$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ef06b3f6-f41d-3a4a-8254-50d2aa10f6a9.roa File: ef06b3f6-f41d-3a4a-8254-50d2aa10f6a9.roa (raw, json) Hash identifier: 1e4rvrcN3Qkkc99e6chmPk5cV7gOhDGI+nXCJeWQdwg= Subject key identifier: 38:51:38:88:4A:92:58:0F:D0:CF:B3:0E:80:09:00:57:D6:5F:40:77 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F6C583124D40E900D1C604980 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ef06b3f6-f41d-3a4a-8254-50d2aa10f6a9.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 62468 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:31:24:d4:0e:90:0d:1c:60:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=ff72b26d-addf-4c8c-a35f-9e4709a5754c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:fd:42:9b:f9:21:30:64:90:9e:35:47:c8: dc:45:06:d9:8d:25:0d:dd:23:35:fd:32:77:94:dc: 94:e0:55:3a:a6:05:72:09:59:15:44:4e:5a:80:57: 2b:de:df:91:2a:cf:4f:12:79:1f:b7:6a:6d:3e:01: 9e:0d:1d:1a:57:fd:ec:a0:e4:e3:44:95:7a:21:53: 15:76:cd:7c:45:7d:07:f2:8f:e1:b9:a5:9e:9c:06: 19:fb:2c:07:12:08:43:f5:20:e6:36:04:87:9d:e8: fe:10:17:e3:cf:72:50:a2:bc:55:1e:67:b3:57:ff: d3:85:3f:0b:0e:64:53:41:7e:8f:d2:0d:c1:62:e9: 1a:a3:33:6f:72:f6:71:36:06:7b:0e:db:58:a2:9f: 81:62:1c:21:86:c1:94:84:ae:31:63:8e:f2:09:7a: a7:5b:ce:66:45:91:5b:a0:d6:bd:ee:da:dc:f7:c2: 37:23:6c:d7:b1:36:4e:ef:8e:f0:45:ba:52:5d:f6: 0f:47:a9:9d:ff:e1:60:6e:4f:0f:5e:f5:c1:8c:25: 39:f9:72:00:63:ec:69:7e:a9:e4:05:f5:45:34:a7: 2a:00:e9:fe:ed:88:eb:3a:ff:51:c0:51:2a:22:00: c2:18:01:19:a4:f2:ac:a3:2a:05:f8:32:a5:cb:f1: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:38:88:4A:92:58:0F:D0:CF:B3:0E:80:09:00:57:D6:5F:40:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ef06b3f6-f41d-3a4a-8254-50d2aa10f6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:86:8a:3f:e4:31:70:48:07:28:77:95:f6:93:07:91:a3:ac: f6:0a:6d:19:a3:71:68:20:68:42:ef:60:ec:5d:d3:9c:5e:48: dc:e8:a8:8a:84:ab:fc:34:a1:ad:69:91:0d:77:97:0a:d2:ab: c8:63:4c:78:d0:f4:9c:fd:a3:eb:cf:99:9b:0d:20:0d:84:d6: 4b:b9:43:68:5b:0f:17:af:d9:e6:f9:01:3c:7a:0f:53:eb:e4: a0:02:5a:4e:d1:96:fb:44:73:d2:f3:19:f1:25:a2:a5:ea:e9: 20:d4:50:c6:18:bf:ca:85:4b:fe:a0:06:f8:d3:a5:c2:c5:cb: c4:89:2b:ea:3a:f7:8a:33:cc:2e:97:7f:1f:75:c4:9d:ff:a9: b2:67:53:2f:b4:38:b2:b3:ec:f1:f9:ec:c2:cc:7b:9f:18:38: 99:b2:4c:e1:01:aa:08:38:93:c8:17:35:87:a8:c7:65:e9:a6: 22:57:33:bc:50:f4:38:07:99:a3:f4:5e:66:b8:fa:9f:2e:76: 9e:6f:c9:06:b6:6a:9a:3a:00:74:16:de:63:74:22:b1:97:c6: db:f1:ea:f9:4f:97:bc:68:40:ac:8d:8c:2c:7d:61:2d:a9:f0: 30:e6:1b:16:34:4c:1d:b8:43:f3:40:cf:92:3e:a9:d4:1b:b0: b2:7b:f9:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDEk1A6QDRxgSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZmY3MmIyNmQtYWRkZi00YzhjLWEzNWYtOWU0NzA5YTU3NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnD9Qpv5ITBkkJ41R8jcRQbZjSUN3SM1/TJ3 lNyU4FU6pgVyCVkVRE5agFcr3t+RKs9PEnkft2ptPgGeDR0aV/3soOTjRJV6IVMV ds18RX0H8o/huaWenAYZ+ywHEghD9SDmNgSHnej+EBfjz3JQorxVHmezV//ThT8L DmRTQX6P0g3BYukaozNvcvZxNgZ7DttYop+BYhwhhsGUhK4xY47yCXqnW85mRZFb oNa97trc98I3I2zXsTZO747wRbpSXfYPR6md/+Fgbk8PXvXBjCU5+XIAY+xpfqnk BfVFNKcqAOn+7YjrOv9RwFEqIgDCGAEZpPKsoyoF+DKly/GrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhROIhKklgP0M+zDoAJAFfWX0B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZWYwNmIzZjYtZjQxZC0z YTRhLTgyNTQtNTBkMmFhMTBmNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6Gij/kMXBIByh3lfaTB5GjrPYKbRmjcWggaELvYOxd05xeSNzoqIqE q/w0oa1pkQ13lwrSq8hjTHjQ9Jz9o+vPmZsNIA2E1ku5Q2hbDxev2eb5ATx6D1Pr 5KACWk7RlvtEc9LzGfEloqXq6SDUUMYYv8qFS/6gBvjTpcLFy8SJK+o694ozzC6X fx91xJ3/qbJnUy+0OLKz7PH57MLMe58YOJmyTOEBqgg4k8gXNYeox2XppiJXM7xQ 9DgHmaP0Xma4+p8udp5vyQa2apo6AHQW3mN0IrGXxtvx6vlPl7xoQKyNjCx9YS2p 8DDmGxY0TB24Q/NAz5I+qdQbsLJ7+Yo= -----END CERTIFICATE-----Generated at Sun Oct 25 01:01:39 2026 by rpki-client