78:70:A7:E8:2C:41:09:33:61:DF:97:34:CA:E0:E7:BB:EE:AF Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584EEA8763FCDA07739D50AEDA40 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 62468 IP address blocks: 198.44.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:63:fc:da:07:73:9d:50:ae:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=7d5809a0-932c-4a34-945d-0b2243ba363f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:3d:18:27:dc:e4:6b:74:52:59:09:4b:12: 9e:fe:4c:bd:ee:95:2a:64:78:2c:9a:31:79:60:85: 73:bf:b3:c7:9a:36:16:6d:26:51:0b:89:71:8d:e6: 46:55:95:91:6e:60:0c:65:82:da:e6:54:20:ad:65: 42:4f:1e:0b:b9:5d:9d:a0:50:44:9b:cf:4a:9a:04: 6c:af:a1:cd:36:8a:04:0a:60:4a:8d:76:4a:d4:46: 6f:fc:89:fa:d4:73:77:75:05:57:33:25:26:1a:19: 89:3f:1c:72:da:45:a3:ea:ef:a8:ec:ec:09:a7:a8: 29:a1:3e:f1:cd:6a:30:1b:8f:1c:4d:79:08:0d:ad: 72:31:30:04:8a:63:ae:c4:32:54:43:cf:20:05:1a: 7e:90:04:c0:cd:eb:41:b9:f8:d9:8c:a6:9e:96:b6: 21:24:98:9a:eb:ab:87:10:d0:47:44:69:c7:4f:48: e6:b6:9f:a1:93:39:1a:4d:9c:e8:93:3f:fb:c4:bf: 1c:30:61:b2:d3:65:38:8c:ff:9e:3a:11:05:a1:a7: 1b:5b:15:03:f8:87:22:ec:88:5e:6a:04:94:a8:6e: ef:45:29:5a:ad:32:cb:c5:52:57:9c:07:e7:64:07: b3:21:87:e0:59:72:3c:50:b5:70:99:b4:73:d4:3c: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:78:70:A7:E8:2C:41:09:33:61:DF:97:34:CA:E0:E7:BB:EE:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5b:43:79:cc:63:bf:59:a5:06:66:0d:09:ba:0d:4c:1d:7d: 1d:ed:c8:8f:c0:3d:7d:de:f5:89:f7:e7:b6:4b:22:c8:af:1f: 09:6c:2c:63:3e:0a:1f:22:c3:7e:54:ca:a1:af:e2:5b:3b:68: 07:f6:06:d3:75:8c:ce:c0:05:18:12:82:46:5b:45:20:6c:b8: 46:4a:b0:11:05:4f:b5:6d:6c:da:d7:75:e6:ad:08:77:41:68: b2:2a:09:eb:b3:f1:48:4c:86:3b:88:45:d2:15:17:e0:97:31: eb:53:ff:d7:86:48:2d:4b:f2:ca:a9:d4:0c:21:b4:d1:55:ef: 18:a7:3e:ff:52:bb:37:b1:17:bc:fb:00:c2:97:7a:a2:66:5d: f4:34:d9:7c:4e:7f:8c:67:3e:0b:59:f2:af:6b:20:b6:fd:0d: 9e:96:9f:f8:90:60:90:7b:5d:b6:ae:f3:ea:3c:14:f2:69:52: fc:0e:6e:fe:4a:33:d0:5f:9a:e4:c0:d1:63:3c:f9:49:29:b8: d7:45:70:5b:bc:c3:43:96:c4:2a:4c:92:23:37:e0:4f:b3:d9: 7a:e2:ca:6a:18:37:bc:48:8c:33:c0:66:f2:11:a2:c7:cf:54: c5:5c:8f:a6:ed:4a:69:40:bd:da:d8:99:e6:e8:76:2b:63:12: e6:8f:88:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2P82gdznVCu2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk N2Q1ODA5YTAtOTMyYy00YTM0LTk0NWQtMGIyMjQzYmEzNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqI9GCfc5Gt0UlkJSxKe/ky97pUqZHgsmjF5 YIVzv7PHmjYWbSZRC4lxjeZGVZWRbmAMZYLa5lQgrWVCTx4LuV2doFBEm89KmgRs r6HNNooECmBKjXZK1EZv/In61HN3dQVXMyUmGhmJPxxy2kWj6u+o7OwJp6gpoT7x zWowG48cTXkIDa1yMTAEimOuxDJUQ88gBRp+kATAzetBufjZjKaelrYhJJia66uH ENBHRGnHT0jmtp+hkzkaTZzokz/7xL8cMGGy02U4jP+eOhEFoacbWxUD+Ici7Ihe agSUqG7vRSlarTLLxVJXnAfnZAezIYfgWXI8ULVwmbRz1DwUNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCjeHCn6CxBCTNh35c0yuDnu+6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjJlZDQ5NjYtZDc5Mi0z NGM3LTgwNmQtYWFhODVlMDQyODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiyjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtbQ3nMY79ZpQZmDQm6DUwdfR3tyI/APX3e9Yn357ZLIsivHwlsLGM+ Ch8iw35UyqGv4ls7aAf2BtN1jM7ABRgSgkZbRSBsuEZKsBEFT7VtbNrXdeatCHdB aLIqCeuz8UhMhjuIRdIVF+CXMetT/9eGSC1L8sqp1AwhtNFV7xinPv9SuzexF7z7 AMKXeqJmXfQ02XxOf4xnPgtZ8q9rILb9DZ6Wn/iQYJB7Xbau8+o8FPJpUvwObv5K M9BfmuTA0WM8+UkpuNdFcFu8w0OWxCpMkiM34E+z2XriymoYN7xIjDPAZvIRosfP VMVcj6btSmlAvdrYmeboditjEuaPiDg= -----END CERTIFICATE-----Generated at Sat Sep 5 03:18:46 2026 by rpki-client