$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/9114f267-64fb-3c87-ba5c-fe28d188d01d.roa File: 9114f267-64fb-3c87-ba5c-fe28d188d01d.roa (raw, json) Hash identifier: pIlRyMcz7AdfWXmTzSoP0+eCEEDKxeF7yZnM2LE42s0= Subject key identifier: 5F:84:4E:D1:A6:0C:8A:23:B1:CE:79:AF:6C:A6:05:44:96:56:45:55 Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584B03169B7D4693CD6D5753F180 Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/9114f267-64fb-3c87-ba5c-fe28d188d01d.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 62887 IP address blocks: 23.139.60.0/24 maxlen: 24 64.32.50.0/24 maxlen: 24 2620:d7:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:9b:7d:46:93:cd:6d:57:53:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=ec52accd-fb44-4e7f-b0e0-d0619f4aac9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:76:44:a2:49:25:b5:4b:dc:7d:0d:f5:e9: 2e:28:70:fa:53:19:66:a9:18:a2:82:58:ec:ea:39: cd:1e:9b:68:b3:e3:dc:ee:4b:c5:99:ce:59:e4:b2: 21:6b:54:e1:30:75:4f:52:ac:99:9b:04:c5:01:fc: 0d:0e:dc:23:de:2c:f0:02:20:d1:c3:ca:3f:74:e7: 57:12:b7:65:20:46:19:08:21:e5:45:54:e5:7d:c2: 3d:c5:fa:9e:fb:f4:9d:9f:05:2c:0e:7b:27:eb:84: fb:a5:45:38:9f:7f:10:e3:48:63:b3:3d:3a:da:ab: 57:b2:54:40:f0:c2:36:9e:6d:1b:7c:25:a8:17:ca: c8:ea:d7:30:64:cf:45:0a:b5:64:0f:f3:1f:e9:38: a1:e8:64:05:4e:94:17:5c:80:6e:be:e2:56:e6:49: 7c:dd:e2:1c:d9:fa:9a:df:c8:02:a8:d3:c8:5e:ef: 19:c3:a4:3f:97:e5:e8:74:a4:93:d0:a9:7b:d0:09: 60:96:4f:2b:17:df:fa:2c:a1:e4:70:61:1e:f2:72: 18:10:5c:ca:38:4b:ca:51:0a:28:ed:df:e5:dd:5b: e7:58:8b:86:33:3f:55:2b:8f:84:3f:01:b2:75:70: 33:53:d5:c3:d2:5c:21:1e:ea:db:d8:8b:2c:bc:17: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:84:4E:D1:A6:0C:8A:23:B1:CE:79:AF:6C:A6:05:44:96:56:45:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/9114f267-64fb-3c87-ba5c-fe28d188d01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: 23.139.60.0/24 64.32.50.0/24 IPv6: 2620:d7:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2a:ac:df:50:7c:dc:6d:5e:f4:0c:aa:a8:f5:81:1a:7a:4b: a9:a8:7e:08:0c:e1:47:d2:43:e1:04:58:93:3a:fc:8f:1a:85: 39:50:48:0d:cd:1b:10:ed:a3:57:b5:78:18:89:9f:f6:a7:d6: 1f:ee:48:3a:97:dc:a9:21:ab:c4:75:da:0f:5b:71:8d:d3:34: 6c:85:92:aa:bd:14:d7:05:f6:50:9b:55:a6:2f:61:f9:8e:74: 76:f3:58:f1:0b:75:d9:91:38:fc:6a:ed:b0:0f:3e:2c:11:60: 53:1e:6f:79:3a:4d:00:6e:b6:3d:f1:42:f3:5e:69:54:56:c1: 64:d6:ab:3f:95:d0:72:3a:fd:e2:17:74:a2:1f:d3:67:05:04: b8:db:2f:f0:e9:25:c7:f4:f1:d1:ad:af:09:36:03:43:57:59: ea:c7:d3:d2:64:ac:20:3d:dc:eb:e3:e8:7f:d9:15:ee:cf:94: 82:44:da:ed:90:2b:b7:5b:38:5b:17:b1:a5:74:0c:fe:82:e8: bb:f9:37:13:70:23:cf:ff:4e:27:48:84:6e:e0:2c:af:21:e1: 99:bb:ad:a2:8c:f6:70:4f:f8:05:dd:7c:41:39:ee:89:84:e3: 5f:71:51:39:2b:97:35:4c:9a:ab:b2:3a:20:a7:a2:00:3f:82: 25:26:fc:e0 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEsDFpt9RpPNbVdT8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk ZWM1MmFjY2QtZmI0NC00ZTdmLWIwZTAtZDA2MTlmNGFhYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydl2RKJJJbVL3H0N9ekuKHD6UxlmqRiigljs 6jnNHptos+Pc7kvFmc5Z5LIha1ThMHVPUqyZmwTFAfwNDtwj3izwAiDRw8o/dOdX ErdlIEYZCCHlRVTlfcI9xfqe+/SdnwUsDnsn64T7pUU4n38Q40hjsz062qtXslRA 8MI2nm0bfCWoF8rI6tcwZM9FCrVkD/Mf6Tih6GQFTpQXXIBuvuJW5kl83eIc2fqa 38gCqNPIXu8Zw6Q/l+XodKST0Kl70Alglk8rF9/6LKHkcGEe8nIYEFzKOEvKUQoo 7d/l3VvnWIuGMz9VK4+EPwGydXAzU9XD0lwhHurb2IssvBfI3wIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFF+ETtGmDIojsc55r2ymBUSWVkVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvOTExNGYyNjctNjRmYi0z Yzg3LWJhNWMtZmUyOGQxODhkMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAF4s8AwQA QCAyMA8EAgACMAkDBwAmIADXoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPCqs31B83G1e9AyqqPWBGnpL qah+CAzhR9JD4QRYkzr8jxqFOVBIDc0bEO2jV7V4GImf9qfWH+5IOpfcqSGrxHXa D1txjdM0bIWSqr0U1wX2UJtVpi9h+Y50dvNY8Qt12ZE4/GrtsA8+LBFgUx5veTpN AG62PfFC815pVFbBZNarP5XQcjr94hd0oh/TZwUEuNsv8Oklx/Tx0a2vCTYDQ1dZ 6sfT0mSsID3c6+Pof9kV7s+UgkTa7ZArt1s4WxexpXQM/oLou/k3E3Ajz/9OJ0iE buAsryHhmbutooz2cE/4Bd18QTnuiYTjX3FROSuXNUyaq7I6IKeiAD+CJSb84A== -----END CERTIFICATE-----Generated at Thu Sep 18 01:27:05 2025 by rpki-client