$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa File: 8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa (raw, json) Hash identifier: zxpBhZENE2zkCWWAdJgK8HCMdqx0RLu45wbz84Dbj3E= Subject key identifier: 2C:4F:AC:2C:64:F5:C2:33:85:C9:67:53:24:D7:9B:B8:75:11:37:F4 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584B95A79C457400C9CB8816C000 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 198.44.180.0/24 maxlen: 24 198.44.181.0/24 maxlen: 24 198.44.182.0/24 maxlen: 24 198.44.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9c:45:74:00:c9:cb:88:16:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=491369d3-97be-48ae-8e1c-870bf2c937b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:7b:8b:b8:bb:46:30:c4:ab:3f:06:6b:3e: 4d:61:cf:12:15:3c:66:cf:2f:15:4f:7c:bf:e6:a7: e9:86:d8:c0:3b:cd:e8:03:48:28:29:da:47:72:60: 2c:11:07:a3:f3:f2:8b:5e:82:85:71:56:66:e8:44: ee:be:bc:04:a2:a2:6e:5d:23:16:9d:7f:45:f2:d9: 94:cc:08:39:bd:e5:ed:c8:84:cd:54:33:d2:da:77: 9e:a3:89:d2:b5:be:ef:2d:3b:6b:0f:3e:d1:6a:89: 4a:6b:1e:2e:d1:ef:a1:9d:ca:73:d2:98:fc:b9:07: 2a:16:6e:51:e7:07:6b:f5:14:68:ba:d2:b7:ae:bc: 49:97:ee:e3:ae:72:2d:41:4a:e3:e3:3a:06:f1:7d: 76:0c:09:1d:9b:fd:39:29:13:12:79:b4:c6:be:6c: b2:af:93:60:d6:92:f3:ec:d8:8b:21:dc:60:c7:34: 53:c0:5c:54:d5:d9:9a:11:11:11:64:04:48:e5:9f: 65:69:df:22:05:02:d6:89:b9:1d:2f:54:36:d2:84: b7:13:b7:b8:ce:f3:93:1d:6f:e7:f3:fd:06:ef:29: 2a:21:eb:2d:82:07:b8:a1:49:fc:ed:1a:f7:b4:6d: 87:45:e5:a1:cb:95:d7:e3:bd:d6:c2:30:4e:d7:03: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4F:AC:2C:64:F5:C2:33:85:C9:67:53:24:D7:9B:B8:75:11:37:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:96:61:0e:1e:0e:b9:40:01:24:d4:98:09:0c:07:6d:9e:a0: c7:8c:7b:f0:23:10:56:74:0a:b7:7c:26:ec:d3:68:4b:d7:39: 0c:42:77:a1:fa:56:b2:c9:51:ea:d2:64:27:7c:05:17:f5:a6: 58:0c:4d:0f:6c:89:a3:ac:cd:b5:54:2b:46:9b:d0:f2:97:5c: 13:32:6e:75:e6:f4:da:67:9f:aa:4c:00:c0:d4:ef:fd:0f:e3: e3:15:c8:8b:50:6a:24:c9:34:bb:07:f6:0e:e5:51:8e:b6:f6: 83:db:96:ef:0e:5c:f3:38:22:bf:66:f6:e6:cd:29:5d:ed:9b: b1:3e:b9:c4:db:46:34:c5:63:2a:28:62:35:90:8c:f8:a1:3c: 66:a3:ca:db:12:a0:b0:65:d0:3f:39:fb:14:20:53:c6:1f:5a: 70:56:ff:2a:ad:97:6a:1c:65:6c:74:14:78:23:8d:24:c9:f8: 1b:54:eb:83:bf:93:9d:1f:7d:75:3c:b7:b2:09:d0:06:df:f9: 5f:50:3b:e6:f7:b3:b6:b5:be:4c:ee:f9:4b:a0:02:8f:7c:05: 78:81:79:3f:e2:c7:81:61:1a:16:b8:0d:e4:b7:2f:b5:e1:3d: 54:67:20:9d:0c:99:aa:3d:81:a8:cb:8d:96:80:78:1e:e8:2d: 7e:7e:61:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5xFdADJy4gWwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDkxMzY5ZDMtOTdiZS00OGFlLThlMWMtODcwYmYyYzkzN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfh7i7i7RjDEqz8Gaz5NYc8SFTxmzy8VT3y/ 5qfphtjAO83oA0goKdpHcmAsEQej8/KLXoKFcVZm6ETuvrwEoqJuXSMWnX9F8tmU zAg5veXtyITNVDPS2neeo4nStb7vLTtrDz7RaolKax4u0e+hncpz0pj8uQcqFm5R 5wdr9RRoutK3rrxJl+7jrnItQUrj4zoG8X12DAkdm/05KRMSebTGvmyyr5Ng1pLz 7NiLIdxgxzRTwFxU1dmaERERZARI5Z9lad8iBQLWibkdL1Q20oS3E7e4zvOTHW/n 8/0G7ykqIestgge4oUn87Rr3tG2HReWhy5XX473WwjBO1wOYRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxPrCxk9cIzhclnUyTXm7h1ETf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvOGE4ZTg1NzAtYWM4NC0z M2Q3LWJmMmYtY2YyZTBhNzk1ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISWYQ4eDrlAASTUmAkMB22eoMeMe/AjEFZ0Crd8JuzTaEvXOQxCd6H6 VrLJUerSZCd8BRf1plgMTQ9siaOszbVUK0ab0PKXXBMybnXm9Npnn6pMAMDU7/0P 4+MVyItQaiTJNLsH9g7lUY629oPblu8OXPM4Ir9m9ubNKV3tm7E+ucTbRjTFYyoo YjWQjPihPGajytsSoLBl0D85+xQgU8YfWnBW/yqtl2ocZWx0FHgjjSTJ+BtU64O/ k50ffXU8t7IJ0Abf+V9QO+b3s7a1vkzu+UugAo98BXiBeT/ix4FhGha4DeS3L7Xh PVRnIJ0Mmao9gajLjZaAeB7oLX5+YaA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:41 2025 by rpki-client