$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa File: 0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa (raw, json) Hash identifier: Lh9RoyYzafqad3k3sln63nq42DFQ3twj0f6YXfMVjzo= Subject key identifier: E4:49:1E:6D:61:A9:A3:DE:86:FC:FF:BB:FF:00:4B:BC:8E:2C:BD:F3 Certificate issuer: /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18 Certificate serial: 010D0C9F4328584AC9DB9F42F4B59441CD168D80 Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 29757 IP address blocks: 23.168.193.0/24 maxlen: 24 104.153.44.0/24 maxlen: 24 104.153.45.0/24 maxlen: 24 104.153.46.0/24 maxlen: 24 104.153.47.0/24 maxlen: 24 162.217.144.0/24 maxlen: 24 162.217.145.0/24 maxlen: 24 162.217.146.0/24 maxlen: 24 162.217.147.0/24 maxlen: 24 192.231.255.0/24 maxlen: 24 199.231.92.0/24 maxlen: 24 199.231.93.0/24 maxlen: 24 199.231.94.0/24 maxlen: 24 199.231.95.0/24 maxlen: 24 208.72.20.0/22 maxlen: 22 208.93.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:9f:42:f4:b5:94:41:cd:16:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=3a2dd4ce-8fa2-4b27-b8d8-abe1e7d1f77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:38:87:12:05:91:a5:3f:e6:c8:97:8e:cf:98: 38:36:71:d9:82:62:13:0b:f9:90:cd:15:89:51:45: c3:7a:aa:e2:97:61:ef:0b:2d:15:e5:8c:71:ea:54: 45:40:b7:3b:7e:76:38:e0:7f:ca:f5:ca:0c:75:c2: 63:0a:a9:36:ee:fc:a8:83:46:e2:2a:62:32:64:e9: 33:79:84:16:63:c2:ee:04:11:18:0a:98:af:3c:7a: 63:40:e8:c6:92:78:6c:83:e2:2c:af:83:e8:f6:54: b0:19:8f:12:f0:06:4b:cf:9f:d8:b7:a6:cb:04:6b: 0c:df:b3:cf:c8:26:6d:7d:d5:c6:cc:3f:0c:6b:14: 51:1a:50:59:76:c3:29:12:bc:5f:b2:86:01:06:6c: 1d:f5:fa:52:cf:a3:11:ba:e2:77:a9:83:9b:99:43: 63:29:2a:cd:47:a7:61:2e:4c:83:4d:ad:e9:c4:df: 55:b1:d6:ad:04:a5:80:09:3b:fe:71:4c:7e:10:86: 69:1f:09:9e:4b:05:5a:f0:de:88:32:78:dc:14:35: 85:0b:84:99:40:09:d0:2d:a3:9a:aa:8a:05:20:04: 98:a4:88:a4:c3:3b:be:1f:8c:7f:7a:5c:17:4e:22: 11:34:1b:93:a1:e5:34:c6:40:ab:50:33:8b:4c:82: 29:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:49:1E:6D:61:A9:A3:DE:86:FC:FF:BB:FF:00:4B:BC:8E:2C:BD:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl X509v3 Authority Key Identifier: keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer sbgp-ipAddrBlock: critical IPv4: 23.168.193.0/24 104.153.44.0/22 162.217.144.0/22 192.231.255.0/24 199.231.92.0/22 208.72.20.0/22 208.93.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:27:ec:ba:97:a6:26:cc:b0:4d:d3:f5:6f:a6:f4:30:91:ff: 65:f6:6d:70:51:f2:f1:f7:e6:7a:98:23:a3:a6:4e:85:a2:fc: 2c:54:7a:21:69:7c:bc:91:69:a6:35:27:ef:af:03:af:46:cc: c0:91:e0:b1:24:6b:9b:97:c9:25:eb:44:75:64:be:6f:19:ee: 8a:8a:96:73:ac:00:a1:90:2b:3c:ca:d9:15:a3:e5:2e:08:5c: 0d:5c:79:2f:2a:4f:8f:db:82:f0:dd:2e:6e:95:43:01:ce:c2: 4a:e0:79:cd:d8:35:b6:3f:3a:09:6f:d8:88:7d:4b:e0:f8:32: c3:28:40:26:b7:59:3e:b9:9a:f9:b5:03:5e:24:eb:87:72:9f: 09:a7:0d:e9:2b:f4:6f:06:e4:82:e4:e8:c2:ce:8e:4f:c7:33: 64:2e:e7:46:25:49:3d:aa:75:85:d2:d5:66:7e:7b:a3:55:c3: 15:70:7c:05:4b:c8:59:3b:6f:0a:13:6e:1a:0f:6e:41:d1:15: f4:a4:79:b4:33:57:74:01:0f:15:f5:c5:12:b3:3c:dc:3f:6a: 7d:dd:fa:e1:3a:e5:dc:1a:ef:fa:9d:72:fc:fb:56:52:49:31: e3:c6:8f:33:45:74:ed:71:7c:68:e1:6f:30:4f:5b:7b:d3:2e: 0a:66:73:41 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWErJ259C9LWUQc0WjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBkZWZjOTktNzNmMS00Y2NmLTkzZmYtYWMwOGI3MzAx YTE4MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk M2EyZGQ0Y2UtOGZhMi00YjI3LWI4ZDgtYWJlMWU3ZDFmNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjiHEgWRpT/myJeOz5g4NnHZgmITC/mQzRWJ UUXDeqril2HvCy0V5Yxx6lRFQLc7fnY44H/K9coMdcJjCqk27vyog0biKmIyZOkz eYQWY8LuBBEYCpivPHpjQOjGknhsg+Isr4Po9lSwGY8S8AZLz5/Yt6bLBGsM37PP yCZtfdXGzD8MaxRRGlBZdsMpErxfsoYBBmwd9fpSz6MRuuJ3qYObmUNjKSrNR6dh LkyDTa3pxN9VsdatBKWACTv+cUx+EIZpHwmeSwVa8N6IMnjcFDWFC4SZQAnQLaOa qooFIASYpIikwzu+H4x/elwXTiIRNBuToeU0xkCrUDOLTIIpJwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFORJHm1hqaPehvz/u/8AS7yOLL3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRl ZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4YjczMDFhMTgvMGJlOWMwMDgtMGI4MS0z OTgxLWJkYWEtYzJjMGQwZWMxZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBkZWZjOTktNzNmMS00Y2NmLTkz ZmYtYWMwOGI3MzAxYTE4LzIwZGVmYzk5LTczZjEtNGNjZi05M2ZmLWFjMDhiNzMw MWExOC5jcmwwHwYDVR0jBBgwFoAUGVL0PL3a0EHYb5rqmuhcTFVNeGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRlZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4 YjczMDFhMTguY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAF6jBAwQC aJksAwQCotmQAwQAwOf/AwQCx+dcAwQC0EgUAwQC0F3YMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF4n7LqX pibMsE3T9W+m9DCR/2X2bXBR8vH35nqYI6OmToWi/CxUeiFpfLyRaaY1J++vA69G zMCR4LEka5uXySXrRHVkvm8Z7oqKlnOsAKGQKzzK2RWj5S4IXA1ceS8qT4/bgvDd Lm6VQwHOwkrgec3YNbY/Oglv2Ih9S+D4MsMoQCa3WT65mvm1A14k64dynwmnDekr 9G8G5ILk6MLOjk/HM2Qu50YlST2qdYXS1WZ+e6NVwxVwfAVLyFk7bwoTbhoPbkHR FfSkebQzV3QBDxX1xRKzPNw/an3d+uE65dwa7/qdcvz7VlJJMePGjzNFdO1xfGjh bzBPW3vTLgpmc0E= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:12 2025 by rpki-client