$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa File: d5af8938-fe55-34cf-8a95-3ff9247e6446.roa (raw, json) Hash identifier: FSY6wH3ShCfs0J2sq68t7AX7CHMUVBJ74FpVsnbb4TI= Subject key identifier: D6:4D:68:17:34:5C:E9:1C:C6:11:22:94:BC:4D:65:A3:4F:CE:83:88 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B5C6C76FCD0CEF1BBAA1668A0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 152705 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:76:fc:d0:ce:f1:bb:aa:16:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=d0fb0f1c-5635-49ff-ad4c-8644b6c3d6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:79:4e:b0:5b:d4:3d:00:5b:98:ac:ec:f5: 74:55:db:8a:c2:2e:93:aa:07:57:2b:4a:c1:ab:fe: 2a:ae:5d:6a:db:d1:bf:a4:52:dc:32:45:99:cb:de: 60:d9:52:1b:ae:f7:06:58:87:17:92:06:87:ec:04: 12:2a:2e:8b:c4:78:d1:09:58:17:c9:84:61:89:4f: 9a:12:8e:e3:92:d3:d4:ed:73:e2:c0:b6:62:6b:7a: f8:ba:3e:7c:c3:6c:d5:1d:14:04:d9:b1:db:c5:f9: 6c:5b:65:ec:7f:37:7d:4e:26:66:1a:5e:23:3d:5f: c2:8b:6f:a2:1a:f5:9f:8d:f1:49:b3:e9:41:cf:65: 66:37:28:4b:81:82:02:50:c8:68:5c:7c:b5:37:3f: dd:1a:e8:27:16:b5:bf:ae:d9:11:de:e7:0a:e3:69: ab:b2:5e:5f:7f:f6:ff:e4:ca:96:7c:de:09:af:2a: 83:57:e6:ab:a5:9d:38:0d:d5:fe:0e:c0:d9:de:25: 56:7a:98:7d:c6:da:e8:2b:d5:f9:72:bb:34:22:d8: a6:9a:41:eb:19:6c:d2:56:fa:e3:49:6b:64:cd:52: a5:f4:ba:49:cb:dd:02:38:59:c0:ac:ce:64:e0:57: 74:c3:c4:db:37:b4:2a:24:c4:07:ce:a6:9a:70:ec: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4D:68:17:34:5C:E9:1C:C6:11:22:94:BC:4D:65:A3:4F:CE:83:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cc:b9:bc:48:e6:50:62:6b:a7:5c:7d:57:fb:fe:a7:b1:20: d2:8d:29:61:e0:52:6f:c1:ef:5f:47:84:48:4d:75:42:7f:51: f7:dc:fb:39:cf:bf:63:32:8b:b6:88:b3:54:46:51:82:8a:5d: 19:c5:82:b4:a5:e2:ec:d9:d8:8c:52:03:ba:a0:82:5e:3e:ff: 40:ea:34:b3:46:26:5e:d7:5f:ab:30:07:4e:33:24:6f:e6:46: d3:50:7f:e8:c8:ba:de:86:39:61:63:83:3f:32:ea:1b:4b:3a: 8d:88:99:4d:92:26:70:b9:3b:b2:f8:e6:bd:f9:cf:c6:e9:10: e4:17:ef:53:1d:0f:54:7b:d2:8d:16:ec:47:5a:38:73:90:6c: 66:45:f9:cb:d2:78:b1:75:61:23:f8:f2:bd:dd:56:c7:68:49: ed:9c:0a:f3:f5:47:fc:b9:23:c5:31:a4:0c:c7:e6:0a:6f:9d: c9:f2:09:e7:80:9c:19:c8:d4:f4:65:79:fb:fa:7e:82:41:f6: ce:01:fe:0a:b4:97:30:32:56:4f:dc:eb:5c:af:f0:e2:ac:3f: ce:b7:64:74:b8:1e:d4:c3:61:eb:8c:f1:e4:84:88:18:37:9b: 9c:21:ea:7d:9a:a8:3a:0a:51:65:60:5b:1c:43:95:b2:34:e4: cf:73:58:31 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtcbHb80M7xu6oWaKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDBmYjBmMWMtNTYzNS00OWZmLWFkNGMtODY0NGI2YzNkNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiJ5TrBb1D0AW5is7PV0VduKwi6TqgdXK0rB q/4qrl1q29G/pFLcMkWZy95g2VIbrvcGWIcXkgaH7AQSKi6LxHjRCVgXyYRhiU+a Eo7jktPU7XPiwLZia3r4uj58w2zVHRQE2bHbxflsW2Xsfzd9TiZmGl4jPV/Ci2+i GvWfjfFJs+lBz2VmNyhLgYICUMhoXHy1Nz/dGugnFrW/rtkR3ucK42mrsl5ff/b/ 5MqWfN4JryqDV+arpZ04DdX+DsDZ3iVWeph9xtroK9X5crs0ItimmkHrGWzSVvrj SWtkzVKl9LpJy90COFnArM5k4Fd0w8TbN7QqJMQHzqaacOxMvwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNZNaBc0XOkcxhEilLxNZaNPzoOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDVhZjg5MzgtZmU1NS0z NGNmLThhOTUtM2ZmOTI0N2U2NDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIjMubxI5lBia6dcfVf7/qexINKNKWHgUm/B719H hEhNdUJ/Uffc+znPv2Myi7aIs1RGUYKKXRnFgrSl4uzZ2IxSA7qggl4+/0DqNLNG Jl7XX6swB04zJG/mRtNQf+jIut6GOWFjgz8y6htLOo2ImU2SJnC5O7L45r35z8bp EOQX71MdD1R70o0W7EdaOHOQbGZF+cvSeLF1YSP48r3dVsdoSe2cCvP1R/y5I8Ux pAzH5gpvncnyCeeAnBnI1PRlefv6foJB9s4B/gq0lzAyVk/c61yv8OKsP863ZHS4 HtTDYeuM8eSEiBg3m5wh6n2aqDoKUWVgWxxDlbI05M9zWDE= -----END CERTIFICATE-----Generated at Thu Oct 23 04:11:14 2025 by rpki-client