$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9024310c-a047-3fb3-979c-d3a2b80ac4ea.roa File: 9024310c-a047-3fb3-979c-d3a2b80ac4ea.roa (raw, json) Hash identifier: DIoknf++nDtmW/5QyYg6s+8a4N/LK63pQdlMGgbGSPo= Subject key identifier: 1D:2B:59:2E:D0:8F:FF:F5:B0:F7:CA:F9:3B:A1:27:76:68:0E:F3:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE4613F31201901D2F011C2AC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9024310c-a047-3fb3-979c-d3a2b80ac4ea.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.1.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:3f:31:20:19:01:d2:f0:11:c2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=8be94e06-3dff-4142-90f7-fb283e0b3b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:65:ef:fe:8e:96:77:0f:66:9a:ff:d8:04: 63:bf:12:38:12:37:18:a7:e9:1a:24:67:22:37:1b: c8:f3:31:1a:87:e7:d7:44:0b:de:80:fc:11:f4:11: 78:7b:22:8a:14:d7:dd:a8:28:40:c9:f9:7e:17:e8: bc:86:85:79:3e:9f:fd:18:87:63:5f:5d:3f:0f:48: 2f:a4:ae:89:8e:73:cd:2c:9f:38:a5:d7:1a:0b:de: 41:08:fa:25:75:82:2b:78:cf:dd:d1:17:48:e1:3c: 1d:2b:db:b6:04:81:bb:d2:fc:5c:ef:f7:c0:8d:d2: 20:26:df:b6:36:8b:a9:c6:68:b9:3b:94:4b:c7:29: 05:ed:e2:c2:53:5f:4e:e0:16:91:27:05:79:61:4e: ee:10:ce:75:1f:80:94:a7:da:f5:49:fc:fc:2b:b5: cd:e1:8c:32:b2:e7:7a:6e:26:01:f3:3c:84:51:28: cb:de:cf:6e:57:7e:24:f9:93:5a:06:55:b0:ee:95: 94:0d:4d:a9:e1:cc:5f:24:cf:71:22:8b:61:9d:d8: 96:6c:88:59:78:a0:62:fa:5f:5f:4a:45:8b:54:6d: 86:a1:d5:fb:30:3a:a6:e2:16:d5:b1:38:bb:d6:6d: c8:e3:1d:de:63:1a:48:19:d4:13:01:29:12:95:c7: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2B:59:2E:D0:8F:FF:F5:B0:F7:CA:F9:3B:A1:27:76:68:0E:F3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9024310c-a047-3fb3-979c-d3a2b80ac4ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b3:36:40:58:10:02:a5:be:bb:4b:bf:72:8b:81:2e:66:88: 96:83:91:e6:ae:bd:c4:3b:bc:08:5b:c4:d6:fe:fc:63:5c:62: 84:90:59:d3:87:40:e5:44:7b:16:8a:b4:28:e8:ae:bf:ce:8d: fc:23:67:16:46:d0:df:7e:b3:12:2a:06:43:f0:75:20:0f:99: 67:12:89:60:ed:1a:15:d6:e9:76:f3:46:4a:fe:44:c8:ba:35: 91:40:98:18:6c:06:46:47:3f:d2:82:ef:9f:5d:8c:a2:e3:f9: 4d:89:9f:06:18:03:38:e5:02:b6:ce:ba:1a:7b:e2:5f:6e:20: 86:ad:d3:e9:43:01:a6:60:39:9e:17:d1:56:1f:4f:90:3b:a8: 56:9d:f7:55:38:20:99:92:1c:b9:b2:2c:38:71:6a:1d:0e:24: e7:78:1d:86:00:76:d4:90:0f:af:45:e4:98:3e:4f:60:4c:16: e2:b7:db:1c:25:f0:9a:f1:61:6f:a3:65:38:89:ce:31:d2:03: eb:88:32:7b:c3:ff:65:22:34:72:b6:2d:2f:53:7d:60:62:1e: c9:71:d7:56:03:04:ee:6d:de:4a:86:a3:f4:27:b4:ec:8e:20: c3:e1:bd:39:0f:c4:0b:06:02:b7:55:ac:af:71:21:77:ca:d6: 3a:d9:48:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYT8xIBkB0vARwqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OGJlOTRlMDYtM2RmZi00MTQyLTkwZjctZmIyODNlMGIzYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNZl7/6OlncPZpr/2ARjvxI4EjcYp+kaJGci NxvI8zEah+fXRAvegPwR9BF4eyKKFNfdqChAyfl+F+i8hoV5Pp/9GIdjX10/D0gv pK6JjnPNLJ84pdcaC95BCPoldYIreM/d0RdI4TwdK9u2BIG70vxc7/fAjdIgJt+2 Noupxmi5O5RLxykF7eLCU19O4BaRJwV5YU7uEM51H4CUp9r1Sfz8K7XN4Ywysud6 biYB8zyEUSjL3s9uV34k+ZNaBlWw7pWUDU2p4cxfJM9xIothndiWbIhZeKBi+l9f SkWLVG2GodX7MDqm4hbVsTi71m3I4x3eYxpIGdQTASkSlcfKzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0rWS7Qj//1sPfK+TuhJ3ZoDvPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAyNDMxMGMtYTA0Ny0z ZmIzLTk3OWMtZDNhMmI4MGFjNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuzNkBYEAKlvrtLv3KLgS5miJaDkeauvcQ7vAhbxNb+/GNcYoSQWdOH QOVEexaKtCjorr/OjfwjZxZG0N9+sxIqBkPwdSAPmWcSiWDtGhXW6XbzRkr+RMi6 NZFAmBhsBkZHP9KC759djKLj+U2JnwYYAzjlArbOuhp74l9uIIat0+lDAaZgOZ4X 0VYfT5A7qFad91U4IJmSHLmyLDhxah0OJOd4HYYAdtSQD69F5Jg+T2BMFuK32xwl 8JrxYW+jZTiJzjHSA+uIMnvD/2UiNHK2LS9TfWBiHslx11YDBO5t3kqGo/QntOyO IMPhvTkPxAsGArdVrK9xIXfK1jrZSBI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:57 2025 by rpki-client