$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa File: 309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa (raw, json) Hash identifier: E5ZMIL2HOIfkcH3BEybbYjNpajYTmx79SINPp59LAX0= Subject key identifier: 25:76:71:0A:98:B7:EB:B2:68:6E:7F:54:8C:F7:04:F0:57:9A:A1:4B Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B95A79C597EF55B5C0B355980 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 198.44.180.0/24 maxlen: 24 198.44.181.0/24 maxlen: 24 198.44.182.0/24 maxlen: 24 198.44.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9c:59:7e:f5:5b:5c:0b:35:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d735ae38-806d-47c2-9613-f60353650d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:85:55:8b:96:e8:93:1d:96:7f:87:b3:2b: 8a:e0:24:d2:c7:ba:16:24:d4:96:75:e7:34:af:45: 88:c6:e3:c9:ba:2b:e5:c1:80:8e:9d:8e:37:78:55: 87:7c:93:f5:68:1b:0e:16:94:8f:26:b0:5a:7e:90: e5:56:af:ae:79:c5:09:be:96:e8:e6:8f:ef:6e:ed: 87:bd:1b:ed:58:6a:ee:4a:d1:01:14:fa:ca:a9:c7: ff:70:be:f6:44:de:05:64:a1:d0:7c:80:dc:33:f8: 51:fe:ec:c5:ce:36:74:a4:cd:cd:b6:26:44:35:02: 8d:e4:42:49:55:4b:7e:fe:75:b2:f2:07:67:a5:01: f4:2d:23:06:0b:87:c2:3f:8d:20:ae:c6:dd:83:d8: 28:22:e3:64:be:94:ea:19:3d:95:bd:d4:ae:50:b7: f9:d4:54:58:70:06:0f:10:15:5e:ca:46:c5:bb:d8: 39:5c:26:a5:14:b8:c6:33:d6:46:37:d4:9f:6a:dc: 6e:cd:50:5a:b7:87:21:3f:82:c6:8a:a7:c6:e2:82: 3c:15:22:61:08:9d:60:7d:e5:19:f2:44:bc:20:3d: db:5c:c2:d4:86:b4:8d:6d:0e:46:89:e6:6a:c6:0b: b2:1d:6a:63:4c:27:fa:77:9a:55:d2:fd:35:c0:57: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:76:71:0A:98:B7:EB:B2:68:6E:7F:54:8C:F7:04:F0:57:9A:A1:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5a:7d:5d:2b:f2:2d:39:df:7b:33:bb:30:e5:87:de:4e:9b: c0:13:32:47:b5:23:29:56:2b:bb:1e:cb:43:4d:1e:7f:27:c0: 23:53:95:11:6a:8c:f3:80:de:29:03:d8:fe:ab:a5:e4:e0:98: 83:04:d2:10:6c:dc:c4:79:ff:12:30:6f:fd:76:16:17:2c:a9: 4a:8f:f3:40:30:f9:2d:c5:85:54:6f:95:19:be:33:91:f8:d7: 0c:03:f5:88:d8:28:ab:b2:b3:9d:c9:c5:7c:c6:81:2a:a8:ff: a0:b9:a3:a1:c0:ef:b7:c9:72:98:ec:24:54:72:63:4e:76:1a: d1:99:06:4e:6d:b7:77:c5:68:40:13:89:5a:39:25:1f:26:2c: 01:d7:ff:da:4b:4a:a3:f4:3f:02:99:d6:91:7c:9c:d9:4f:85: fb:2b:b3:65:32:06:53:09:b6:2c:5c:6b:77:da:98:b7:86:d8: 00:67:95:da:1a:fe:c9:1c:83:72:fc:d3:56:ec:ea:ab:a8:5b: e1:13:53:7f:e1:cc:e9:aa:ab:61:17:14:cb:07:80:84:a1:d2: 25:ff:de:c5:e5:42:1d:34:50:41:c6:9c:ef:50:44:d7:aa:b6: 63:00:e4:df:6d:4d:a7:d3:07:a5:92:34:d1:8b:57:9b:42:d7: fb:a8:71:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5xZfvVbXAs1WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDczNWFlMzgtODA2ZC00N2MyLTk2MTMtZjYwMzUzNjUwZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUqFVYuW6JMdln+HsyuK4CTSx7oWJNSWdec0 r0WIxuPJuivlwYCOnY43eFWHfJP1aBsOFpSPJrBafpDlVq+uecUJvpbo5o/vbu2H vRvtWGruStEBFPrKqcf/cL72RN4FZKHQfIDcM/hR/uzFzjZ0pM3NtiZENQKN5EJJ VUt+/nWy8gdnpQH0LSMGC4fCP40grsbdg9goIuNkvpTqGT2VvdSuULf51FRYcAYP EBVeykbFu9g5XCalFLjGM9ZGN9SfatxuzVBat4chP4LGiqfG4oI8FSJhCJ1gfeUZ 8kS8ID3bXMLUhrSNbQ5GieZqxguyHWpjTCf6d5pV0v01wFcNvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV2cQqYt+uyaG5/VIz3BPBXmqFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzA5YzRjZWUtNTE5Ny0z YTZmLWE2ZTctMjQ1MDRiMGE1Yjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZafV0r8i0533szuzDlh95Om8ATMke1IylWK7sey0NNHn8nwCNTlRFq jPOA3ikD2P6rpeTgmIME0hBs3MR5/xIwb/12FhcsqUqP80Aw+S3FhVRvlRm+M5H4 1wwD9YjYKKuys53JxXzGgSqo/6C5o6HA77fJcpjsJFRyY052GtGZBk5tt3fFaEAT iVo5JR8mLAHX/9pLSqP0PwKZ1pF8nNlPhfsrs2UyBlMJtixca3famLeG2ABnldoa /skcg3L801bs6quoW+ETU3/hzOmqq2EXFMsHgISh0iX/3sXlQh00UEHGnO9QRNeq tmMA5N9tTafTB6WSNNGLV5tC1/uocUk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:46:12 2025 by rpki-client