$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa File: 84950b3a-15d7-3b08-9186-13789c4594b0.roa (raw, json) Hash identifier: j2EesLYfVG1MfLsGAq11eQxtKXxEayIZMBH2TaGQZbw= Subject key identifier: 5E:1B:FC:F4:E3:61:9B:4D:A9:3D:5E:09:BF:F0:22:22:3E:E9:5D:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E0F6DC90AB3513EDE05C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f6:dc:90:ab:35:13:ed:e0:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=f51e54f7-4f26-4690-aaa2-d37e84bfedb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7a:6c:33:73:7d:db:aa:31:7d:2f:b0:5f:4c: b6:d7:51:08:c8:d1:28:2f:a5:24:de:a3:a1:f9:04: 01:e8:0b:c3:73:3c:38:51:69:7d:75:b1:d8:c7:bb: 15:08:13:b8:1e:dc:6d:94:33:6d:dc:9d:73:9a:c2: a8:c1:f0:e6:1d:ac:2d:33:97:e3:6a:f8:39:1c:82: 10:e7:b4:0e:53:3e:7c:f8:2f:65:4e:54:06:c2:b5: c2:46:eb:76:18:74:da:ba:41:ea:98:03:a9:23:78: f7:a2:27:5a:c7:c9:fc:18:30:a3:11:e6:06:a9:07: e6:e0:8a:e5:62:95:9f:48:69:60:7d:cf:20:da:c0: a4:ce:a8:08:eb:33:75:f8:ee:7e:0a:c6:9a:06:7a: d7:2f:ba:4f:d5:2b:67:20:50:20:e6:67:44:3b:88: 0f:e1:cd:c6:a1:a9:18:19:98:44:a7:82:6d:6d:6f: 74:64:57:3c:19:7c:10:7a:3b:8d:b8:85:8d:22:ce: 30:1c:ab:ca:37:05:ec:48:cb:1e:66:62:61:be:cc: c0:bf:71:7a:88:82:e5:ac:6d:1e:95:6c:cd:59:7d: af:e5:aa:60:f5:e7:b9:91:64:fb:e5:b3:4d:78:ee: f3:ed:64:6b:65:41:ae:95:e0:2b:3b:6e:78:ec:64: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1B:FC:F4:E3:61:9B:4D:A9:3D:5E:09:BF:F0:22:22:3E:E9:5D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:25:e5:cc:dd:28:39:bb:b0:11:c9:4e:df:ed:59:d0:2d:11: a2:a1:bb:1e:c8:a2:f1:44:05:10:ca:82:34:7d:d6:9e:fa:99: 7c:bc:d0:93:37:93:d2:81:3d:08:b8:d4:e7:8f:bd:22:76:eb: f7:c1:bb:41:99:44:2f:5a:fa:2e:af:43:69:c0:65:a5:75:2a: 0e:ce:54:30:7d:9b:2b:66:b7:c5:ea:c3:b6:93:20:fb:e6:b3: b7:a2:c9:fe:66:af:96:ca:49:ee:fa:58:7c:d9:c4:1b:2d:12: d7:de:14:61:67:07:73:d6:85:fd:09:4b:f3:31:96:53:a3:31: 5a:4e:0a:c7:58:b9:fc:b4:89:eb:5d:40:01:87:d1:3e:db:8a: df:5f:87:7f:2b:90:6c:e3:48:39:2f:55:26:fd:f9:b7:3b:67: 4d:69:38:62:fa:e2:6f:38:88:76:5f:47:c9:d8:e9:fd:fc:72: 4a:a4:2f:d4:df:c6:c5:59:03:cc:1e:63:cd:0a:04:ad:e7:99: ea:b3:33:9a:c4:af:7d:18:e0:f2:db:f7:66:3b:dd:1f:ee:40: ad:c5:64:94:5c:68:d7:74:92:cd:da:8f:8d:fc:fc:26:73:df: 68:93:dc:9c:09:46:c0:a3:b9:57:24:fc:d2:22:12:87:99:89: a4:2d:fd:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PbckKs1E+3gXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjUxZTU0ZjctNGYyNi00NjkwLWFhYTItZDM3ZTg0YmZlZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3psM3N926oxfS+wX0y211EIyNEoL6Uk3qOh +QQB6AvDczw4UWl9dbHYx7sVCBO4HtxtlDNt3J1zmsKowfDmHawtM5fjavg5HIIQ 57QOUz58+C9lTlQGwrXCRut2GHTaukHqmAOpI3j3oidax8n8GDCjEeYGqQfm4Irl YpWfSGlgfc8g2sCkzqgI6zN1+O5+CsaaBnrXL7pP1StnIFAg5mdEO4gP4c3GoakY GZhEp4JtbW90ZFc8GXwQejuNuIWNIs4wHKvKNwXsSMseZmJhvszAv3F6iILlrG0e lWzNWX2v5apg9ee5kWT75bNNeO7z7WRrZUGuleArO2547GQ4VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4b/PTjYZtNqT1eCb/wIiI+6V0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ5NTBiM2EtMTVkNy0z YjA4LTkxODYtMTM3ODljNDU5NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUl5czdKDm7sBHJTt/tWdAtEaKhux7IovFEBRDKgjR91p76mXy80JM3 k9KBPQi41OePvSJ26/fBu0GZRC9a+i6vQ2nAZaV1Kg7OVDB9mytmt8Xqw7aTIPvm s7eiyf5mr5bKSe76WHzZxBstEtfeFGFnB3PWhf0JS/MxllOjMVpOCsdYufy0ietd QAGH0T7bit9fh38rkGzjSDkvVSb9+bc7Z01pOGL64m84iHZfR8nY6f38ckqkL9Tf xsVZA8weY80KBK3nmeqzM5rEr30Y4PLb92Y73R/uQK3FZJRcaNd0ks3aj438/CZz 32iT3JwJRsCjuVck/NIiEoeZiaQt/cg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:19 2025 by rpki-client