$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa File: b2ed4966-d792-34c7-806d-aaa85e042841.roa (raw, json) Hash identifier: aFAxmpOn3K71Bd7F/WK344JKIVvN98I1T8Aq4Pw1b7s= Subject key identifier: D3:D3:FE:7C:66:40:57:6E:11:CF:30:F9:45:9F:35:C9:43:BA:01:B3 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584BA7CCF5D581953F9F1C7AE500 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 62468 IP address blocks: 198.44.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:f5:d5:81:95:3f:9f:1c:7a:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=835cdbaa-e058-4943-904a-204c8a1f7089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:aa:cf:b6:5f:ed:17:c5:8e:67:5e:7a:41: 7c:eb:80:0b:1d:b0:ce:f2:c4:05:b8:9f:e3:17:e8: af:d6:bb:80:fa:74:6e:ef:9c:6e:3e:0d:22:45:0a: 69:c1:85:d9:ac:fb:c0:aa:59:f9:e4:7d:9e:a5:4e: 66:74:6f:54:2a:8b:0c:a2:aa:23:36:cc:c0:78:ef: f6:02:09:65:b0:1f:77:fd:c9:87:4d:f2:1b:4a:b2: df:00:be:8d:7b:89:c0:67:3c:bc:9c:d5:f2:4f:10: 42:d8:11:14:6b:65:b2:4c:33:28:44:e9:d4:c9:73: e7:4c:cb:d6:d3:70:46:b1:75:6a:72:d1:49:5e:af: 08:28:82:e6:8f:89:00:58:d4:ce:ee:a5:07:51:08: 04:b5:ee:c4:18:0a:f6:6e:76:b1:21:61:84:c1:30: 0b:e1:3e:ee:83:f9:47:88:18:3d:06:58:91:b8:ec: 5d:c6:18:c4:8e:a4:cf:eb:a4:e5:b3:f4:8f:d1:f0: 11:2c:1f:fa:ac:af:8b:df:9d:9b:04:ce:41:69:f9: bc:00:69:55:ba:14:27:da:91:29:f5:8e:d9:c6:d0: 20:06:1b:58:0f:95:41:b0:46:a0:14:5d:c9:ae:db: 79:b6:24:82:77:92:ad:d3:72:c2:cd:88:48:14:b7: db:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D3:FE:7C:66:40:57:6E:11:CF:30:F9:45:9F:35:C9:43:BA:01:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:23:f4:8e:83:5a:a3:2e:9e:81:42:68:f5:3d:df:19:3c:cc: 2f:76:ec:3e:33:38:49:5b:bd:17:90:81:22:c9:25:c0:5c:57: d2:cf:5a:98:a5:f3:34:a0:54:8c:14:64:82:a8:f1:b1:e9:ed: f8:b2:1d:56:fe:d4:38:ea:e7:bc:c8:a1:61:94:f1:01:54:be: fd:cd:da:13:36:28:5e:a4:cf:58:8d:ce:f9:f7:77:33:e7:27: 2d:60:08:2e:7a:cb:fd:a1:b7:63:9f:02:cf:6b:62:f6:95:75: 9a:32:32:b6:3b:6d:e3:21:fa:cb:06:18:80:96:d3:37:8f:a5: 98:2a:e4:06:01:0f:4e:49:9d:37:2f:ab:ec:f9:fb:fe:a6:12: aa:8f:2f:be:6c:3b:ca:21:38:6d:2e:5d:aa:d1:58:d7:43:a3: 05:90:13:22:c3:29:b9:ee:06:c2:5a:a7:ba:e1:2b:a0:78:e8: 5f:6e:26:2c:e4:00:01:61:d7:53:63:65:9f:e2:49:2a:32:8c: ee:08:0b:b9:b0:ed:b8:af:31:99:e9:2f:71:b5:bc:70:cb:a4: 3e:bf:5f:1f:71:22:56:01:16:62:be:4c:81:3b:08:f7:01:ce: b6:55:ca:4a:ca:50:f8:70:19:5b:b1:33:42:b6:26:a9:8f:f7: d8:e6:2a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPXVgZU/nxx65QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ODM1Y2RiYWEtZTA1OC00OTQzLTkwNGEtMjA0YzhhMWY3MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOyqz7Zf7RfFjmdeekF864ALHbDO8sQFuJ/j F+iv1ruA+nRu75xuPg0iRQppwYXZrPvAqln55H2epU5mdG9UKosMoqojNszAeO/2 AgllsB93/cmHTfIbSrLfAL6Ne4nAZzy8nNXyTxBC2BEUa2WyTDMoROnUyXPnTMvW 03BGsXVqctFJXq8IKILmj4kAWNTO7qUHUQgEte7EGAr2bnaxIWGEwTAL4T7ug/lH iBg9BliRuOxdxhjEjqTP66Tls/SP0fARLB/6rK+L352bBM5Bafm8AGlVuhQn2pEp 9Y7ZxtAgBhtYD5VBsEagFF3Jrtt5tiSCd5Kt03LCzYhIFLfb5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPT/nxmQFduEc8w+UWfNclDugGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjJlZDQ5NjYtZDc5Mi0z NGM3LTgwNmQtYWFhODVlMDQyODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiyjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwj9I6DWqMunoFCaPU93xk8zC927D4zOElbvReQgSLJJcBcV9LPWpil 8zSgVIwUZIKo8bHp7fiyHVb+1Djq57zIoWGU8QFUvv3N2hM2KF6kz1iNzvn3dzPn Jy1gCC56y/2ht2OfAs9rYvaVdZoyMrY7beMh+ssGGICW0zePpZgq5AYBD05JnTcv q+z5+/6mEqqPL75sO8ohOG0uXarRWNdDowWQEyLDKbnuBsJap7rhK6B46F9uJizk AAFh11NjZZ/iSSoyjO4IC7mw7bivMZnpL3G1vHDLpD6/Xx9xIlYBFmK+TIE7CPcB zrZVykrKUPhwGVuxM0K2JqmP99jmKqg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:18 2025 by rpki-client