$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45fc6c3a-b180-37d0-8b1f-080ff5be7a6f.roa File: 45fc6c3a-b180-37d0-8b1f-080ff5be7a6f.roa (raw, json) Hash identifier: lsOa/LTb85MEfs1sVSPocf8A+MZThXhyzRCjlBbwkzc= Subject key identifier: 35:9B:76:ED:3A:9E:EC:A8:C3:C1:AD:48:EA:50:B0:5C:6B:21:7C:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C1857850F566A71E42950 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45fc6c3a-b180-37d0-8b1f-080ff5be7a6f.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 35994 IP address blocks: 23.33.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:18:57:85:0f:56:6a:71:e4:29:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3a2d314c-cffd-485f-a018-b76d1debe5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:ab:a1:b1:de:72:00:64:8b:a0:13:e8:03: 9a:b7:c9:ea:fb:d2:19:38:43:64:93:48:4d:04:13: cf:c5:7a:e5:2f:1e:6d:2c:97:ea:2c:d7:24:35:a7: 34:e4:6b:44:cb:6f:2f:a1:de:41:95:c3:10:1e:69: e3:aa:f9:16:31:9d:8f:f2:d6:7d:4e:06:a0:1c:54: 2b:09:4b:c9:98:ed:6f:1e:f7:57:c0:40:f2:0d:82: 98:5d:7f:9c:5d:28:92:bc:88:c5:0f:8d:3e:55:83: e7:f1:24:92:b7:74:3a:36:29:28:71:e5:4c:67:d2: 64:ea:94:6c:91:9b:e4:80:21:2c:4c:73:90:04:5d: fc:d0:0e:6b:cc:92:84:ff:8d:42:2b:f6:ab:c2:61: f9:55:12:c2:43:0e:03:92:5a:51:8c:4f:7c:f4:cd: 8d:2c:8c:e7:b9:c0:a9:88:fb:27:14:6b:21:10:08: 45:12:73:75:25:43:a8:10:1a:22:88:f2:81:43:6b: 11:75:be:65:4d:01:66:3d:e5:13:44:77:ca:3a:23: dd:a5:ae:70:7e:89:97:45:2e:9b:b1:f3:b5:97:a8: 25:69:1e:45:b9:8d:57:d3:46:0e:d4:c6:9a:a7:6f: 99:18:72:0a:07:e1:1e:29:c8:36:0f:5d:43:a2:fe: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9B:76:ED:3A:9E:EC:A8:C3:C1:AD:48:EA:50:B0:5C:6B:21:7C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45fc6c3a-b180-37d0-8b1f-080ff5be7a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:01:31:52:94:b9:49:e0:9b:b2:9c:77:bd:83:35:ac:5b:bc: 85:7a:ae:16:fa:36:29:25:02:60:3d:d2:92:66:9f:4d:0c:fd: 60:ce:af:7f:78:fb:fc:30:0a:17:2e:f1:99:36:d4:a8:86:b0: 70:f0:55:d2:f3:8d:3f:d1:05:4d:f0:3b:be:66:f2:30:91:68: b5:81:cd:b9:69:b0:d3:ee:a2:09:83:19:7e:ae:cc:3c:43:db: 43:64:43:06:4e:6b:39:23:32:a7:4f:71:42:de:c5:90:d9:fe: 02:f3:a2:b8:60:77:33:2e:b5:88:ba:fa:6c:f0:50:f3:9a:be: b0:44:3f:a2:1d:03:0a:ab:df:a1:39:0e:ae:9e:3a:08:65:6d: 9d:af:f5:f0:34:9b:02:8c:cb:c5:8d:6e:d7:08:b5:38:3f:f3: a6:a0:62:55:34:99:94:f0:c1:16:5f:9f:2e:8d:cc:10:ba:dc: 44:32:0e:60:b7:a6:1c:00:84:d6:eb:4c:f9:0a:97:4a:f5:ef: b0:ba:5f:5f:df:49:07:da:be:e9:46:d6:b3:46:44:0e:78:a4: 56:f7:3a:9a:4a:61:4a:30:21:b9:c9:ad:6e:f8:74:73:4c:f3: b8:51:2d:19:cb:c2:99:e7:3a:21:5d:92:7b:b0:47:d7:b9:f5: a5:09:ed:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBhXhQ9WanHkKVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk M2EyZDMxNGMtY2ZmZC00ODVmLWEwMTgtYjc2ZDFkZWJlNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznerobHecgBki6AT6AOat8nq+9IZOENkk0hN BBPPxXrlLx5tLJfqLNckNac05GtEy28vod5BlcMQHmnjqvkWMZ2P8tZ9TgagHFQr CUvJmO1vHvdXwEDyDYKYXX+cXSiSvIjFD40+VYPn8SSSt3Q6NikoceVMZ9Jk6pRs kZvkgCEsTHOQBF380A5rzJKE/41CK/arwmH5VRLCQw4DklpRjE989M2NLIznucCp iPsnFGshEAhFEnN1JUOoEBoiiPKBQ2sRdb5lTQFmPeUTRHfKOiPdpa5wfomXRS6b sfO1l6glaR5FuY1X00YO1Maap2+ZGHIKB+EeKcg2D11Dov7gwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWbdu06nuyow8GtSOpQsFxrIXyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDVmYzZjM2EtYjE4MC0z N2QwLThiMWYtMDgwZmY1YmU3YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyFSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkBMVKUuUngm7Kcd72DNaxbvIV6rhb6NiklAmA90pJmn00M/WDOr394 +/wwChcu8Zk21KiGsHDwVdLzjT/RBU3wO75m8jCRaLWBzblpsNPuogmDGX6uzDxD 20NkQwZOazkjMqdPcULexZDZ/gLzorhgdzMutYi6+mzwUPOavrBEP6IdAwqr36E5 Dq6eOghlbZ2v9fA0mwKMy8WNbtcItTg/86agYlU0mZTwwRZfny6NzBC63EQyDmC3 phwAhNbrTPkKl0r177C6X1/fSQfavulG1rNGRA54pFb3OppKYUowIbnJrW74dHNM 87hRLRnLwpnnOiFdknuwR9e59aUJ7Sc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:37:13 2025 by rpki-client