$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa File: 28bf01a1-e0a0-3223-944c-d3b6117da09c.roa (raw, json) Hash identifier: 6BO1NsHdkeYxBMBP2SXtjfRxeadDiL2WifBicOEICSE= Subject key identifier: 01:DA:AF:F1:35:A2:B0:B9:FA:BB:0F:39:EE:CB:1E:D2:CA:B1:AD:C5 Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584E94EA830B3FE5202F12DECF00 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 16509 IP address blocks: 23.160.208.0/24 maxlen: 24 174.136.248.0/24 maxlen: 24 2602:fd46::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:83:0b:3f:e5:20:2f:12:de:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=286315cd-8ec5-43a1-8ef2-ee7d1dae071a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:20:dd:77:48:2b:32:39:d6:1f:18:90:cc:64: 12:b1:19:d9:11:22:bb:5a:66:53:0f:e7:60:b7:0c: 26:4d:6b:e7:b9:5e:cf:e0:e1:98:90:54:41:34:dd: 68:d4:c6:4d:0b:ee:01:b4:5e:1c:da:d3:b1:ec:d7: be:e4:bd:93:2d:bd:36:f5:b4:32:e2:be:fb:7e:06: d8:78:56:11:02:06:8e:70:e4:51:e2:2b:c5:67:32: 2a:aa:8b:d0:a3:09:5b:13:3b:64:31:f6:ee:2d:9d: 95:37:55:f5:94:b5:9b:e2:56:28:84:1f:7b:35:36: 12:56:b2:9c:43:43:37:bb:34:7a:9f:25:de:9f:7b: 6f:f5:34:6c:ba:20:52:d7:b7:5c:78:ff:be:de:ef: 9b:bd:cc:ee:cb:68:af:13:5d:43:52:f5:90:f8:3b: eb:b0:08:e4:af:1c:a4:e6:47:e3:a9:8b:b3:08:15: 58:a7:c9:e6:95:ec:91:f4:2e:10:e8:b8:51:64:14: 8a:06:00:ca:18:5b:87:a0:c2:f7:c5:22:35:c3:9c: ec:c1:93:91:62:cd:e1:bc:04:83:91:02:c9:87:5f: b3:a7:e4:31:10:fd:1e:66:a9:bf:f8:9f:e6:3a:65: 5a:52:2f:79:b4:a9:4d:8e:a9:0d:b8:d8:fa:9e:9d: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DA:AF:F1:35:A2:B0:B9:FA:BB:0F:39:EE:CB:1E:D2:CA:B1:AD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: 23.160.208.0/24 174.136.248.0/24 IPv6: 2602:fd46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:99:7c:68:5b:f3:8f:9c:ad:cf:84:ff:8c:81:89:63:17:02: 7a:68:db:06:bc:54:0e:f4:cf:9f:46:4a:31:be:ac:0e:e9:94: 46:ff:cb:04:07:4c:61:6d:44:e2:3d:da:09:a8:c0:f9:51:1d: 88:6e:18:9f:93:6d:f6:d7:53:66:5c:13:2b:83:c6:5a:d3:d6: 32:6d:fb:bc:53:53:ae:6f:16:2e:d6:02:c1:9e:73:b0:c3:59: 0c:c7:60:c2:24:df:76:2f:4b:28:1e:f6:46:38:8d:af:b1:0e: b5:79:4d:77:19:4e:04:90:01:46:8f:bf:7e:aa:c6:3d:0b:d0: 51:0c:e9:92:ed:23:d7:57:a3:9b:2e:72:f1:24:b4:90:f0:cc: 52:b6:e0:de:0e:94:9b:a1:80:fa:c2:31:29:6a:8f:40:c2:94: 93:af:14:27:b2:5e:9e:d3:de:c8:6b:9b:98:0e:1a:29:c2:ea: ec:47:49:4b:41:ea:0e:a2:00:b6:7e:3f:51:fa:69:94:0a:03: 06:25:9f:3f:84:e7:0c:be:71:14:e2:be:84:ff:7d:29:78:f1: 2d:d2:b4:8b:0c:53:34:0a:35:00:90:4a:ad:f3:53:7b:58:d4: 3a:70:cf:56:fc:0d:31:5c:af:96:74:19:43:56:56:e4:6a:ec: a9:e4:a6:ea -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE6U6oMLP+UgLxLezwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk Mjg2MzE1Y2QtOGVjNS00M2ExLThlZjItZWU3ZDFkYWUwNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCDdd0grMjnWHxiQzGQSsRnZESK7WmZTD+dg twwmTWvnuV7P4OGYkFRBNN1o1MZNC+4BtF4c2tOx7Ne+5L2TLb029bQy4r77fgbY eFYRAgaOcORR4ivFZzIqqovQowlbEztkMfbuLZ2VN1X1lLWb4lYohB97NTYSVrKc Q0M3uzR6nyXen3tv9TRsuiBS17dceP++3u+bvczuy2ivE11DUvWQ+DvrsAjkrxyk 5kfjqYuzCBVYp8nmleyR9C4Q6LhRZBSKBgDKGFuHoML3xSI1w5zswZORYs3hvASD kQLJh1+zp+QxEP0eZqm/+J/mOmVaUi95tKlNjqkNuNj6np2T7wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFAHar/E1orC5+rsPOe7LHtLKsa3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvMjhiZjAxYTEtZTBhMC0z MjIzLTk0NGMtZDNiNjExN2RhMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6DQAwQA roj4MA4EAgACMAgDBgQmAv1GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAomXxoW/OPnK3PhP+MgYljFwJ6 aNsGvFQO9M+fRkoxvqwO6ZRG/8sEB0xhbUTiPdoJqMD5UR2Ibhifk23211NmXBMr g8Za09Yybfu8U1OubxYu1gLBnnOww1kMx2DCJN92L0soHvZGOI2vsQ61eU13GU4E kAFGj79+qsY9C9BRDOmS7SPXV6ObLnLxJLSQ8MxStuDeDpSboYD6wjEpao9AwpST rxQnsl6e097Ia5uYDhopwursR0lLQeoOogC2fj9R+mmUCgMGJZ8/hOcMvnEU4r6E /30pePEt0rSLDFM0CjUAkEqt81N7WNQ6cM9W/A0xXK+WdBlDVlbkauyp5Kbq -----END CERTIFICATE-----Generated at Fri Jul 24 05:40:48 2026 by rpki-client