$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bf91cfb-a4c4-3c00-a182-a7ca0a214f4a.roa File: 0bf91cfb-a4c4-3c00-a182-a7ca0a214f4a.roa (raw, json) Hash identifier: qEj6faXjvaT2A2JIJTyaGbSFo361bQZQG12Ffi6FSCE= Subject key identifier: 2D:68:18:0F:8E:B3:55:43:B0:09:96:23:50:09:D4:76:17:32:A3:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E4158D038953FEC0A0F4C60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bf91cfb-a4c4-3c00-a182-a7ca0a214f4a.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.33.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:58:d0:38:95:3f:ec:0a:0f:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=27b5cd62-f717-4b00-9785-7d4ff430c4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:33:4d:62:49:a8:d4:ab:df:3a:97:4c:f4:cb: 19:e8:b8:0a:de:78:c0:9d:9b:72:e2:90:d4:3d:4f: 1d:f7:34:4c:29:c7:c3:24:ca:1b:d2:8a:2b:ce:f7: 8f:ce:8a:c1:5b:69:b9:bb:0b:4c:bb:fd:cd:21:ea: fb:0a:cc:25:c9:df:88:4b:83:a5:23:41:69:fa:cc: 21:3d:a9:2b:45:96:35:1a:d6:ab:64:ec:5a:5b:5d: d7:80:3d:2a:48:61:4f:8f:05:53:fd:38:c6:b5:a1: 0e:d6:6b:3f:4d:6f:b2:19:63:76:1a:43:be:de:86: 8a:bb:40:29:db:f2:4c:b7:67:f0:0b:19:61:5e:38: 9f:77:89:4c:3e:7a:8c:25:d3:8a:f5:85:da:39:99: db:1f:ec:ad:22:2c:70:1a:4a:99:20:ff:72:9e:5b: 20:c0:58:42:5f:4f:c9:40:17:fc:69:60:d9:73:45: 98:5d:5b:ae:b0:f9:1f:d2:9a:3a:d0:9f:93:48:5f: 9b:f5:6a:bc:d1:ba:de:69:57:2f:d7:8b:a0:4c:f1: e7:9c:e3:c2:dd:ff:3f:f3:cb:44:18:39:70:e6:dd: ca:c0:f7:88:b0:e0:84:80:bc:41:f9:53:6e:cb:5f: 66:3b:94:14:ec:ac:cf:78:fe:43:e5:ee:4c:c9:53: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:18:0F:8E:B3:55:43:B0:09:96:23:50:09:D4:76:17:32:A3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bf91cfb-a4c4-3c00-a182-a7ca0a214f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:21:83:e5:e1:69:04:c7:37:cd:73:57:3c:06:18:3c:a5:02: d7:8e:ec:71:fd:ec:05:5f:e7:c8:8e:c1:0d:19:7a:cf:ab:4b: 16:8f:75:3a:97:0c:54:7c:34:05:b1:e3:9e:7d:ca:0f:5d:11: 98:b7:1a:c0:e2:d3:de:82:a8:91:3e:9e:a0:80:c1:92:14:56: 13:a7:ce:63:25:bc:c8:16:25:da:af:16:ff:29:7c:8d:95:58: a6:27:03:f8:c2:ec:0a:f9:eb:16:45:67:ee:1a:a9:17:f3:01: e3:4e:c7:80:92:de:f6:9a:b8:2a:0c:43:55:6f:99:2b:1a:6e: d5:ab:f8:0d:bf:ee:d3:d1:0c:d4:fb:60:19:5d:6b:1b:c5:19: b0:67:f9:94:70:a3:59:f6:3b:97:ab:45:28:40:f9:6b:8a:16: 84:6a:a4:a7:09:f3:35:13:8a:e9:61:5e:06:83:59:9d:4e:c7: 16:88:23:e8:27:88:77:e4:c4:06:6e:ab:92:32:75:71:f5:d7: b7:d4:51:19:74:ca:9d:68:50:07:56:83:f1:50:fc:6c:a3:a2: 79:48:66:c1:2f:c0:0a:f6:37:e6:e6:a9:52:8f:ab:51:fd:8f: a5:26:75:e7:49:32:0a:6d:46:df:b7:43:ff:95:a6:3a:13:7a: ab:2e:bc:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVjQOJU/7AoPTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjdiNWNkNjItZjcxNy00YjAwLTk3ODUtN2Q0ZmY0MzBjNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TNNYkmo1KvfOpdM9MsZ6LgK3njAnZty4pDU PU8d9zRMKcfDJMob0oorzvePzorBW2m5uwtMu/3NIer7Cswlyd+IS4OlI0Fp+swh PakrRZY1GtarZOxaW13XgD0qSGFPjwVT/TjGtaEO1ms/TW+yGWN2GkO+3oaKu0Ap 2/JMt2fwCxlhXjifd4lMPnqMJdOK9YXaOZnbH+ytIixwGkqZIP9ynlsgwFhCX0/J QBf8aWDZc0WYXVuusPkf0po60J+TSF+b9Wq80breaVcv14ugTPHnnOPC3f8/88tE GDlw5t3KwPeIsOCEgLxB+VNuy19mO5QU7KzPeP5D5e5MyVOr1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1oGA+Os1VDsAmWI1AJ1HYXMqOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJmOTFjZmItYTRjNC0z YzAwLWExODItYTdjYTBhMjE0ZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABghg+XhaQTHN81zVzwGGDylAteO7HH97AVf58iOwQ0Zes+rSxaPdTqX DFR8NAWx4559yg9dEZi3GsDi096CqJE+nqCAwZIUVhOnzmMlvMgWJdqvFv8pfI2V WKYnA/jC7Ar56xZFZ+4aqRfzAeNOx4CS3vaauCoMQ1VvmSsabtWr+A2/7tPRDNT7 YBldaxvFGbBn+ZRwo1n2O5erRShA+WuKFoRqpKcJ8zUTiulhXgaDWZ1OxxaII+gn iHfkxAZuq5IydXH117fUURl0yp1oUAdWg/FQ/GyjonlIZsEvwAr2N+bmqVKPq1H9 j6UmdedJMgptRt+3Q/+VpjoTeqsuvOU= -----END CERTIFICATE-----Generated at Sat Sep 6 05:19:13 2025 by rpki-client