$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa File: 31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa (raw, json) Hash identifier: h4f0VJLqNUvDxpxSsJoGT/79kpwXOPDEV/rxSRWum4A= Subject key identifier: BB:B9:D6:3A:BF:6B:2F:4F:8A:3F:BB:4B:68:DB:C2:4A:41:C0:8E:F5 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F77835D78BC19B94859378180 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 29752 IP address blocks: 23.251.35.0/24 maxlen: 24 107.151.194.0/24 maxlen: 24 198.44.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5d:78:bc:19:b9:48:59:37:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=fff2cd17-70a2-4413-89c7-681ee7002005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e8:46:d4:34:d5:7e:ec:90:42:6d:fe:c7:46: b7:97:9c:0d:ee:1c:0f:fa:f7:c7:a6:39:c6:f0:ac: 0b:42:33:7b:56:1c:6d:cf:66:e0:5d:4c:3f:7a:8d: dc:a7:3d:77:f7:24:e2:45:f4:88:7d:c9:cf:cd:ca: df:5b:71:55:e8:f1:95:f9:3f:41:a2:48:74:8d:61: 2d:d2:a3:81:88:66:bc:ca:b7:b9:9e:da:73:a5:35: e9:fb:73:7d:34:d3:fc:8b:ef:f9:af:87:41:51:cc: df:33:1c:36:f1:99:c1:1f:70:b5:72:dc:1b:d2:f1: 7e:e0:23:24:b8:38:ad:3e:a3:0d:24:f7:0f:1b:c0: 1a:e0:72:49:e7:d3:2b:85:d0:f0:e3:da:bf:d2:68: df:38:b2:6c:0f:e4:10:1f:31:5f:17:61:22:2c:e4: d9:0b:75:30:c1:8e:b0:6e:bd:f1:0d:98:f8:4a:e6: 57:c7:db:86:2f:9b:e6:c8:8f:88:52:50:21:ff:a7: 16:92:12:ea:d3:cc:b2:9d:c5:b1:44:b7:d2:79:c9: b8:ab:56:f7:c3:0c:4b:8e:ac:87:58:20:8d:b8:00: a9:ef:58:99:fb:5c:6d:74:aa:7c:6b:fe:84:17:51: 0a:48:ae:80:a4:3d:62:31:f6:bf:65:75:09:af:d7: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:D6:3A:BF:6B:2F:4F:8A:3F:BB:4B:68:DB:C2:4A:41:C0:8E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.35.0/24 107.151.194.0/24 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ec:72:ba:c9:68:1a:0d:75:50:58:e8:3d:e4:41:f7:88:d8: 9c:99:a5:f7:3a:b3:92:a2:99:c7:71:4d:86:17:4d:3f:70:5f: 73:fd:f5:a0:9d:9d:8e:44:84:57:76:cb:52:26:3f:2a:85:21: 0f:1f:a7:33:3e:b5:7e:68:fc:77:70:65:67:b2:dc:63:2a:2a: 1f:a1:3e:56:e5:a9:82:91:4c:9c:a6:99:35:29:04:63:2f:f6: 4a:01:2b:84:d7:af:85:46:10:ab:09:57:94:87:2d:52:d6:cc: d9:f6:3e:7c:0e:75:81:b7:1c:46:67:d0:36:f6:a9:eb:4a:57: 21:a5:4d:6d:54:13:15:7d:98:72:89:a6:8c:d1:44:7a:27:57: 47:e1:17:b6:a4:84:19:6f:ce:9e:9d:48:c0:b3:e8:9f:1a:15: 30:7e:d8:28:dd:af:f0:0a:49:e7:f3:34:6b:1b:0e:67:f6:b0: c6:93:7d:0d:7f:13:e8:63:6c:75:e5:f7:7d:30:ae:e4:5d:f4: c3:e6:b1:be:b0:48:b6:3f:a5:49:9d:03:8c:83:9c:69:c8:89: 94:59:73:34:4f:ff:20:8c:a5:f2:62:09:5e:01:e5:f1:57:56: 43:64:be:d1:65:19:24:b4:63:9d:6c:7d:25:63:f7:23:2d:00: 5a:8e:7e:d9 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE93g114vBm5SFk3gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmZmMmNkMTctNzBhMi00NDEzLTg5YzctNjgxZWU3MDAyMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuhG1DTVfuyQQm3+x0a3l5wN7hwP+vfHpjnG 8KwLQjN7Vhxtz2bgXUw/eo3cpz139yTiRfSIfcnPzcrfW3FV6PGV+T9Bokh0jWEt 0qOBiGa8yre5ntpzpTXp+3N9NNP8i+/5r4dBUczfMxw28ZnBH3C1ctwb0vF+4CMk uDitPqMNJPcPG8Aa4HJJ59MrhdDw49q/0mjfOLJsD+QQHzFfF2EiLOTZC3UwwY6w br3xDZj4SuZXx9uGL5vmyI+IUlAh/6cWkhLq08yyncWxRLfSecm4q1b3wwxLjqyH WCCNuACp71iZ+1xtdKp8a/6EF1EKSK6ApD1iMfa/ZXUJr9dKowIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLu51jq/ay9Pij+7S2jbwkpBwI71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzFjMGE1ZDgtM2VkZS0z MTk5LWJhZmUtZjZhNzEzNGQ5M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF/sjAwQA a5fCAwQCxiysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHbscrrJaBoNdVBY6D3kQfeI2JyZpfc6s5Kimcdx TYYXTT9wX3P99aCdnY5EhFd2y1ImPyqFIQ8fpzM+tX5o/HdwZWey3GMqKh+hPlbl qYKRTJymmTUpBGMv9koBK4TXr4VGEKsJV5SHLVLWzNn2PnwOdYG3HEZn0Db2qetK VyGlTW1UExV9mHKJpozRRHonV0fhF7akhBlvzp6dSMCz6J8aFTB+2Cjdr/AKSefz NGsbDmf2sMaTfQ1/E+hjbHXl930wruRd9MPmsb6wSLY/pUmdA4yDnGnIiZRZczRP /yCMpfJiCV4B5fFXVkNkvtFlGSS0Y51sfSVj9yMtAFqOftk= -----END CERTIFICATE-----Generated at Tue Oct 13 18:04:20 2026 by rpki-client