$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33064933-a525-316e-9cb5-6e7360524190.roa File: 33064933-a525-316e-9cb5-6e7360524190.roa (raw, json) Hash identifier: CZ8qFo3AkHkgqy+69LYzKs5zG9NGYqRqI+ftgKQvIiA= Subject key identifier: D1:95:32:42:64:C8:02:56:11:17:15:15:92:DB:29:E6:80:E2:13:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C7511C684027292910A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33064933-a525-316e-9cb5-6e7360524190.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.197.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:75:11:c6:84:02:72:92:91:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=bbb88d00-bbc6-42c8-9094-b83962757785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:50:09:6f:a7:be:28:d4:25:cd:be:20:ba:a6: db:46:a1:2f:28:1d:f2:f7:8a:5a:0e:46:c6:fb:e8: 1b:dd:13:6c:95:0e:b7:10:f0:d9:0c:5e:08:21:40: b1:86:b5:54:42:7b:53:42:c7:49:33:78:2a:f1:2b: 43:9c:00:20:3d:d4:c0:f4:e7:f8:b8:71:ca:d3:38: 9b:ef:a8:28:eb:73:c5:56:bb:18:70:d8:37:34:9b: 8e:cf:4d:08:8f:24:f5:00:cf:69:9e:56:e9:1b:d7: c5:94:fe:94:e7:be:18:1f:0d:35:e7:f0:b2:44:98: c6:7a:8d:0f:c2:5b:89:a8:5f:cf:09:ab:18:db:45: bf:78:9c:47:25:e3:07:13:6c:25:92:0b:21:7e:d7: f5:ce:0a:33:88:bd:e0:96:27:3d:da:00:b7:a3:3e: e2:fe:0b:eb:98:5c:73:80:03:ba:42:b5:bc:75:09: bf:60:ea:7a:64:1e:2e:26:65:8a:6b:fb:6b:fd:30: 47:6e:47:ad:b3:a4:b7:71:5c:8c:22:99:1a:ae:2f: 2c:ff:09:f0:e2:66:5b:8c:bf:39:c5:88:72:9d:a1: e1:f4:a9:a7:6f:22:01:95:29:be:95:4e:88:51:7f: 34:f2:e3:b9:ad:c3:7b:52:95:e1:81:0d:f3:0b:d8: d6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:95:32:42:64:C8:02:56:11:17:15:15:92:DB:29:E6:80:E2:13:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33064933-a525-316e-9cb5-6e7360524190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:28:c4:79:c3:d2:3b:20:7d:1f:e4:ed:aa:93:39:1d:16:6a: 9e:78:0a:1c:66:7c:aa:a8:95:33:86:16:39:e0:9c:5a:06:be: 5b:a9:1b:f0:75:0b:1d:0f:5a:91:af:30:48:2d:1a:7e:cb:b6: c7:39:db:92:79:ec:d2:46:97:37:2a:43:09:b3:50:b3:e7:47: 02:df:1f:f7:44:b3:b2:3f:dc:fe:25:37:1e:75:f8:64:0b:07: c1:cc:5c:a6:87:1c:c3:15:42:cb:c5:af:f0:a2:43:15:85:7c: 6a:9f:a5:05:e5:6b:f9:fa:b7:48:06:69:cd:94:2b:bc:d0:ac: d6:88:9e:dc:6f:c2:f4:2b:c4:97:91:2e:7b:36:0c:40:44:6a: 4e:bf:fe:08:81:d2:94:68:24:d8:7d:f9:e9:e7:65:7f:29:bc: 73:73:5f:06:a9:bb:d2:f8:f6:dc:7d:3a:d2:12:57:68:fe:d5: 1d:44:ff:e1:65:46:d8:06:77:b7:cf:cc:af:0b:b1:21:95:93: b3:36:2c:e8:40:bb:3a:32:7d:3c:16:b5:77:fd:0b:f7:eb:f6: bb:a8:dc:e8:9d:01:2c:f9:94:61:3d:74:4c:f8:d9:15:49:53: c9:a5:7b:30:59:f5:ed:bc:aa:2a:40:9a:8e:3f:07:b8:5f:14: 3d:be:07:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTHURxoQCcpKRCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YmJiODhkMDAtYmJjNi00MmM4LTkwOTQtYjgzOTYyNzU3Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lAJb6e+KNQlzb4guqbbRqEvKB3y94paDkbG ++gb3RNslQ63EPDZDF4IIUCxhrVUQntTQsdJM3gq8StDnAAgPdTA9Of4uHHK0zib 76go63PFVrsYcNg3NJuOz00IjyT1AM9pnlbpG9fFlP6U574YHw015/CyRJjGeo0P wluJqF/PCasY20W/eJxHJeMHE2wlkgshftf1zgoziL3glic92gC3oz7i/gvrmFxz gAO6QrW8dQm/YOp6ZB4uJmWKa/tr/TBHbkets6S3cVyMIpkari8s/wnw4mZbjL85 xYhynaHh9KmnbyIBlSm+lU6IUX808uO5rcN7UpXhgQ3zC9jW+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGVMkJkyAJWERcVFZLbKeaA4hOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzMwNjQ5MzMtYTUyNS0z MTZlLTljYjUtNmU3MzYwNTI0MTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUoxHnD0jsgfR/k7aqTOR0Wap54ChxmfKqolTOGFjngnFoGvlupG/B1 Cx0PWpGvMEgtGn7Ltsc525J57NJGlzcqQwmzULPnRwLfH/dEs7I/3P4lNx51+GQL B8HMXKaHHMMVQsvFr/CiQxWFfGqfpQXla/n6t0gGac2UK7zQrNaIntxvwvQrxJeR Lns2DEBEak6//giB0pRoJNh9+ennZX8pvHNzXwapu9L49tx9OtISV2j+1R1E/+Fl RtgGd7fPzK8LsSGVk7M2LOhAuzoyfTwWtXf9C/fr9ruo3OidASz5lGE9dEz42RVJ U8mlezBZ9e28qipAmo4/B7hfFD2+Bzk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:51:24 2025 by rpki-client