$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07527543-b7f1-3e0d-b7f2-5bc3babd71e7.roa File: 07527543-b7f1-3e0d-b7f2-5bc3babd71e7.roa (raw, json) Hash identifier: SwN0TPRpXQPoOsZtm3dIs/SPHWdiDmaZ0UKvYdBzgOY= Subject key identifier: 0A:D3:44:A4:C3:3A:CF:40:FA:68:DF:D9:39:0F:74:21:E6:20:59:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E41571807E92B85848947E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07527543-b7f1-3e0d-b7f2-5bc3babd71e7.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.33.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:57:18:07:e9:2b:85:84:89:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=d369a0ca-7ae0-438e-bc5f-e1eb9a842521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:f6:b0:41:80:6a:26:e7:e8:25:62:6f:c5: e6:47:44:8f:5a:9d:15:ff:ea:10:4b:28:2f:ef:7c: 10:dd:80:de:5a:3d:a4:73:44:25:5e:c6:34:f3:7f: ba:ba:4e:2b:a4:a3:2d:2d:e0:2b:86:c6:b6:7f:7e: b8:9d:e3:a7:f4:a3:5e:2b:7c:16:88:96:0d:f0:79: 87:e8:92:e2:7e:d7:70:d3:fd:f1:91:68:07:b7:e3: d5:08:ed:95:40:d3:52:fd:bf:7d:a5:eb:26:a7:d9: 3f:cb:7a:ed:96:0a:c7:38:ca:5e:20:1e:8d:2e:f3: ed:e6:d8:1b:fc:6e:9d:c7:cc:fd:f6:1a:54:55:1e: 5d:7e:c1:03:01:88:cd:e3:d8:26:fd:d1:ab:ea:4e: 93:fe:9e:46:07:56:49:89:bf:70:9c:43:a9:c7:f0: 09:4d:92:bf:e8:0e:67:12:cd:26:fb:9e:7b:43:53: 51:06:a5:55:ab:d8:28:43:96:dd:34:fb:c8:c5:da: d5:dc:73:2c:b5:f2:a2:61:f3:9a:3d:e6:33:83:cb: 76:ff:c1:02:1b:14:6e:ca:ef:e2:01:63:f5:5c:41: c6:89:b8:48:af:81:1d:96:2c:ee:16:28:54:83:2f: 2e:b7:80:a4:4e:c5:3e:fd:46:e5:f4:bd:b4:38:f9: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:44:A4:C3:3A:CF:40:FA:68:DF:D9:39:0F:74:21:E6:20:59:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07527543-b7f1-3e0d-b7f2-5bc3babd71e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0b:3f:7c:0f:6e:66:65:0c:ab:82:4e:ec:be:bc:8e:41:38: 2b:52:24:b8:e8:34:2a:94:4b:6b:f0:d0:12:3a:4c:7a:7c:70: 07:4f:9d:a2:08:21:de:6c:98:27:d9:04:d2:36:b3:9f:2f:b3: 79:21:18:de:31:d2:13:39:b2:79:bc:cd:fd:00:28:ed:00:e9: 3e:57:50:9f:1b:78:7e:3e:e0:26:80:95:6e:18:7b:01:59:fd: 67:ec:f9:b9:6a:3a:0d:71:f0:a0:10:cd:06:50:4b:79:d8:ba: 1d:3e:d2:b9:7b:b4:dc:0c:a7:f8:cb:c5:51:13:b0:f6:3d:c3: 28:25:78:11:3f:d1:60:b9:51:a1:15:eb:7d:5b:e1:ad:0d:91: 46:38:64:50:e9:4e:ff:fe:5a:de:00:81:73:c8:2a:fc:79:f8: 17:30:2a:cd:23:41:b2:c1:c6:09:f5:6f:4a:e4:d4:02:7f:57: 3b:83:9f:d5:f9:37:cf:a3:02:c4:c5:7a:34:14:e1:db:ff:54: ff:1b:5c:c0:5a:a3:a9:3b:91:23:8b:ab:0b:bc:db:63:16:c0: fa:50:7f:5a:f6:35:ba:5e:c3:d9:be:e5:19:f1:a9:24:c6:fb: 2c:60:1c:75:66:f7:c2:1d:86:e4:f6:e9:cb:b1:46:09:f2:0b: 9b:bf:44:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVcYB+krhYSJR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDM2OWEwY2EtN2FlMC00MzhlLWJjNWYtZTFlYjlhODQyNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTf2sEGAaibn6CVib8XmR0SPWp0V/+oQSygv 73wQ3YDeWj2kc0QlXsY083+6uk4rpKMtLeArhsa2f364neOn9KNeK3wWiJYN8HmH 6JLiftdw0/3xkWgHt+PVCO2VQNNS/b99pesmp9k/y3rtlgrHOMpeIB6NLvPt5tgb /G6dx8z99hpUVR5dfsEDAYjN49gm/dGr6k6T/p5GB1ZJib9wnEOpx/AJTZK/6A5n Es0m+557Q1NRBqVVq9goQ5bdNPvIxdrV3HMstfKiYfOaPeYzg8t2/8ECGxRuyu/i AWP1XEHGibhIr4EdlizuFihUgy8ut4CkTsU+/Ubl9L20OPk1QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArTRKTDOs9A+mjf2TkPdCHmIFkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDc1Mjc1NDMtYjdmMS0z ZTBkLWI3ZjItNWJjM2JhYmQ3MWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwLP3wPbmZlDKuCTuy+vI5BOCtSJLjoNCqUS2vw0BI6THp8cAdPnaII Id5smCfZBNI2s58vs3khGN4x0hM5snm8zf0AKO0A6T5XUJ8beH4+4CaAlW4YewFZ /Wfs+blqOg1x8KAQzQZQS3nYuh0+0rl7tNwMp/jLxVETsPY9wygleBE/0WC5UaEV 631b4a0NkUY4ZFDpTv/+Wt4AgXPIKvx5+BcwKs0jQbLBxgn1b0rk1AJ/VzuDn9X5 N8+jAsTFejQU4dv/VP8bXMBao6k7kSOLqwu822MWwPpQf1r2Nbpew9m+5RnxqSTG +yxgHHVm98IdhuT26cuxRgnyC5u/RMM= -----END CERTIFICATE-----Generated at Sat Sep 6 05:13:58 2025 by rpki-client