$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa File: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (raw, json) Hash identifier: OVSSndFNffnRru+noiPtm4aR53TF0lJ6fnpOhi3I/5s= Subject key identifier: BE:9C:66:7D:E3:21:0C:7E:C2:08:03:02:AE:66:48:AD:28:11:A0:B6 Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584AE461158CBD9357E7E9838A00 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 398328 IP address blocks: 23.160.208.0/24 maxlen: 24 174.136.248.0/24 maxlen: 24 2602:fd46::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:15:8c:bd:93:57:e7:e9:83:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=aef47ca5-32dc-43ed-8b6f-bec2c0f3b897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:eb:e5:3f:53:cb:fe:1e:34:76:67:e6:d1: 4e:02:2c:f6:5a:51:83:ca:30:a1:5a:86:14:46:df: 11:6e:c7:da:08:f7:c3:da:41:db:a9:e2:4d:5d:93: 53:93:ba:f3:3d:cb:65:eb:b8:91:e9:c2:7c:29:c4: e9:58:53:d0:72:6b:26:6e:94:e2:f3:70:00:91:d5: b4:5e:9c:6b:fa:ce:a8:1b:b6:b8:b0:4b:67:8c:77: 38:90:82:01:15:40:1e:3f:19:c7:c2:96:09:9c:24: 1d:e9:a6:04:6d:c7:fe:fa:66:3b:34:72:1c:8d:23: 06:5b:90:39:d3:a1:14:a7:69:76:44:89:06:4c:29: db:89:34:4f:f1:9f:8a:60:68:12:03:ab:8d:ca:b5: a4:cf:5b:fb:12:77:8c:39:44:4c:54:3f:b1:01:f6: 37:d8:a9:23:68:57:36:5c:98:c8:84:f3:cd:87:ff: 73:7a:0d:c5:bf:1b:82:df:b3:bf:e5:9b:e0:9f:11: b0:86:e6:da:c9:30:92:da:72:18:a6:8e:02:e0:50: 2a:7a:dc:97:75:df:07:e5:0a:3c:11:2d:19:01:4b: 4e:96:ce:3c:f0:a0:6d:42:ee:c6:fc:1e:80:0a:2e: af:29:eb:60:48:14:54:80:ed:7e:56:8c:9d:f3:13: 87:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9C:66:7D:E3:21:0C:7E:C2:08:03:02:AE:66:48:AD:28:11:A0:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: 23.160.208.0/24 174.136.248.0/24 IPv6: 2602:fd46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:86:3d:65:4b:c3:ef:ec:ca:b5:79:5b:b3:30:94:c1:5f:90: e9:91:f1:51:79:59:90:12:43:fa:fc:39:02:c3:2b:e3:93:d8: 2a:90:18:b6:ee:1f:d5:93:b1:6f:45:89:76:db:a9:a7:51:93: 76:26:a0:90:43:11:00:fe:65:37:35:67:79:cd:49:74:75:7b: a3:1c:e5:55:a3:45:24:4d:0b:63:b0:a5:2b:6f:23:5e:c4:a2: 6c:5c:2b:9e:90:c0:4a:19:a7:42:19:31:cf:5d:e6:aa:b0:81: b5:ab:a7:86:c5:bd:e6:2b:f7:dd:ad:69:a6:93:03:1e:4f:6d: 49:d8:9c:5c:6f:6c:07:c2:91:7d:d6:55:70:b3:19:09:a4:5b: 25:bd:62:b7:a0:15:ab:78:e0:3e:78:19:73:29:ba:d2:01:6d: 95:ac:f2:bc:1a:75:3a:f7:d8:57:2b:9c:24:24:05:05:88:1d: 8f:ea:45:9a:5f:b1:ad:6c:c2:07:7c:79:22:17:08:f2:03:34: 1e:87:47:a2:b5:b0:d3:13:19:44:ee:27:d3:5c:e4:25:d8:95: da:cd:68:54:dd:4e:78:9e:7a:f6:66:86:6b:5d:c4:8c:ff:24: a9:fa:88:af:87:2f:a0:02:c1:6a:f0:1d:ed:64:4c:17:56:f8: 14:16:3d:80 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWErkYRWMvZNX5+mDigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YWVmNDdjYTUtMzJkYy00M2VkLThiNmYtYmVjMmMwZjNiODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocLr5T9Ty/4eNHZn5tFOAiz2WlGDyjChWoYU Rt8RbsfaCPfD2kHbqeJNXZNTk7rzPctl67iR6cJ8KcTpWFPQcmsmbpTi83AAkdW0 Xpxr+s6oG7a4sEtnjHc4kIIBFUAePxnHwpYJnCQd6aYEbcf++mY7NHIcjSMGW5A5 06EUp2l2RIkGTCnbiTRP8Z+KYGgSA6uNyrWkz1v7EneMOURMVD+xAfY32KkjaFc2 XJjIhPPNh/9zeg3FvxuC37O/5ZvgnxGwhubayTCS2nIYpo4C4FAqetyXdd8H5Qo8 ES0ZAUtOls488KBtQu7G/B6ACi6vKetgSBRUgO1+Voyd8xOHKwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFL6cZn3jIQx+wggDAq5mSK0oEaC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvM2JkZmViZDMtMTkxYy0z MGU5LWIyMGItNjdiNmYwMGMwMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6DQAwQA roj4MA4EAgACMAgDBgQmAv1GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBChj1lS8Pv7Mq1eVuzMJTBX5Dp kfFReVmQEkP6/DkCwyvjk9gqkBi27h/Vk7FvRYl226mnUZN2JqCQQxEA/mU3NWd5 zUl0dXujHOVVo0UkTQtjsKUrbyNexKJsXCuekMBKGadCGTHPXeaqsIG1q6eGxb3m K/fdrWmmkwMeT21J2Jxcb2wHwpF91lVwsxkJpFslvWK3oBWreOA+eBlzKbrSAW2V rPK8GnU699hXK5wkJAUFiB2P6kWaX7GtbMIHfHkiFwjyAzQeh0eitbDTExlE7ifT XOQl2JXazWhU3U54nnr2ZoZrXcSM/ySp+oivhy+gAsFq8B3tZEwXVvgUFj2A -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:23 2025 by rpki-client