$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f10702c-f16c-36b8-8b38-fa178cacaea8.roa File: 0f10702c-f16c-36b8-8b38-fa178cacaea8.roa (raw, json) Hash identifier: kOaYvdnHJDPwn+1/U8Gq3jyy7Xgxv/zNAxm/0j/VlOw= Subject key identifier: AA:34:DC:C6:E0:E7:0B:FF:87:F5:EC:32:C1:CA:C7:5C:D9:97:F0:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E415E571FE95336877C2A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f10702c-f16c-36b8-8b38-fa178cacaea8.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.33.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:5e:57:1f:e9:53:36:87:7c:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=0fb1ecaa-e9a9-45fe-9437-666425356f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:65:66:b8:d1:99:dd:bd:90:7c:e3:9e:8d: fc:eb:67:09:2a:d9:ca:b2:81:cd:95:3b:14:a3:91: 51:d3:7e:68:7f:08:22:2f:78:50:45:30:2d:14:c3: 11:c3:dd:e3:88:40:2e:e6:76:1e:09:cd:cf:94:b9: b1:01:05:6d:20:02:8b:c7:ec:61:94:00:d5:ad:6c: 7a:70:45:ba:65:b7:98:46:6d:96:65:ee:6d:ed:85: 4d:7c:b6:ba:6b:df:09:41:1c:bb:f4:7a:6b:38:78: e5:cb:c3:af:f9:87:72:3d:06:6b:cf:c0:83:a0:59: 91:4c:4b:7f:7a:a0:96:2d:99:85:00:55:39:05:2f: 27:5f:99:09:43:57:d7:0d:7d:a9:a4:f3:aa:ee:00: 94:95:f2:b0:02:74:84:83:45:05:ec:d0:8e:72:c6: fd:1f:1e:63:f0:9c:9b:c5:9f:48:ec:3b:dd:6e:4e: 75:ff:ef:2b:c6:80:42:0f:08:c9:46:65:b3:8d:d9: e2:41:9c:b9:b1:e3:83:6e:f5:8b:e8:0c:db:b0:29: aa:e7:9c:f2:54:27:05:a7:26:3a:80:9a:6e:a8:32: 8b:57:d3:5f:10:53:ac:54:34:48:f3:a2:d4:9e:2e: 6c:4e:aa:dd:d5:d9:29:91:09:3e:b4:49:07:b4:02: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:34:DC:C6:E0:E7:0B:FF:87:F5:EC:32:C1:CA:C7:5C:D9:97:F0:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f10702c-f16c-36b8-8b38-fa178cacaea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:67:b0:fd:c8:d7:8a:0e:95:9c:0e:e5:34:71:5f:5a:92:d1: 71:55:71:1c:e8:a4:37:e3:db:15:5e:3e:8d:bd:2b:b3:ee:cc: 69:53:e4:65:f8:6c:55:20:c1:d3:3f:e8:e1:67:7b:7a:19:71: 9a:e5:ee:be:25:86:12:c5:72:99:49:c0:a8:b6:1c:a3:b1:00: 28:49:3a:a6:f1:45:28:fc:60:70:dc:63:90:9c:f0:97:66:db: c7:eb:17:00:00:a5:4b:40:e4:ab:03:54:7e:5d:45:85:e7:95: 07:50:34:f3:03:51:8d:5d:81:d6:f0:11:a3:00:0a:17:e6:9f: 6e:ca:95:25:3a:10:7e:0d:a9:7f:d9:9c:75:dd:28:f2:93:99: 51:b3:0c:e3:62:9e:63:7f:c2:ec:1b:13:b2:67:98:bb:e7:9d: 34:37:dc:ac:33:51:7e:29:ce:23:e0:b9:5f:e7:d2:fc:79:6f: cc:5e:bf:b4:9f:a5:6c:5e:3f:14:17:e4:75:29:30:a7:2a:b2: 7b:8b:c9:c7:9c:1b:54:0e:07:29:ac:36:a3:92:14:f0:b4:a0: a8:e4:ff:24:fe:5b:62:ee:a2:15:51:5b:44:5b:03:81:fb:66: bb:07:f1:8c:29:46:45:af:5c:7e:61:b6:ce:c7:a6:57:78:8e: 65:a5:21:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQV5XH+lTNod8KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGZiMWVjYWEtZTlhOS00NWZlLTk0MzctNjY2NDI1MzU2ZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mBlZrjRmd29kHzjno3862cJKtnKsoHNlTsU o5FR035ofwgiL3hQRTAtFMMRw93jiEAu5nYeCc3PlLmxAQVtIAKLx+xhlADVrWx6 cEW6ZbeYRm2WZe5t7YVNfLa6a98JQRy79HprOHjly8Ov+YdyPQZrz8CDoFmRTEt/ eqCWLZmFAFU5BS8nX5kJQ1fXDX2ppPOq7gCUlfKwAnSEg0UF7NCOcsb9Hx5j8Jyb xZ9I7Dvdbk51/+8rxoBCDwjJRmWzjdniQZy5seODbvWL6AzbsCmq55zyVCcFpyY6 gJpuqDKLV9NfEFOsVDRI86LUni5sTqrd1dkpkQk+tEkHtAJbdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo03Mbg5wv/h/XsMsHKx1zZl/A1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGYxMDcwMmMtZjE2Yy0z NmI4LThiMzgtZmExNzhjYWNhZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1nsP3I14oOlZwO5TRxX1qS0XFVcRzopDfj2xVePo29K7PuzGlT5GX4 bFUgwdM/6OFne3oZcZrl7r4lhhLFcplJwKi2HKOxAChJOqbxRSj8YHDcY5Cc8Jdm 28frFwAApUtA5KsDVH5dRYXnlQdQNPMDUY1dgdbwEaMAChfmn27KlSU6EH4NqX/Z nHXdKPKTmVGzDONinmN/wuwbE7JnmLvnnTQ33KwzUX4pziPguV/n0vx5b8xev7Sf pWxePxQX5HUpMKcqsnuLycecG1QOBymsNqOSFPC0oKjk/yT+W2LuohVRW0RbA4H7 ZrsH8YwpRkWvXH5hts7Hpld4jmWlIRE= -----END CERTIFICATE-----Generated at Sat Sep 6 01:09:17 2025 by rpki-client