$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa File: 28bf01a1-e0a0-3223-944c-d3b6117da09c.roa (raw, json) Hash identifier: JswB/EF6yz/v7ATXgIDujXMB5Y4HuJzzYz2sKudhH8Q= Subject key identifier: 3A:8A:71:37:41:7F:16:13:6F:95:5B:E9:49:03:21:37:26:3C:8C:89 Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584A344F672EE459408D8CAA88C0 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa Signing time: Sun 15 Jun 2025 23:22:47 +0000 ROA not before: Sun 15 Jun 2025 23:22:47 +0000 ROA not after: Sat 13 Sep 2025 23:22:47 +0000 asID: 16509 IP address blocks: 23.160.208.0/24 maxlen: 24 174.136.248.0/24 maxlen: 24 2602:fd46::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:4f:67:2e:e4:59:40:8d:8c:aa:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Jun 15 23:22:47 2025 GMT Not After : Sep 13 23:22:47 2025 GMT Subject: CN=08fae379-7bae-454e-bdf1-aee91e166971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:09:7f:32:ba:fa:23:d7:c5:50:1c:17:b2: 8a:0c:a7:12:f8:38:47:3f:a4:e6:8f:5b:af:dc:00: 44:36:79:a3:ba:ea:01:a5:d5:ad:c2:33:42:8d:70: ca:14:39:7e:c9:c9:03:b6:d3:57:33:bd:06:e2:0f: e9:4b:70:f7:b6:fd:78:8d:e8:98:df:af:82:87:6e: 25:7f:7b:17:4e:ae:d2:13:bf:74:5b:d9:e3:f3:7a: 00:61:61:a8:7c:37:37:fe:04:b6:5b:ff:a7:9a:72: 57:5e:22:93:7a:47:de:a3:fd:14:77:d9:5e:db:41: 6b:c6:84:5c:1d:58:91:a5:de:b8:d9:ca:81:dc:cb: 1d:ac:12:ae:8a:b5:aa:01:c8:53:05:e0:03:bc:49: ea:72:80:9c:2e:ae:f0:5a:da:00:ff:89:a5:8d:10: a7:8f:21:9a:ca:fe:69:68:37:9f:0a:71:20:0b:1f: 59:b0:fa:c3:14:22:53:1b:be:4e:3a:f6:9b:85:7f: 80:3d:d1:d0:25:ac:d3:2b:1e:ea:72:36:aa:59:27: a4:3b:21:c6:60:83:f6:21:45:80:be:25:4c:4f:29: 34:02:0a:66:5d:89:50:d6:e5:79:da:a5:4c:61:a4: 1c:b4:6f:99:6c:cc:8e:5b:c4:c8:73:8f:d0:85:cc: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8A:71:37:41:7F:16:13:6F:95:5B:E9:49:03:21:37:26:3C:8C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: 23.160.208.0/24 174.136.248.0/24 IPv6: 2602:fd46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:02:a3:ab:c7:01:02:3b:6c:fc:d3:e9:92:5a:ab:d3:33:ba: e5:fb:5c:d4:59:c2:42:9d:b8:7a:a4:52:0e:af:25:16:ed:72: ad:3c:cd:d6:7b:fc:95:87:8a:7c:bc:e6:4a:aa:b9:2c:2e:51: 76:72:91:63:b8:d7:2d:19:5f:9d:d3:06:ca:d7:d2:38:ad:d6: cd:ea:b4:d6:53:60:3f:1a:ca:3a:8d:c4:27:a8:bd:1e:40:02: f4:3a:27:97:30:e4:e9:8d:d6:6c:72:e9:31:ff:37:13:36:1e: 95:06:53:07:b0:89:8a:9b:f5:de:3b:93:6c:a0:65:a2:a0:72: 5d:54:de:57:f4:6b:0e:c9:17:4e:a7:fd:c4:c7:6e:37:22:8c: 58:3e:92:bd:6b:d2:61:11:7a:88:72:d4:fd:17:36:38:60:86: 36:1a:69:fd:c0:d7:af:b4:8b:06:82:ba:e9:4c:10:86:39:0b: 90:01:cb:ba:da:d8:43:6e:c7:d7:3f:b2:d8:4e:b7:3d:d8:80: f3:48:ad:51:1d:61:6d:81:ee:64:6d:59:02:61:28:91:58:a6: b5:4a:aa:90:e2:0e:c7:a6:10:2d:0a:7f:3b:f7:65:33:ae:28: 78:7f:9b:dc:81:1d:5a:b1:e9:61:6c:a5:12:ba:2b:62:2e:41: b2:ae:c6:a5 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEo0T2cu5FlAjYyqiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI1MDYxNTIzMjI0N1oXDTI1MDkxMzIzMjI0N1owLzEtMCsGA1UEAxMk MDhmYWUzNzktN2JhZS00NTRlLWJkZjEtYWVlOTFlMTY2OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLcJfzK6+iPXxVAcF7KKDKcS+DhHP6Tmj1uv 3ABENnmjuuoBpdWtwjNCjXDKFDl+yckDttNXM70G4g/pS3D3tv14jeiY36+Ch24l f3sXTq7SE790W9nj83oAYWGofDc3/gS2W/+nmnJXXiKTekfeo/0Ud9le20FrxoRc HViRpd642cqB3MsdrBKuirWqAchTBeADvEnqcoCcLq7wWtoA/4mljRCnjyGayv5p aDefCnEgCx9ZsPrDFCJTG75OOvabhX+APdHQJazTKx7qcjaqWSekOyHGYIP2IUWA viVMTyk0AgpmXYlQ1uV52qVMYaQctG+ZbMyOW8TIc4/QhcxTvwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDqKcTdBfxYTb5Vb6UkDITcmPIyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvMjhiZjAxYTEtZTBhMC0z MjIzLTk0NGMtZDNiNjExN2RhMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6DQAwQA roj4MA4EAgACMAgDBgQmAv1GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOAqOrxwECO2z80+mSWqvTM7rl +1zUWcJCnbh6pFIOryUW7XKtPM3We/yVh4p8vOZKqrksLlF2cpFjuNctGV+d0wbK 19I4rdbN6rTWU2A/Gso6jcQnqL0eQAL0OieXMOTpjdZscukx/zcTNh6VBlMHsImK m/XeO5NsoGWioHJdVN5X9GsOyRdOp/3Ex243IoxYPpK9a9JhEXqIctT9FzY4YIY2 Gmn9wNevtIsGgrrpTBCGOQuQAcu62thDbsfXP7LYTrc92IDzSK1RHWFtge5kbVkC YSiRWKa1SqqQ4g7HphAtCn8792Uzrih4f5vcgR1aselhbKUSuitiLkGyrsal -----END CERTIFICATE-----Generated at Tue Jun 17 02:41:32 2025 by rpki-client