$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa File: 31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa (raw, json) Hash identifier: FIgBBRwlku2jg8mcDNVZiZJHer4+fGeadhgfce3OGF0= Subject key identifier: 36:29:4D:63:E4:6F:C2:22:C6:50:C2:EB:F6:C9:46:8D:EB:75:26:A9 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584AB2836AA0E114529F6115BFF0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa Signing time: Thu 31 Jul 2025 04:19:26 +0000 ROA not before: Thu 31 Jul 2025 04:19:26 +0000 ROA not after: Wed 29 Oct 2025 04:19:26 +0000 asID: 29752 IP address blocks: 23.251.35.0/24 maxlen: 24 107.151.194.0/24 maxlen: 24 198.44.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:83:6a:a0:e1:14:52:9f:61:15:bf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jul 31 04:19:26 2025 GMT Not After : Oct 29 04:19:26 2025 GMT Subject: CN=2dcd7665-4f19-486d-b818-e185758bfaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:a0:9d:50:12:42:89:dd:e6:dd:a3:cf:14: 12:bb:b7:e5:12:26:04:d7:fe:60:f2:62:f5:32:46: e6:be:3d:c0:56:10:a3:d2:fe:47:c8:b2:b6:18:bd: 43:71:01:de:c5:65:6a:74:cb:f3:61:5f:ee:c2:e4: f2:46:de:4d:40:ec:22:df:30:b0:d4:ca:b6:df:8b: dc:b6:97:16:f4:e9:b0:03:09:30:3e:3a:b0:b3:7c: 8c:33:86:fd:77:b7:32:d5:76:e3:f0:c2:d7:0a:82: 8c:f7:79:86:a7:6d:a0:af:7d:df:0b:a9:97:3d:46: 96:19:52:b5:b9:6b:86:21:35:f6:e6:a3:43:49:49: 35:91:9a:4a:95:88:62:6c:ab:e8:73:12:54:46:2e: 38:b7:e3:b9:f4:5e:ec:d3:04:02:77:f2:5a:c9:38: 44:55:83:ba:08:a8:1c:55:f8:f5:e6:10:27:bc:13: b9:13:d1:e9:55:8e:3f:4b:54:2e:c5:dd:30:b5:43: 19:f4:85:5d:33:47:c1:c2:7c:c6:b0:4a:3a:cf:e6: 05:4f:2a:38:d4:3b:9a:c5:e2:29:1c:a3:43:f5:d3: 0c:14:16:6c:c5:aa:4f:4a:a2:c1:16:33:46:b1:3a: a9:7f:bf:c3:8c:eb:c3:e2:a0:0c:cf:b1:ce:3b:a8: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:29:4D:63:E4:6F:C2:22:C6:50:C2:EB:F6:C9:46:8D:EB:75:26:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.35.0/24 107.151.194.0/24 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:43:8a:8f:2b:e3:6b:3d:5a:e3:b1:04:67:84:f0:2c:b2:87: b3:52:9e:de:2b:6f:69:f0:5d:5f:2c:a7:a5:76:e3:07:7e:7a: 1e:01:7b:e1:81:aa:10:c8:24:3b:17:e0:51:06:99:7b:70:4a: 40:6b:eb:30:59:3e:14:df:33:cc:07:dd:da:2b:aa:d9:5d:86: 37:79:20:34:aa:8a:15:34:17:f5:0f:04:49:83:65:ea:22:77: f9:1d:58:71:3c:b1:b2:92:60:33:bc:8c:93:93:48:9f:b1:5f: 7b:c4:2f:3e:03:80:bb:f7:7b:25:e2:2d:8c:36:4a:39:44:1f: 36:66:0a:a0:d6:f0:27:3f:c6:f1:f8:ba:c2:55:7b:4d:7c:b2: 27:6f:e4:1b:d6:6d:6e:0b:e0:87:9a:59:bf:26:a6:f9:42:d6: e6:57:69:64:16:dc:e8:5f:78:cd:ba:64:e8:56:8a:95:3d:8d: b5:07:38:a9:cd:78:a2:b2:67:3b:a8:cf:47:e5:0c:3e:db:40: bf:d6:6a:a3:62:03:25:e1:64:7f:62:ba:cc:b8:20:a8:1d:c7: 95:34:f0:e6:d7:77:da:40:bc:8a:8c:eb:9c:15:0d:7c:44:fd: dc:c7:8c:80:02:b4:54:2b:74:09:e8:b9:79:e5:53:98:7b:54: be:32:eb:4c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEqyg2qg4RRSn2EVv/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDczMTA0MTkyNloXDTI1MTAyOTA0MTkyNlowLzEtMCsGA1UEAxMk MmRjZDc2NjUtNGYxOS00ODZkLWI4MTgtZTE4NTc1OGJmYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKCgnVASQond5t2jzxQSu7flEiYE1/5g8mL1 Mkbmvj3AVhCj0v5HyLK2GL1DcQHexWVqdMvzYV/uwuTyRt5NQOwi3zCw1Mq234vc tpcW9OmwAwkwPjqws3yMM4b9d7cy1Xbj8MLXCoKM93mGp22gr33fC6mXPUaWGVK1 uWuGITX25qNDSUk1kZpKlYhibKvocxJURi44t+O59F7s0wQCd/JayThEVYO6CKgc Vfj15hAnvBO5E9HpVY4/S1Quxd0wtUMZ9IVdM0fBwnzGsEo6z+YFTyo41DuaxeIp HKND9dMMFBZsxapPSqLBFjNGsTqpf7/DjOvD4qAMz7HOO6iY/wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDYpTWPkb8IixlDC6/bJRo3rdSapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzFjMGE1ZDgtM2VkZS0z MTk5LWJhZmUtZjZhNzEzNGQ5M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF/sjAwQA a5fCAwQCxiysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFJDio8r42s9WuOxBGeE8Cyyh7NSnt4rb2nwXV8s p6V24wd+eh4Be+GBqhDIJDsX4FEGmXtwSkBr6zBZPhTfM8wH3dorqtldhjd5IDSq ihU0F/UPBEmDZeoid/kdWHE8sbKSYDO8jJOTSJ+xX3vELz4DgLv3eyXiLYw2SjlE HzZmCqDW8Cc/xvH4usJVe018sidv5BvWbW4L4IeaWb8mpvlC1uZXaWQW3OhfeM26 ZOhWipU9jbUHOKnNeKKyZzuoz0flDD7bQL/WaqNiAyXhZH9iusy4IKgdx5U08ObX d9pAvIqM65wVDXxE/dzHjIACtFQrdAnouXnlU5h7VL4y60w= -----END CERTIFICATE-----Generated at Sat Aug 9 20:47:14 2025 by rpki-client