$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa File: 30859cb8-c929-30aa-bad4-950f640e28f0.roa (raw, json) Hash identifier: cQDl4Lc2o5c/IgiEfwNU4dlyielGdjLj0iGOD0I9QJo= Subject key identifier: D8:EE:CA:E3:C4:ED:59:AA:D1:72:10:23:12:05:DC:01:5A:A1:76:16 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584BAEC7BD4457861E1502781DE0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 142032 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bd:44:57:86:1e:15:02:78:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=26498c80-6575-49dd-84ea-9afa2f998637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:f8:da:8d:85:ae:06:d0:0a:dc:c8:c8:8f: 35:81:a6:53:f8:bd:e5:46:91:85:60:0d:2f:0f:50: e3:82:71:d6:39:19:1a:a6:1d:d8:2d:f9:a0:39:46: 12:56:70:02:75:f0:c8:b2:2e:dc:22:66:bc:93:d2: 93:b7:35:db:a3:a2:15:b5:e6:35:e8:b6:2e:e9:b9: a5:40:7e:72:1d:b6:5b:79:c5:91:e8:fd:4e:bb:f1: e4:e1:8e:17:c4:b9:9a:ed:58:25:ff:d1:34:f5:46: ed:c8:9f:33:bf:cf:3e:2a:18:d8:d9:61:93:e8:5f: 39:69:87:ce:ec:40:bf:31:3a:2a:41:15:2d:23:08: 4b:e3:12:2c:06:eb:cb:e8:6a:9e:e9:b8:21:bc:15: 4e:5a:c1:7d:48:fa:3c:bc:f5:2d:08:42:7b:70:a8: d8:b5:f9:64:0b:e5:54:04:92:ee:e6:c0:29:75:48: 66:ed:3a:4a:90:46:be:c1:3e:40:88:28:2a:bd:de: 3d:19:90:09:c3:15:07:aa:78:9d:10:55:21:ec:e1: 44:a2:ae:9d:c9:49:26:21:b5:72:ad:37:58:3b:19: 31:a2:25:38:cc:88:2a:4a:fb:bb:23:71:58:1b:49: 71:c9:c2:05:20:6a:ea:15:a0:79:b9:03:81:f4:54: 5e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EE:CA:E3:C4:ED:59:AA:D1:72:10:23:12:05:DC:01:5A:A1:76:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:dd:9c:13:cb:b7:1e:6c:dd:6d:49:0b:ff:02:cf:60:34:68: 52:28:a7:97:36:65:0d:ce:44:a7:a1:ac:7c:b4:9a:3b:a7:4a: ad:2f:40:83:e5:6c:d4:49:92:30:a5:67:7f:e2:e0:3d:e6:63: 0c:cb:06:13:07:07:a9:88:21:a3:a4:46:bc:98:75:4a:13:45: 57:e8:5a:aa:d6:75:71:56:13:52:c0:a9:dc:66:09:ad:a8:f4: e5:8f:50:af:d2:e9:bc:af:80:c8:63:6b:cb:b8:19:bb:20:d0: 37:a9:30:c0:21:1a:a3:a0:c8:7d:6b:43:09:e1:94:5a:1a:7d: 1f:0a:5b:0a:de:2e:2c:e9:d2:1a:22:6f:1a:1e:31:cf:b3:5d: 10:a9:73:ba:7f:46:5e:44:7c:c8:00:6a:a1:3f:1d:c1:ba:1b: 4b:d6:53:a2:92:0f:19:e1:93:39:c7:b3:51:9b:cc:1d:4b:59: 5a:ab:47:bc:ef:d5:48:5f:74:fa:df:5b:0a:e5:f1:36:f1:99: ef:92:ec:d5:0c:f8:9b:05:71:06:c3:48:9b:74:e2:3c:23:b3: 2a:89:ad:fe:5f:9d:d3:2d:75:fa:3e:30:29:39:f5:cd:6f:89: de:79:7a:86:c5:c3:a4:60:23:01:ca:78:a7:5e:98:15:0c:b4: cd:20:16:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux71EV4YeFQJ4HeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MjY0OThjODAtNjU3NS00OWRkLTg0ZWEtOWFmYTJmOTk4NjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLj42o2FrgbQCtzIyI81gaZT+L3lRpGFYA0v D1DjgnHWORkaph3YLfmgOUYSVnACdfDIsi7cIma8k9KTtzXbo6IVteY16LYu6bml QH5yHbZbecWR6P1Ou/Hk4Y4XxLma7Vgl/9E09UbtyJ8zv88+KhjY2WGT6F85aYfO 7EC/MToqQRUtIwhL4xIsBuvL6Gqe6bghvBVOWsF9SPo8vPUtCEJ7cKjYtflkC+VU BJLu5sApdUhm7TpKkEa+wT5AiCgqvd49GZAJwxUHqnidEFUh7OFEoq6dyUkmIbVy rTdYOxkxoiU4zIgqSvu7I3FYG0lxycIFIGrqFaB5uQOB9FRe8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjuyuPE7Vmq0XIQIxIF3AFaoXYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzA4NTljYjgtYzkyOS0z MGFhLWJhZDQtOTUwZjY0MGUyOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3dnBPLtx5s3W1JC/8Cz2A0aFIop5c2ZQ3ORKehrHy0mjunSq0vQIPl bNRJkjClZ3/i4D3mYwzLBhMHB6mIIaOkRryYdUoTRVfoWqrWdXFWE1LAqdxmCa2o 9OWPUK/S6byvgMhja8u4Gbsg0DepMMAhGqOgyH1rQwnhlFoafR8KWwreLizp0hoi bxoeMc+zXRCpc7p/Rl5EfMgAaqE/HcG6G0vWU6KSDxnhkznHs1GbzB1LWVqrR7zv 1UhfdPrfWwrl8Tbxme+S7NUM+JsFcQbDSJt04jwjsyqJrf5fndMtdfo+MCk59c1v id55eobFw6RgIwHKeKdemBUMtM0gFuI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:46:39 2025 by rpki-client