$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa File: 0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa (raw, json) Hash identifier: vQEdQMExunb/KSpXha2Bcwvn29gRX2aKvg/WF3UTaRo= Subject key identifier: CB:81:44:7F:D7:55:E3:9F:0E:94:5D:7C:7D:C9:15:DB:5B:9E:D2:6E Certificate issuer: /CN=dec85453-756b-41c4-9e89-03593a6d3f56 Certificate serial: 010D0C9F4328584AE89138D17A1A29FFE37D0F58 Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 215475 IP address blocks: 23.161.24.0/24 maxlen: 24 2602:2f2:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:38:d1:7a:1a:29:ff:e3:7d:0f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=645852e5-694a-4552-8d9c-5fdadbdc5c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:e2:47:d6:cd:99:cc:0b:62:45:b7:16:79: 26:a0:8c:1b:cd:88:23:08:b1:96:07:5f:b8:f9:e7: 64:2d:58:e9:bd:e4:5e:59:a7:9e:cf:91:52:a2:14: 49:a9:68:e9:d9:8e:c2:e8:8b:ad:5b:74:5c:1b:3f: 3d:00:36:89:89:8a:ec:19:c0:07:67:4c:8f:8d:e9: a6:b5:18:a5:33:79:20:3d:af:9b:ea:f8:91:0c:18: 1f:a9:0a:6b:3d:2f:8a:a9:a2:75:4d:32:ea:47:13: 63:9e:2b:11:c0:be:60:b8:95:c0:b4:6e:ec:ac:44: aa:0a:a9:20:bd:f8:15:2d:5c:47:a0:02:a6:4f:e4: f2:8e:e7:55:53:25:f7:62:1b:ff:86:8b:b2:61:48: 4e:81:cb:55:76:21:e9:b6:ca:b7:0a:35:fe:54:53: 7c:6f:c7:0a:8f:13:4b:c2:02:0a:11:42:1b:49:58: 7a:dd:f4:0f:1e:1d:c8:32:6a:4a:92:cd:d2:8a:26: e7:5c:ba:07:69:d6:f7:73:bf:26:32:0e:c5:25:de: 75:f7:d8:d3:ff:30:6c:78:fe:d8:60:43:e9:6c:cb: 6d:bb:8a:50:fe:23:bb:dd:86:9c:e3:8f:18:22:1b: 4e:8e:18:bf:4b:3d:1e:33:c5:25:0f:3c:28:0e:02: d1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:81:44:7F:D7:55:E3:9F:0E:94:5D:7C:7D:C9:15:DB:5B:9E:D2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/0dfce121-6f1d-3771-aaa7-0d8a76d62eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl X509v3 Authority Key Identifier: keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer sbgp-ipAddrBlock: critical IPv4: 23.161.24.0/24 IPv6: 2602:2f2:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cc:51:b3:a6:d4:df:e5:9a:63:f0:31:d4:ec:8d:f1:6c:6d: d8:8d:e7:b5:75:5e:d7:3e:bc:59:d1:2f:97:2a:25:35:cc:f4: 1e:10:77:d4:9c:c6:6b:31:1f:bd:5f:55:0f:3a:f1:00:1c:e0: 33:f6:68:f8:fe:b4:b2:09:18:4e:cf:51:fb:fa:57:b2:32:e2: 63:db:d9:5f:41:41:08:e4:20:a5:17:88:b4:3d:0c:2b:d4:a9: 63:1d:75:ef:4c:fc:41:14:d6:83:29:df:71:f7:d6:48:56:9b: be:80:e3:70:b8:e8:ea:4e:d0:01:a7:f1:17:c6:3a:78:8f:93: 3d:94:77:d2:27:cd:a9:19:1d:58:36:eb:ef:78:b6:ce:68:c2: 17:fd:bb:b0:36:a1:bf:ff:26:b4:f1:77:de:0d:1f:14:78:3c: 69:e3:c2:87:04:5d:ef:1b:dc:d3:79:cb:2d:0b:a1:a6:c1:6d: f1:99:b2:40:36:03:c7:46:b6:d1:10:39:ba:f8:73:d2:cb:e7: 24:69:61:ed:1d:c9:21:97:74:91:c5:a2:13:40:cb:08:72:eb: 08:92:de:17:f3:7f:4f:84:55:57:ae:4b:7d:4c:73:0c:48:22: 18:7c:d2:55:9a:e2:93:9a:de:3d:76:c5:ba:91:ac:47:c6:63: dc:47:d1:c9 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErokTjRehop/+N9D1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjODU0NTMtNzU2Yi00MWM0LTllODktMDM1OTNhNmQz ZjU2MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NjQ1ODUyZTUtNjk0YS00NTUyLThkOWMtNWZkYWRiZGM1YzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvLiR9bNmcwLYkW3FnkmoIwbzYgjCLGWB1+4 +edkLVjpveReWaeez5FSohRJqWjp2Y7C6IutW3RcGz89ADaJiYrsGcAHZ0yPjemm tRilM3kgPa+b6viRDBgfqQprPS+KqaJ1TTLqRxNjnisRwL5guJXAtG7srESqCqkg vfgVLVxHoAKmT+TyjudVUyX3Yhv/houyYUhOgctVdiHptsq3CjX+VFN8b8cKjxNL wgIKEUIbSVh63fQPHh3IMmpKks3SiibnXLoHadb3c78mMg7FJd5199jT/zBseP7Y YEPpbMttu4pQ/iO73Yac448YIhtOjhi/Sz0eM8UlDzwoDgLRYQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMuBRH/XVeOfDpRdfH3JFdtbntJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4 NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5M2E2ZDNmNTYvMGRmY2UxMjEtNmYxZC0z NzcxLWFhYTctMGQ4YTc2ZDYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGVjODU0NTMtNzU2Yi00MWM0LTll ODktMDM1OTNhNmQzZjU2L2RlYzg1NDUzLTc1NmItNDFjNC05ZTg5LTAzNTkzYTZk M2Y1Ni5jcmwwHwYDVR0jBBgwFoAUk8PsDqov6aXtukz7tpAkm4CGPWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5 M2E2ZDNmNTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6EYMA8E AgACMAkDBwAmAgLyAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVsxRs6bU3+WaY/Ax1OyN8Wxt2I3ntXVe 1z68WdEvlyolNcz0HhB31JzGazEfvV9VDzrxABzgM/Zo+P60sgkYTs9R+/pXsjLi Y9vZX0FBCOQgpReItD0MK9SpYx1170z8QRTWgynfcffWSFabvoDjcLjo6k7QAafx F8Y6eI+TPZR30ifNqRkdWDbr73i2zmjCF/27sDahv/8mtPF33g0fFHg8aePChwRd 7xvc03nLLQuhpsFt8ZmyQDYDx0a20RA5uvhz0svnJGlh7R3JIZd0kcWiE0DLCHLr CJLeF/N/T4RVV65LfUxzDEgiGHzSVZrik5rePXbFupGsR8Zj3EfRyQ== -----END CERTIFICATE-----Generated at Sun Aug 24 08:46:00 2025 by rpki-client