$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa File: 28bf01a1-e0a0-3223-944c-d3b6117da09c.roa (raw, json) Hash identifier: mRcn7t1/W8aRm+TKON2jW/6cauGwPQFJrUUigYh+ju4= Subject key identifier: 33:4E:E7:84:61:D8:08:CA:3D:2A:C6:19:9E:D7:3F:A5:1F:8B:44:4E Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584B13D6FEED8AB19347ABB7F3A0 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 23.160.208.0/24 maxlen: 24 174.136.248.0/24 maxlen: 24 2602:fd46::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:fe:ed:8a:b1:93:47:ab:b7:f3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=f5384239-d8f4-47ff-8fbe-3cab54771a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:52:d4:8a:6e:46:75:a5:46:52:e4:e8:f1:af: 07:ca:4c:9c:e1:dc:fd:49:61:c1:35:87:c6:20:b5: 0f:fe:cf:78:ac:5a:d6:c4:b6:e6:9f:a6:03:33:4f: 3a:03:fe:2f:66:b4:fe:da:ca:42:4f:6c:53:8e:0d: f1:8a:aa:9b:13:33:1c:a2:e1:80:ab:c5:9a:ea:92: cc:58:6c:ed:27:45:b9:42:52:0f:76:3b:7a:00:f3: 4f:9f:8f:0d:f2:dd:07:95:b2:5d:18:5e:cb:d0:5f: c3:70:8c:77:89:d5:ac:d0:f3:49:85:fa:7c:c9:d0: f4:ed:20:13:04:22:97:f2:22:c7:f3:8f:90:21:cc: f3:3f:ca:85:b5:f3:2e:03:5b:cb:28:8e:0b:f2:07: f1:2c:b6:f4:d6:38:0d:f0:82:31:38:2c:70:db:32: 96:39:86:0d:86:d2:94:09:7e:24:eb:4b:89:c8:37: 2e:cc:ed:23:b5:df:52:27:08:7c:ed:8e:4c:3f:73: 7d:cc:ac:ed:40:27:41:1a:d2:8c:61:6a:60:16:be: 13:57:23:85:e9:04:98:02:99:49:74:0b:a4:f3:5b: a3:4f:25:bd:f3:0c:48:4e:ab:47:2e:1e:a7:33:0c: fe:e3:0a:d1:58:c7:b7:08:97:d3:ec:0d:f4:85:6e: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4E:E7:84:61:D8:08:CA:3D:2A:C6:19:9E:D7:3F:A5:1F:8B:44:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/28bf01a1-e0a0-3223-944c-d3b6117da09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: 23.160.208.0/24 174.136.248.0/24 IPv6: 2602:fd46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3d:46:47:36:75:0c:10:0a:9e:af:76:9e:cc:5c:ed:c4:02: 48:40:b4:d6:19:db:16:02:ea:f5:77:5d:3e:18:df:12:05:b4: df:0f:f2:72:99:97:7c:d2:78:c9:5c:62:17:e3:45:62:c4:d5: 10:97:26:64:9d:4b:05:0b:4b:4a:a8:a9:71:6d:01:ec:fa:f4: 2c:55:bb:c1:70:0d:50:86:81:d2:0e:dc:4c:6b:5d:f3:08:0b: 69:0c:ff:41:31:67:5a:9c:94:8e:d9:84:4e:99:5e:37:04:1b: e5:3c:05:17:95:89:a3:b9:2d:28:5f:4c:53:a5:d3:f2:7b:b7: e6:da:43:24:46:2f:c6:75:b7:36:e9:71:9b:31:c5:88:68:d1: 13:b4:88:c9:75:9c:54:69:36:34:ff:38:10:37:a9:51:97:f5: c1:07:19:41:94:0f:0a:77:ad:8c:4d:1e:84:74:7e:48:36:79: 62:15:eb:c4:af:9a:68:a9:bc:31:27:f1:3e:f0:21:0a:ef:a8: 05:d6:73:59:f7:de:37:f5:14:e8:c8:7b:1c:85:90:56:a9:c3: ea:ea:ef:7b:14:ff:76:93:6d:17:1b:f5:03:9d:41:30:27:e7: b5:94:d9:eb:9c:1e:8f:06:9e:65:cf:70:cc:77:65:00:85:a8: f5:ab:da:49 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEsT1v7tirGTR6u386AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjUzODQyMzktZDhmNC00N2ZmLThmYmUtM2NhYjU0NzcxYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31LUim5GdaVGUuTo8a8Hykyc4dz9SWHBNYfG ILUP/s94rFrWxLbmn6YDM086A/4vZrT+2spCT2xTjg3xiqqbEzMcouGAq8Wa6pLM WGztJ0W5QlIPdjt6APNPn48N8t0HlbJdGF7L0F/DcIx3idWs0PNJhfp8ydD07SAT BCKX8iLH84+QIczzP8qFtfMuA1vLKI4L8gfxLLb01jgN8IIxOCxw2zKWOYYNhtKU CX4k60uJyDcuzO0jtd9SJwh87Y5MP3N9zKztQCdBGtKMYWpgFr4TVyOF6QSYAplJ dAuk81ujTyW98wxITqtHLh6nMwz+4wrRWMe3CJfT7A30hW7uAQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDNO54Rh2AjKPSrGGZ7XP6Ufi0ROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvMjhiZjAxYTEtZTBhMC0z MjIzLTk0NGMtZDNiNjExN2RhMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6DQAwQA roj4MA4EAgACMAgDBgQmAv1GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmPUZHNnUMEAqer3aezFztxAJI QLTWGdsWAur1d10+GN8SBbTfD/JymZd80njJXGIX40VixNUQlyZknUsFC0tKqKlx bQHs+vQsVbvBcA1QhoHSDtxMa13zCAtpDP9BMWdanJSO2YROmV43BBvlPAUXlYmj uS0oX0xTpdPye7fm2kMkRi/Gdbc26XGbMcWIaNETtIjJdZxUaTY0/zgQN6lRl/XB BxlBlA8Kd62MTR6EdH5INnliFevEr5poqbwxJ/E+8CEK76gF1nNZ99439RToyHsc hZBWqcPq6u97FP92k20XG/UDnUEwJ+e1lNnrnB6PBp5lz3DMd2UAhaj1q9pJ -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:32 2025 by rpki-client