$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a33e7f6-f23d-3f83-b714-05efd8f73fdb.roa File: 2a33e7f6-f23d-3f83-b714-05efd8f73fdb.roa (raw, json) Hash identifier: DD7SgMPv9bbFEIQV1rkuwl4Ua8S5mr4mdV/Iim2zKoA= Subject key identifier: 11:87:6C:CD:1E:34:84:50:84:E4:D9:D6:38:4E:D6:FC:88:5B:68:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6F41A43EE8E45FCFA6E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a33e7f6-f23d-3f83-b714-05efd8f73fdb.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.55.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:f4:1a:43:ee:8e:45:fc:fa:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=047cf1a9-c93a-4005-b48e-fe01772615a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:2a:d3:32:2d:9d:9f:86:3d:5a:d6:a6:15: be:4e:c9:09:73:69:27:2d:ac:61:54:36:ec:6d:7f: 4a:ee:0a:c8:9e:b3:bd:65:cb:76:79:08:74:01:d1: 46:ec:82:5a:82:f8:6d:71:bc:aa:c6:41:54:50:60: cd:4c:d6:ae:ee:d5:66:bb:d0:d9:07:5f:90:6d:60: d3:b9:c1:0a:21:7c:1e:17:a5:ea:fd:89:09:23:f0: 04:20:0c:fd:46:9c:82:55:5e:6e:0b:21:09:4f:64: 27:05:b6:98:e2:90:18:2e:4e:a9:d6:f1:bb:b6:58: ac:40:85:63:7a:b5:ad:82:e6:52:b5:e4:56:6c:e5: 62:59:ae:d6:97:7b:b7:85:02:7c:d4:0d:98:ce:8d: 40:01:d4:ab:ea:6c:f6:80:40:84:ec:9e:08:28:cf: 94:af:42:7d:ab:99:ab:a7:54:d8:f5:a8:96:01:23: 7c:2f:80:7a:42:32:3c:2e:45:4a:c7:8b:f3:fe:6b: 26:1b:34:b1:12:9b:b0:a5:8f:6b:6b:84:c6:5d:fe: cc:dc:62:14:23:c8:71:76:84:63:56:15:4e:19:c6: 73:8a:eb:8e:2e:b5:1d:68:c7:68:14:fa:d5:c4:f2: bc:0c:6f:f0:7d:31:53:58:66:5c:ce:a5:e6:e7:a9: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:87:6C:CD:1E:34:84:50:84:E4:D9:D6:38:4E:D6:FC:88:5B:68:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a33e7f6-f23d-3f83-b714-05efd8f73fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:82:76:b6:83:8d:c4:e4:4a:7d:7e:9c:7a:2b:d4:ee:17:24: d2:4a:b3:4b:eb:29:04:70:3c:16:5a:b7:a7:59:38:37:01:53: c7:01:4f:8e:d1:33:b9:78:f9:7b:d7:cf:39:5a:ec:ff:a4:b2: bc:3b:ff:a5:8b:7e:9e:66:f6:11:19:61:2f:d2:12:86:ca:92: f3:b8:f8:1e:7c:61:c8:c1:85:95:b7:40:9b:2b:2f:4e:5a:c5: d1:2b:01:08:d3:25:ec:7d:38:00:61:56:56:bf:04:f3:0a:c1: 31:72:71:2b:84:42:12:64:a0:2f:ea:e1:01:a6:a7:45:77:4e: a7:9c:e2:ff:74:90:4a:d1:d7:02:f6:93:07:5a:bc:22:7a:6a: 0c:48:82:f6:1f:c0:c3:06:ca:b3:f0:f1:3e:06:0b:8f:0b:1c: fb:97:ae:f7:ac:1d:24:aa:75:74:ed:0e:91:b4:76:19:51:ff: 2e:ed:c7:db:39:e4:e8:9e:9b:9a:96:dd:38:71:08:6c:d1:0d: 67:af:cf:eb:ea:98:f7:49:b7:ae:ca:5f:2d:45:ff:2d:78:fa: 95:e2:96:ad:7a:1a:3e:59:a6:56:72:19:27:9d:3d:f1:15:0f: cb:4a:a8:3d:25:fe:15:08:41:5a:92:c6:ae:a6:0a:15:a4:94: 0d:72:aa:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vQaQ+6ORfz6boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDQ3Y2YxYTktYzkzYS00MDA1LWI0OGUtZmUwMTc3MjYxNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNwq0zItnZ+GPVrWphW+TskJc2knLaxhVDbs bX9K7grInrO9Zct2eQh0AdFG7IJagvhtcbyqxkFUUGDNTNau7tVmu9DZB1+QbWDT ucEKIXweF6Xq/YkJI/AEIAz9RpyCVV5uCyEJT2QnBbaY4pAYLk6p1vG7tlisQIVj erWtguZSteRWbOViWa7Wl3u3hQJ81A2Yzo1AAdSr6mz2gECE7J4IKM+Ur0J9q5mr p1TY9aiWASN8L4B6QjI8LkVKx4vz/msmGzSxEpuwpY9ra4TGXf7M3GIUI8hxdoRj VhVOGcZziuuOLrUdaMdoFPrVxPK8DG/wfTFTWGZczqXm56m+lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGHbM0eNIRQhOTZ1jhO1vyIW2jjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmEzM2U3ZjYtZjIzZC0z ZjgzLWI3MTQtMDVlZmQ4ZjczZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzftMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2CdraDjcTkSn1+nHor1O4XJNJKs0vrKQRwPBZat6dZODcBU8cBT47R M7l4+XvXzzla7P+ksrw7/6WLfp5m9hEZYS/SEobKkvO4+B58YcjBhZW3QJsrL05a xdErAQjTJex9OABhVla/BPMKwTFycSuEQhJkoC/q4QGmp0V3Tqec4v90kErR1wL2 kwdavCJ6agxIgvYfwMMGyrPw8T4GC48LHPuXrvesHSSqdXTtDpG0dhlR/y7tx9s5 5Oiem5qW3ThxCGzRDWevz+vqmPdJt67KXy1F/y14+pXilq16Gj5ZplZyGSedPfEV D8tKqD0l/hUIQVqSxq6mChWklA1yquQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:30:14 2025 by rpki-client