$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa File: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (raw, json) Hash identifier: 2hxqpUuNq6fWEWYJ97c67HCbFgTF0gz9fNjCSTcNm8I= Subject key identifier: CA:AB:5A:89:1F:F5:2B:A2:32:70:A8:31:3F:02:03:7E:78:23:98:EA Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584ACE0BA400CC60D48C7996A800 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 32526 IP address blocks: 23.160.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a4:00:cc:60:d4:8c:79:96:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=acc078d3-2e29-4cbb-877f-44e537047102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:c4:32:f2:69:67:f4:7e:1a:46:57:84:96: bb:79:f9:a7:84:c3:93:04:ba:cd:c1:a8:be:81:48: e3:95:bd:f9:ec:82:61:d1:67:7b:c8:d1:4f:8d:f2: 6a:c1:77:a0:b5:80:01:ad:2b:84:76:71:6a:82:5a: 04:27:2b:41:f1:b5:b4:54:c8:2a:99:fd:0c:f6:99: 79:c7:b6:e7:4d:1e:04:f3:0a:68:58:42:85:99:0b: 8f:f2:03:e3:fb:bb:12:13:b8:80:7f:ac:03:e1:ec: 65:cd:ff:cb:52:d9:3c:f1:4d:00:63:c1:53:09:3c: 3e:ed:90:b4:e9:6f:27:99:ad:a6:e9:7c:21:86:bf: 37:d5:f6:b8:7b:b6:42:ab:d9:db:5a:50:35:e2:bb: ad:19:f9:d6:1d:b6:e6:2f:08:84:30:75:d0:55:91: 3d:36:c8:81:7b:76:30:b8:d8:64:ca:d7:98:5a:48: d0:5d:f3:f5:32:e4:b5:ec:28:ed:c5:e8:e0:56:f3: 0c:8d:26:b6:6b:b6:7d:0b:d3:75:3d:eb:05:33:32: 3a:2a:d1:92:ca:ac:b4:aa:42:2b:ae:f7:2d:14:ea: e8:30:b5:f1:6b:c9:46:08:1a:87:24:ce:13:2d:a3: ef:b6:a1:94:13:f6:e5:9a:57:07:e1:61:f7:5d:65: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AB:5A:89:1F:F5:2B:A2:32:70:A8:31:3F:02:03:7E:78:23:98:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: 23.160.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f5:51:7f:c2:6f:32:09:00:75:5a:98:b9:91:e3:53:ea:05: 16:cc:76:8d:ea:f7:de:95:2e:55:fe:fe:52:96:00:39:e5:84: 30:bd:11:84:be:10:3c:33:3d:37:b9:e2:84:58:d1:fb:1b:44: da:c4:7a:7e:29:20:b8:53:da:bd:94:61:2e:15:47:a3:ed:e8: a9:37:7d:ee:7f:50:e7:eb:97:43:5a:ba:bb:97:3b:fd:24:26: 80:5d:6f:e5:e3:c5:3a:26:cf:bc:1d:22:7a:be:b1:51:3c:30: f5:3a:a4:07:f2:2b:0c:04:ff:f4:29:0e:84:ea:e8:e1:de:ce: ae:99:6c:37:61:53:15:8d:ba:5f:f0:e0:90:db:c7:32:2c:09: b5:0c:89:81:65:80:c6:0e:ea:94:8b:c7:05:45:65:64:44:44: 4f:92:4b:b3:40:24:be:2b:0f:81:d0:a0:82:dc:4e:e0:a2:b5: d2:a3:98:29:99:c0:8a:52:43:be:63:28:d2:89:12:d2:5d:ac: cd:61:af:ba:98:92:f1:6d:56:49:32:34:44:46:f9:e7:97:5c: 54:96:35:dc:17:d8:cd:49:2d:e2:e9:33:74:14:c2:3e:49:88: 20:47:2a:09:7f:65:89:15:e5:a2:06:71:33:b6:ba:a3:48:1d: 88:db:02:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6QAzGDUjHmWqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YWNjMDc4ZDMtMmUyOS00Y2JiLTg3N2YtNDRlNTM3MDQ3MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlLEMvJpZ/R+GkZXhJa7efmnhMOTBLrNwai+ gUjjlb357IJh0Wd7yNFPjfJqwXegtYABrSuEdnFqgloEJytB8bW0VMgqmf0M9pl5 x7bnTR4E8wpoWEKFmQuP8gPj+7sSE7iAf6wD4exlzf/LUtk88U0AY8FTCTw+7ZC0 6W8nma2m6Xwhhr831fa4e7ZCq9nbWlA14rutGfnWHbbmLwiEMHXQVZE9NsiBe3Yw uNhkyteYWkjQXfP1MuS17CjtxejgVvMMjSa2a7Z9C9N1PesFMzI6KtGSyqy0qkIr rvctFOroMLXxa8lGCBqHJM4TLaPvtqGUE/blmlcH4WH3XWXCDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqrWokf9SuiMnCoMT8CA354I5jqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvMTY2NGI1MDktNWQ4Yy0z MGFkLTg2OWUtZTllMmJiMTU5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz1UX/CbzIJAHVamLmR41PqBRbMdo3q996VLlX+/lKWADnlhDC9EYS+ EDwzPTe54oRY0fsbRNrEen4pILhT2r2UYS4VR6Pt6Kk3fe5/UOfrl0NauruXO/0k JoBdb+XjxTomz7wdInq+sVE8MPU6pAfyKwwE//QpDoTq6OHezq6ZbDdhUxWNul/w 4JDbxzIsCbUMiYFlgMYO6pSLxwVFZWRERE+SS7NAJL4rD4HQoILcTuCitdKjmCmZ wIpSQ75jKNKJEtJdrM1hr7qYkvFtVkkyNERG+eeXXFSWNdwX2M1JLeLpM3QUwj5J iCBHKgl/ZYkV5aIGcTO2uqNIHYjbApQ= -----END CERTIFICATE-----Generated at Sun Aug 24 03:52:29 2025 by rpki-client