$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa File: 3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa (raw, json) Hash identifier: noElpYlWmwoY4qzU/IQO+L5jIKVCMCYzXLtExddCPdg= Subject key identifier: DD:8A:C3:49:50:89:4D:3E:9B:CC:9A:56:B1:69:23:33:0C:E4:D5:65 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584AD3A0F9C8F876FE4170D54E80 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 6977 IP address blocks: 23.188.16.0/24 maxlen: 24 2602:fc4b::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f9:c8:f8:76:fe:41:70:d5:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=d8967684-1939-4c58-b674-aab8001348b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:09:e2:26:d5:0d:0e:d4:bd:30:d2:0e:71: b3:e2:42:b1:b9:b7:22:cf:30:45:04:1a:e3:63:c5: 94:be:f3:c2:7d:ac:15:ac:3b:f5:a2:bb:c8:e9:66: 34:66:49:dc:a4:6f:36:e6:b7:5a:10:c7:03:19:9a: ec:7e:e0:f6:42:07:ea:8d:3c:75:db:3c:81:f9:e9: 88:1e:ea:a3:f1:42:85:bf:23:57:64:52:66:e8:0b: 07:bf:c5:54:db:af:4a:7e:e5:78:42:81:39:dd:c5: cb:45:a0:aa:c0:1e:a7:91:bf:33:b8:2e:53:e9:e0: b5:b0:e7:78:e8:1b:33:f3:62:53:03:92:57:ed:fd: 6c:08:fb:84:80:e8:33:8b:cc:c0:bd:eb:05:27:52: d6:ec:b1:1b:a8:d0:c2:1f:38:66:31:28:90:a4:65: ec:33:bb:c1:b4:bc:d3:31:1f:d1:5b:43:f0:a2:d5: 96:6c:57:e3:13:98:a4:de:4a:94:b7:cb:71:54:fe: 86:00:79:44:a6:18:aa:b3:a6:2d:b6:54:f3:0b:0e: 94:ce:6b:b4:ac:16:fc:04:b3:03:7f:a6:a3:5f:7d: 6e:b6:50:cf:df:66:db:ab:16:77:17:a7:4a:db:58: ef:65:b2:93:49:4d:67:94:86:16:11:b7:09:09:7b: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:C3:49:50:89:4D:3E:9B:CC:9A:56:B1:69:23:33:0C:E4:D5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 23.188.16.0/24 IPv6: 2602:fc4b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:48:74:98:6c:a6:b9:fa:db:cd:64:c3:c7:7f:00:2a:98:ca: 7c:3e:19:41:65:4f:09:da:7f:2b:e3:f0:5e:8b:f8:50:c0:31: be:11:42:07:f6:34:f0:e9:0a:5d:64:75:02:16:32:25:26:1d: 56:41:e4:12:f7:a5:46:4a:d8:64:6c:1b:f1:e9:df:01:45:06: 64:17:38:35:fb:9b:5b:94:ce:01:e8:75:64:10:4d:14:30:78: 81:d5:04:f5:39:ec:dc:95:9a:7c:fb:ca:1d:2d:b5:4d:1e:f6: 9e:65:13:4b:8c:d1:ab:26:10:56:3f:e4:b8:36:6e:89:ba:7c: de:94:ea:28:82:a6:2e:9a:d4:da:ea:e2:d8:df:24:fa:06:a3: 37:ae:a5:b3:e1:08:7e:75:bb:2a:aa:22:b8:69:a8:c7:31:e5: 31:30:39:85:21:49:65:d3:2f:d1:94:28:6b:b0:70:e2:f5:ec: 1d:9b:7f:c6:6a:e1:e2:eb:83:2d:d1:38:79:b8:c9:78:78:1b: 53:86:c0:87:b5:b3:9d:4d:f1:f9:16:29:4a:c7:30:d4:56:e8: 34:65:d0:ae:d3:5e:c6:98:df:40:ce:b9:bd:ea:d2:d2:7f:f5: bd:65:0d:10:9f:e0:09:be:8b:22:0b:7f:ed:fa:0e:da:c4:a4: 8a:4a:f8:96 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErToPnI+Hb+QXDVToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDg5Njc2ODQtMTkzOS00YzU4LWI2NzQtYWFiODAwMTM0OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqEJ4ibVDQ7UvTDSDnGz4kKxubcizzBFBBrj Y8WUvvPCfawVrDv1orvI6WY0ZkncpG825rdaEMcDGZrsfuD2QgfqjTx12zyB+emI Huqj8UKFvyNXZFJm6AsHv8VU269KfuV4QoE53cXLRaCqwB6nkb8zuC5T6eC1sOd4 6Bsz82JTA5JX7f1sCPuEgOgzi8zAvesFJ1LW7LEbqNDCHzhmMSiQpGXsM7vBtLzT MR/RW0PwotWWbFfjE5ik3kqUt8txVP6GAHlEphiqs6YttlTzCw6Uzmu0rBb8BLMD f6ajX31utlDP32bbqxZ3F6dK21jvZbKTSU1nlIYWEbcJCXtrewIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFN2Kw0lQiU0+m8yaVrFpIzMM5NVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvM2VjZDA4OWQtZDc4YS0z YjBiLWFlMGYtOTM3YjI4ZjRlOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7wQMA4E AgACMAgDBgQmAvxLADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhSHSYbKa5+tvNZMPHfwAqmMp8PhlBZU8J 2n8r4/Bei/hQwDG+EUIH9jTw6QpdZHUCFjIlJh1WQeQS96VGSthkbBvx6d8BRQZk Fzg1+5tblM4B6HVkEE0UMHiB1QT1OezclZp8+8odLbVNHvaeZRNLjNGrJhBWP+S4 Nm6JunzelOoogqYumtTa6uLY3yT6BqM3rqWz4Qh+dbsqqiK4aajHMeUxMDmFIUll 0y/RlChrsHDi9ewdm3/GauHi64Mt0Th5uMl4eBtThsCHtbOdTfH5FilKxzDUVug0 ZdCu017GmN9Azrm96tLSf/W9ZQ0Qn+AJvosiC3/t+g7axKSKSviW -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:38 2025 by rpki-client