$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa File: 1386a00d-927b-3ab9-b391-869605560c4f.roa (raw, json) Hash identifier: tJiF9of+WXcjtLM9g7f90euHbOOrs43SRKUc/tRPnIE= Subject key identifier: DC:13:F1:10:62:E7:CA:55:CD:FA:71:E9:D1:35:DF:53:1A:39:DD:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E4159AD6C7F53E01F01F600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.33.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:59:ad:6c:7f:53:e0:1f:01:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=a7f17b4a-6581-40c4-aed9-0e3a754e374a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:01:fc:8f:83:3d:da:32:18:e7:1d:69:30: ea:67:9b:53:45:c5:18:8c:08:ba:fc:6b:5a:c0:40: e1:3d:be:2b:34:a0:6e:73:4a:9a:cd:8c:18:aa:7d: 4c:c9:ee:76:66:2e:1d:c2:92:c8:41:00:5d:9d:3d: c5:73:53:b9:4b:42:d3:46:be:14:cf:87:ef:7d:f4: 3a:f6:83:2b:93:15:85:27:1c:6f:68:c9:92:75:67: 1c:93:ff:4b:b3:de:af:c6:9d:2a:3a:fd:ef:71:55: 1c:b7:5b:f6:0f:c4:03:a6:b8:00:b0:3f:0b:c1:5a: 1d:b4:46:6a:56:9d:9f:2f:ed:df:69:67:7b:a6:f4: 1f:fd:89:99:17:e8:b0:39:ff:71:ca:f5:3a:21:67: 6d:38:28:6c:da:f7:45:e5:18:72:29:7d:89:52:fa: bf:c4:be:10:73:40:3b:73:22:a2:1c:28:65:2e:ad: 74:ef:70:a4:f8:c6:6c:71:8f:34:14:a6:90:19:38: b5:0e:50:99:78:f8:9d:e3:90:03:d5:48:79:31:77: f4:30:d1:5a:a6:96:ad:30:45:3b:6b:3e:2f:19:64: f9:89:35:0f:c5:b4:04:dc:a0:cf:76:ac:a0:68:1c: 10:57:bb:2e:c5:72:f5:f8:dc:5b:71:9a:4d:cb:e9: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:13:F1:10:62:E7:CA:55:CD:FA:71:E9:D1:35:DF:53:1A:39:DD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:82:ad:32:3f:50:4e:6f:aa:00:9b:72:2d:79:89:d1:d8:ea: f9:1f:30:71:2c:02:ba:85:b3:56:24:96:d3:6e:4a:69:f0:ee: 82:f3:ff:f4:88:04:9e:c1:d8:c2:23:16:3f:dc:32:30:ab:5e: df:83:65:6b:71:d6:11:dd:4a:3d:12:06:0e:5a:5f:10:45:55: ce:55:5c:d3:90:07:6e:4d:52:17:d7:a8:76:c4:f9:6a:e7:20: 19:29:66:ae:1d:38:c0:62:6e:3d:d9:41:ac:80:1e:52:5f:c1: 30:50:42:98:69:f8:7d:fe:2f:ba:2c:99:eb:77:c9:57:d4:50: b2:d5:9f:f6:49:dd:24:43:ce:31:cb:dd:3f:18:43:48:92:3d: d9:3f:ac:a5:46:a7:64:bb:74:a5:f7:d5:a0:c4:e3:51:4c:d0: e5:4c:c0:52:82:2b:62:fa:28:6b:6d:e4:ee:b0:91:ff:49:73: 8d:2e:27:d0:d1:d4:87:12:c4:8e:64:58:d6:56:e6:77:73:68: fb:9d:c5:ed:b2:5a:4d:9b:ce:8b:9a:2c:e5:58:88:35:59:23: 15:00:9b:c1:19:f5:57:b5:59:57:31:6d:88:af:44:d8:33:fa: 2e:4b:f1:1e:d5:cb:41:74:ec:ee:3f:ca:a2:2c:33:b4:f3:16: 9d:d8:30:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVmtbH9T4B8B9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTdmMTdiNGEtNjU4MS00MGM0LWFlZDktMGUzYTc1NGUzNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXEB/I+DPdoyGOcdaTDqZ5tTRcUYjAi6/Gta wEDhPb4rNKBuc0qazYwYqn1Mye52Zi4dwpLIQQBdnT3Fc1O5S0LTRr4Uz4fvffQ6 9oMrkxWFJxxvaMmSdWcck/9Ls96vxp0qOv3vcVUct1v2D8QDprgAsD8LwVodtEZq Vp2fL+3faWd7pvQf/YmZF+iwOf9xyvU6IWdtOChs2vdF5RhyKX2JUvq/xL4Qc0A7 cyKiHChlLq1073Ck+MZscY80FKaQGTi1DlCZePid45AD1Uh5MXf0MNFappatMEU7 az4vGWT5iTUPxbQE3KDPdqygaBwQV7suxXL1+NxbcZpNy+kbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwT8RBi58pVzfpx6dE131MaOd2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTM4NmEwMGQtOTI3Yi0z YWI5LWIzOTEtODY5NjA1NTYwYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASCrTI/UE5vqgCbci15idHY6vkfMHEsArqFs1YkltNuSmnw7oLz//SI BJ7B2MIjFj/cMjCrXt+DZWtx1hHdSj0SBg5aXxBFVc5VXNOQB25NUhfXqHbE+Wrn IBkpZq4dOMBibj3ZQayAHlJfwTBQQphp+H3+L7osmet3yVfUULLVn/ZJ3SRDzjHL 3T8YQ0iSPdk/rKVGp2S7dKX31aDE41FM0OVMwFKCK2L6KGtt5O6wkf9Jc40uJ9DR 1IcSxI5kWNZW5ndzaPudxe2yWk2bzouaLOVYiDVZIxUAm8EZ9Ve1WVcxbYivRNgz +i5L8R7Vy0F07O4/yqIsM7TzFp3YMG4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:16 2025 by rpki-client