$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/67b19f83-b457-3ac9-98b0-799510e57661.roa File: 67b19f83-b457-3ac9-98b0-799510e57661.roa (raw, json) Hash identifier: up4WScbLiNx5ImFaAU84+j2r0L4pRnDpRvcYF2D4w04= Subject key identifier: 3E:3D:67:54:2B:0D:61:3D:80:16:13:43:F3:3E:29:1D:31:C9:A5:A9 Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F4328584AC8763CE51989A40B1C9A8FA0 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/67b19f83-b457-3ac9-98b0-799510e57661.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 62727 IP address blocks: 23.226.80.0/20 maxlen: 24 204.80.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3c:e5:19:89:a4:0b:1c:9a:8f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=32907e65-960f-4d4a-804f-d3c80109b26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:ac:08:d2:51:6a:3e:b5:9b:7b:98:a2:96: 15:22:53:a7:7d:e1:be:3e:2d:56:d8:8b:a8:a4:95: f0:7d:38:02:aa:ab:8c:4d:56:99:60:07:a6:77:77: 16:23:2e:c0:0a:9f:77:78:a2:e8:e4:a3:ec:33:d7: 53:52:c6:73:83:34:6d:b4:9e:a9:69:32:69:b8:e5: d8:2e:ed:d7:15:77:23:a1:99:c1:03:0f:6e:b6:74: 62:7c:7a:35:51:77:97:c2:b0:bc:ac:d1:62:33:72: 03:ac:b9:d8:90:31:cd:7f:aa:fa:db:da:32:d3:aa: 9e:1a:9a:2d:16:1e:34:3f:6e:c6:72:22:7d:02:dd: e8:86:f7:e9:0a:34:32:cb:ab:6f:d9:1b:e3:9c:30: 83:ac:96:94:c3:22:51:86:67:30:c5:bb:2a:68:63: c6:d4:e3:d4:cd:58:83:b9:04:3f:30:f6:a6:42:39: 2b:7c:86:96:f0:ef:94:26:24:d8:cb:84:72:b0:f5: 58:5a:9d:3b:97:72:31:a9:51:8c:90:69:65:45:49: 7a:e1:a0:bd:4d:03:1f:75:e5:fe:1f:bf:f0:a9:c1: 67:f3:60:49:dd:6b:2c:c1:e8:5e:19:2d:27:ac:aa: 9f:62:1d:6d:72:f2:ef:f9:c7:e9:a8:97:39:a6:91: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3D:67:54:2B:0D:61:3D:80:16:13:43:F3:3E:29:1D:31:C9:A5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/67b19f83-b457-3ac9-98b0-799510e57661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 23.226.80.0/20 204.80.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ce:de:12:8c:fa:b7:01:67:84:eb:91:cf:0c:41:2d:e5:17: bb:1d:0b:62:c4:4a:86:8d:51:29:ea:87:d4:c8:f2:82:5c:4e: 21:10:64:7e:d2:2c:f2:39:30:77:4f:c5:ae:69:d8:37:e0:72: 10:9b:84:f4:0d:aa:eb:81:12:9e:52:d5:f3:5f:34:5a:62:7e: a8:a5:47:78:07:c8:c2:8c:bf:38:53:1c:a0:ba:4f:a5:f0:3d: 13:d1:74:42:b8:ce:e2:6e:bd:d6:eb:d7:bb:14:ba:f9:ba:33: fd:23:bb:7e:2f:39:0d:b3:52:3e:18:0a:08:7a:9a:73:65:00: 82:0b:4a:90:dd:0b:84:9e:a5:c9:05:e7:bc:2d:64:8b:b5:f2: 8e:ed:1f:12:d9:f3:74:7d:58:dc:1a:40:b0:88:5f:a2:96:6e: 47:90:3b:c8:ad:d4:61:7d:cb:15:97:2f:89:cc:29:2e:22:bb: b8:c2:20:3d:bd:44:ea:42:a3:a4:ad:55:23:41:f4:b0:e6:dc: 0d:e3:2e:7e:9c:7a:e7:9c:8d:37:35:e0:95:d7:7a:66:bd:0a: 29:40:de:05:ba:8c:4c:df:42:42:a4:9d:73:c5:78:0c:fb:72: 10:dc:0a:9b:95:0b:d1:67:2f:c8:0e:cd:d5:22:41:ca:03:45: 94:03:5c:72 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErIdjzlGYmkCxyaj6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzI5MDdlNjUtOTYwZi00ZDRhLTgwNGYtZDNjODAxMDliMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE6sCNJRaj61m3uYopYVIlOnfeG+Pi1W2Iuo pJXwfTgCqquMTVaZYAemd3cWIy7ACp93eKLo5KPsM9dTUsZzgzRttJ6paTJpuOXY Lu3XFXcjoZnBAw9utnRifHo1UXeXwrC8rNFiM3IDrLnYkDHNf6r629oy06qeGpot Fh40P27GciJ9At3ohvfpCjQyy6tv2RvjnDCDrJaUwyJRhmcwxbsqaGPG1OPUzViD uQQ/MPamQjkrfIaW8O+UJiTYy4RysPVYWp07l3IxqVGMkGllRUl64aC9TQMfdeX+ H7/wqcFn82BJ3WssweheGS0nrKqfYh1tcvLv+cfpqJc5ppFkVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD49Z1QrDWE9gBYTQ/M+KR0xyaWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvNjdiMTlmODMtYjQ1Ny0z YWM5LTk4YjAtNzk5NTEwZTU3NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEF+JQAwQA zFDoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAnO3hKM+rcBZ4Trkc8MQS3lF7sdC2LESoaNUSnqh9TI8oJc TiEQZH7SLPI5MHdPxa5p2DfgchCbhPQNquuBEp5S1fNfNFpifqilR3gHyMKMvzhT HKC6T6XwPRPRdEK4zuJuvdbr17sUuvm6M/0ju34vOQ2zUj4YCgh6mnNlAIILSpDd C4SepckF57wtZIu18o7tHxLZ83R9WNwaQLCIX6KWbkeQO8it1GF9yxWXL4nMKS4i u7jCID29ROpCo6StVSNB9LDm3A3jLn6ceuecjTc14JXXema9CilA3gW6jEzfQkKk nXPFeAz7chDcCpuVC9FnL8gOzdUiQcoDRZQDXHI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:20:17 2025 by rpki-client