$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5077d23-9172-3596-a81e-3de27f48f53a.roa File: b5077d23-9172-3596-a81e-3de27f48f53a.roa (raw, json) Hash identifier: nXVbHqEf2TreqdXLr/IZbNPv5En3hUABLP7ZBotNRBw= Subject key identifier: E9:D9:D9:DD:C8:BE:A9:C0:5E:03:12:D2:10:89:0B:07:81:0C:EC:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E4158BC2A1EE51D1CBBB360 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5077d23-9172-3596-a81e-3de27f48f53a.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.33.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:58:bc:2a:1e:e5:1d:1c:bb:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=b21a5156-015d-438b-8788-8fb4766c9b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:7d:68:b0:ea:35:ae:c9:e1:c1:79:35:74: 93:0e:10:85:e3:eb:42:66:d9:1d:c4:5d:4c:2d:b3: 34:be:de:8f:73:f3:a2:ff:a1:1d:fb:51:84:8e:67: 46:31:c9:02:26:9b:d2:55:59:ad:8e:d5:ab:3e:33: 2c:3c:7a:a0:c9:2f:22:c9:25:ac:c5:7a:a1:93:47: ee:33:62:ce:26:17:26:a2:67:4e:d5:4d:17:ce:45: cf:d4:9a:d0:92:fc:70:d3:e2:31:6b:bc:c9:02:97: ad:53:7c:30:86:c6:a7:11:db:4a:9e:58:e4:be:17: 8f:53:e6:05:f6:f7:8d:2a:c8:d7:a6:f6:8b:81:92: e4:5e:8a:a6:d1:00:fb:bf:8d:78:d4:ff:55:70:f5: 61:1e:1a:40:58:02:05:f4:85:11:27:b8:08:c1:a7: 47:0c:c4:2d:42:a3:30:05:ce:4b:1a:eb:c2:2a:ec: 26:ee:1f:a3:8b:da:d7:a1:fc:85:56:d2:26:bb:7c: 45:a3:26:44:98:9a:f6:9c:98:30:5a:f1:eb:ae:86: ef:21:0e:80:6f:19:3a:dd:36:aa:39:3f:f4:30:09: 9a:2c:29:7a:4e:b0:ab:fe:84:9f:14:9c:dc:4e:21: f2:f2:52:86:0a:93:1c:8b:c6:78:d1:dd:b6:91:5d: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D9:D9:DD:C8:BE:A9:C0:5E:03:12:D2:10:89:0B:07:81:0C:EC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5077d23-9172-3596-a81e-3de27f48f53a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:83:7f:0d:d1:71:46:5f:30:c9:30:b1:5b:96:e9:c5:4f:61: 84:36:88:89:78:06:c4:3e:a9:b6:91:b5:ce:2c:ea:a7:14:89: 9b:1e:4e:48:4c:a9:8a:86:7b:a4:e0:87:0c:46:b3:16:f1:9b: f0:3a:47:21:b6:ac:4b:af:e9:5d:89:1d:a8:5f:f3:07:3a:1d: 46:8f:7e:3e:a5:2e:62:d6:e3:19:00:4a:d3:1d:8a:a3:5d:cf: cc:5a:8b:4d:72:06:47:a0:f0:2e:5f:3f:1a:60:fe:14:78:02: 77:83:92:e0:94:34:9d:91:1e:09:48:06:82:e7:6b:c8:e2:54: 57:26:16:55:fb:20:1e:70:fd:ce:0b:18:53:b6:66:8c:22:ad: 02:24:8d:6a:33:f1:ee:9c:1b:95:62:80:ce:17:bc:e5:9a:4e: b1:33:9b:0b:8c:ce:44:3f:fa:c9:eb:64:69:d9:91:85:d7:ff: 9f:72:60:67:ec:92:b5:bf:17:98:20:68:7e:3a:1b:8b:d0:6e: 58:44:ec:ba:a3:04:a7:58:5d:04:3e:66:b0:56:21:f0:73:bd: 7a:81:65:2e:cb:86:4b:31:8a:25:3e:52:69:7b:fc:ed:f3:c6: 5b:55:98:28:2f:c2:45:ee:61:f5:d3:f5:9b:30:90:8b:db:31: 30:a2:01:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVi8Kh7lHRy7s2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjIxYTUxNTYtMDE1ZC00MzhiLTg3ODgtOGZiNDc2NmM5YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcl9aLDqNa7J4cF5NXSTDhCF4+tCZtkdxF1M LbM0vt6Pc/Oi/6Ed+1GEjmdGMckCJpvSVVmtjtWrPjMsPHqgyS8iySWsxXqhk0fu M2LOJhcmomdO1U0XzkXP1JrQkvxw0+Ixa7zJApetU3wwhsanEdtKnljkvhePU+YF 9veNKsjXpvaLgZLkXoqm0QD7v4141P9VcPVhHhpAWAIF9IURJ7gIwadHDMQtQqMw Bc5LGuvCKuwm7h+ji9rXofyFVtImu3xFoyZEmJr2nJgwWvHrrobvIQ6Abxk63Taq OT/0MAmaLCl6TrCr/oSfFJzcTiHy8lKGCpMci8Z40d22kV2VNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnZ2d3IvqnAXgMS0hCJCweBDOwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjUwNzdkMjMtOTE3Mi0z NTk2LWE4MWUtM2RlMjdmNDhmNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmDfw3RcUZfMMkwsVuW6cVPYYQ2iIl4BsQ+qbaRtc4s6qcUiZseTkhM qYqGe6TghwxGsxbxm/A6RyG2rEuv6V2JHahf8wc6HUaPfj6lLmLW4xkAStMdiqNd z8xai01yBkeg8C5fPxpg/hR4AneDkuCUNJ2RHglIBoLna8jiVFcmFlX7IB5w/c4L GFO2ZowirQIkjWoz8e6cG5VigM4XvOWaTrEzmwuMzkQ/+snrZGnZkYXX/59yYGfs krW/F5ggaH46G4vQblhE7LqjBKdYXQQ+ZrBWIfBzvXqBZS7LhksxiiU+Uml7/O3z xltVmCgvwkXuYfXT9ZswkIvbMTCiAcs= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:15 2025 by rpki-client