$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa File: 287a2a23-ee50-3199-aa52-e050b1ad449e.roa (raw, json) Hash identifier: mvj9arxxa/JGSalPdzZKD+KBqHW1MYfJ+avZBX+tYHc= Subject key identifier: D3:CF:95:2F:40:14:23:86:CE:94:76:0C:F0:16:24:0B:D4:13:C3:A4 Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F4328584AC8763CCD4115FBC616588F00 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 31775 IP address blocks: 23.175.80.0/24 maxlen: 24 23.226.80.0/20 maxlen: 24 204.80.232.0/24 maxlen: 24 209.94.32.0/20 maxlen: 24 2606:29c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3c:cd:41:15:fb:c6:16:58:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=709aeb1f-b5fe-48f3-8ec3-d4bc0a833fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:38:8e:08:d1:c0:ae:1a:e6:fd:51:a0:4d: b4:af:e6:11:c8:f3:5e:ea:69:7a:c3:56:df:93:fd: db:fd:aa:0e:cd:24:e4:13:6b:92:1c:57:7c:7d:92: 3e:34:70:91:f1:ad:59:4f:7b:eb:48:a2:4e:55:79: 3d:87:41:dd:90:92:f8:61:c2:28:4e:43:5d:aa:88: 11:a7:6a:31:82:2d:2c:d6:9a:b7:12:6a:5d:34:db: e0:7e:12:9e:16:5e:14:d2:73:05:7e:77:6b:44:5d: 02:74:fd:03:2d:23:f9:26:5c:7f:c4:f2:4b:5d:ad: 41:8c:f7:95:e3:f4:de:84:08:ea:51:b8:0e:be:d4: d8:bd:db:88:fb:ac:bd:2a:c6:8f:7f:dc:ec:1a:d4: f6:f5:e2:b8:bf:fc:77:3f:40:84:95:0a:ab:50:e4: a3:83:f4:8a:43:7c:74:8b:ed:58:5a:7b:11:d2:2f: 42:54:fc:58:83:0d:59:92:e8:3d:d9:ad:f7:cd:28: 56:34:05:3b:5c:55:99:57:bf:53:03:7a:94:09:5d: 63:51:69:5f:18:24:e3:56:08:bc:b7:63:ab:c2:22: ac:f7:7a:e6:35:40:a4:c0:cb:40:b4:3c:75:69:91: c1:85:b4:9b:57:36:81:76:e1:05:1f:bb:3a:61:62: 92:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CF:95:2F:40:14:23:86:CE:94:76:0C:F0:16:24:0B:D4:13:C3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 23.175.80.0/24 23.226.80.0/20 204.80.232.0/24 209.94.32.0/20 IPv6: 2606:29c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1b:be:74:44:ac:75:4a:d7:6c:3b:14:29:ce:e1:0d:f4:8c: 50:a5:70:07:ac:15:c5:49:88:fc:e4:c3:8a:a0:69:4d:ef:96: f0:d4:c8:54:09:e8:ec:ba:03:84:4d:62:e5:b0:dc:69:9b:0e: e3:e8:44:c0:ef:f6:83:0e:f0:ac:f2:3c:a0:ea:25:91:84:b0: 61:2f:15:43:66:e5:8e:22:8a:3a:6c:e6:fa:14:0a:c1:8a:40: 48:36:ee:fa:7b:ec:76:1b:63:34:71:df:30:d9:40:49:15:b6: f2:1d:13:bf:eb:e3:ad:23:a1:17:44:31:60:65:a9:38:00:1a: 3a:b3:cd:cd:6c:45:40:ae:ab:04:43:52:8e:b7:13:c2:2d:d8: 2f:a9:01:5c:58:4a:d8:27:af:ca:89:b6:f1:2e:0b:73:81:ec: e9:ee:46:aa:2e:07:b3:a0:0d:46:7e:f4:12:14:a5:4a:8c:b8: 9d:a2:0e:67:81:6c:51:bb:d7:19:81:e9:28:5e:17:e3:21:94: 6f:87:ef:8b:a1:e4:46:81:71:84:15:f1:01:c8:97:e1:a1:38: 00:24:40:f1:59:d1:2b:a6:1c:4f:52:c8:f3:2b:e3:82:99:95: 02:6f:92:9e:c2:06:ae:4d:fe:10:42:ba:db:ff:4b:a2:00:42: fc:b3:d5:07 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWErIdjzNQRX7xhZYjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzA5YWViMWYtYjVmZS00OGYzLThlYzMtZDRiYzBhODMzZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKw4jgjRwK4a5v1RoE20r+YRyPNe6ml6w1bf k/3b/aoOzSTkE2uSHFd8fZI+NHCR8a1ZT3vrSKJOVXk9h0HdkJL4YcIoTkNdqogR p2oxgi0s1pq3EmpdNNvgfhKeFl4U0nMFfndrRF0CdP0DLSP5Jlx/xPJLXa1BjPeV 4/TehAjqUbgOvtTYvduI+6y9KsaPf9zsGtT29eK4v/x3P0CElQqrUOSjg/SKQ3x0 i+1YWnsR0i9CVPxYgw1Zkug92a33zShWNAU7XFWZV79TA3qUCV1jUWlfGCTjVgi8 t2OrwiKs93rmNUCkwMtAtDx1aZHBhbSbVzaBduEFH7s6YWKSuwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFNPPlS9AFCOGzpR2DPAWJAvUE8OkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMjg3YTJhMjMtZWU1MC0z MTk5LWFhNTItZTA1MGIxYWQ0NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF69QAwQE F+JQAwQAzFDoAwQE0V4gMA0EAgACMAcDBQAmBinAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGgbvnRErHVK 12w7FCnO4Q30jFClcAesFcVJiPzkw4qgaU3vlvDUyFQJ6Oy6A4RNYuWw3GmbDuPo RMDv9oMO8KzyPKDqJZGEsGEvFUNm5Y4iijps5voUCsGKQEg27vp77HYbYzRx3zDZ QEkVtvIdE7/r460joRdEMWBlqTgAGjqzzc1sRUCuqwRDUo63E8It2C+pAVxYStgn r8qJtvEuC3OB7OnuRqouB7OgDUZ+9BIUpUqMuJ2iDmeBbFG71xmB6SheF+MhlG+H 74uh5EaBcYQV8QHIl+GhOAAkQPFZ0SumHE9SyPMr44KZlQJvkp7CBq5N/hBCutv/ S6IAQvyz1Qc= -----END CERTIFICATE-----Generated at Sun Aug 24 05:21:32 2025 by rpki-client