$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa File: 32383800-b087-3fe4-90b1-6288dd91e397.roa (raw, json) Hash identifier: wmtT/oiyD4FYfSOlQFTJHZmKn2LoVSNEoUfpk/sBukQ= Subject key identifier: A9:4E:F2:B4:A9:08:99:B0:0E:30:07:96:FA:C4:04:CC:82:5D:40:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E4157ED198E898BC595A980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.33.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:57:ed:19:8e:89:8b:c5:95:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=09bc8504-a9bd-4ce2-b684-7fdfdc673db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:51:f9:61:2b:dd:e3:10:83:69:0e:c8:b5:7c: 52:8f:99:50:7d:04:2b:6d:2c:64:e9:0c:76:bb:59: 6c:0f:85:1e:b3:20:f2:ce:d9:38:29:89:ba:c5:43: 1d:47:1a:72:80:7b:ab:6f:6d:13:38:f4:df:08:e9: 30:13:8e:5a:e9:98:0a:82:c0:b8:c4:80:33:6d:31: 22:38:47:c8:94:96:b7:3e:fe:cb:80:50:bb:a6:8a: 4b:fc:42:3b:60:ef:a1:d8:fb:70:50:d0:ac:37:60: 51:1e:3c:b5:c2:14:84:07:e0:9e:c7:0b:77:08:f2: 2e:37:30:f3:da:56:51:a2:6c:cd:bf:8f:9f:5d:70: d6:4c:56:46:6c:d4:10:42:b8:48:b8:60:69:ba:ec: 83:b7:c3:97:a5:c1:69:fd:f0:61:83:13:0d:c9:fb: f6:b2:1d:02:b8:e9:42:09:16:c8:e7:6b:29:52:13: 3c:4f:b5:43:d4:a8:d1:1a:0b:ac:ae:92:fa:c3:9e: 4f:1e:49:e6:c6:6f:de:e5:9d:d5:69:b7:d2:d4:78: 88:da:68:f5:85:60:ee:ae:d0:e8:68:39:1f:23:53: ec:09:a4:d1:c9:e7:04:ea:b2:df:52:8a:e4:ad:1e: 12:d8:3c:81:45:04:ed:ff:8a:95:c6:b8:78:79:b2: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4E:F2:B4:A9:08:99:B0:0E:30:07:96:FA:C4:04:CC:82:5D:40:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:6e:ad:11:86:7a:8f:b2:43:6e:c1:4f:c6:f2:1e:cc:13:87: 0d:c2:c3:d2:8a:fa:9e:3a:a3:00:1f:45:c2:c3:17:02:df:2c: c2:3a:e4:dc:72:42:79:be:1d:6d:80:7f:c6:f8:72:b7:76:05: d5:2f:45:cb:dd:38:2e:9b:e8:0a:d0:97:41:f9:8d:05:3e:d6: f5:b3:32:6f:fa:67:fc:77:0d:d8:ff:a3:94:f2:d1:55:e1:c6: c8:a5:61:5f:ed:f5:bc:37:22:14:c9:d7:17:2f:f1:58:a8:94: 59:71:2d:49:62:76:5e:11:ac:31:de:27:bd:a0:45:07:64:eb: dd:03:02:b7:e5:e9:28:d3:45:a2:49:f4:f3:7d:5f:7a:28:7d: 60:57:b7:33:ba:a8:dd:8d:fa:88:c5:45:d9:be:87:7e:8a:e7: af:bd:5e:8a:83:b0:df:cc:a8:09:bd:a1:f1:d8:c3:bd:eb:4f: 9e:f0:0b:06:1f:49:ce:fd:de:d7:68:fe:90:36:6d:62:96:66: 65:dc:70:17:fd:03:fe:10:1b:44:18:88:bc:1a:f8:ed:db:08: 35:57:0f:34:43:cd:cd:b2:1f:66:69:e6:4f:e9:0d:7d:e0:b6: b2:66:54:28:a5:4e:72:7f:13:68:fa:51:c2:80:ef:9a:00:a2: 99:29:bf:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVftGY6Ji8WVqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDliYzg1MDQtYTliZC00Y2UyLWI2ODQtN2ZkZmRjNjczZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlH5YSvd4xCDaQ7ItXxSj5lQfQQrbSxk6Qx2 u1lsD4UesyDyztk4KYm6xUMdRxpygHurb20TOPTfCOkwE45a6ZgKgsC4xIAzbTEi OEfIlJa3Pv7LgFC7popL/EI7YO+h2PtwUNCsN2BRHjy1whSEB+Cexwt3CPIuNzDz 2lZRomzNv4+fXXDWTFZGbNQQQrhIuGBpuuyDt8OXpcFp/fBhgxMNyfv2sh0CuOlC CRbI52spUhM8T7VD1KjRGgusrpL6w55PHknmxm/e5Z3VabfS1HiI2mj1hWDurtDo aDkfI1PsCaTRyecE6rLfUorkrR4S2DyBRQTt/4qVxrh4ebJkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlO8rSpCJmwDjAHlvrEBMyCXUAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzIzODM4MDAtYjA4Ny0z ZmU0LTkwYjEtNjI4OGRkOTFlMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENurRGGeo+yQ27BT8byHswThw3Cw9KK+p46owAfRcLDFwLfLMI65Nxy Qnm+HW2Af8b4crd2BdUvRcvdOC6b6ArQl0H5jQU+1vWzMm/6Z/x3Ddj/o5Ty0VXh xsilYV/t9bw3IhTJ1xcv8ViolFlxLUlidl4RrDHeJ72gRQdk690DArfl6SjTRaJJ 9PN9X3oofWBXtzO6qN2N+ojFRdm+h36K56+9XoqDsN/MqAm9ofHYw73rT57wCwYf Sc793tdo/pA2bWKWZmXccBf9A/4QG0QYiLwa+O3bCDVXDzRDzc2yH2Zp5k/pDX3g trJmVCilTnJ/E2j6UcKA75oAopkpv88= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:15 2025 by rpki-client