$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35a9d8b7-4191-3ee1-8e98-9aff46ce510d.roa File: 35a9d8b7-4191-3ee1-8e98-9aff46ce510d.roa (raw, json) Hash identifier: OQJ8sI2SFxP30NMvx+0FUgAzWHC6CtU7+F+roQYmK44= Subject key identifier: E3:84:05:3E:1F:F6:0E:78:AF:24:B5:4D:D2:0B:00:26:AC:02:3E:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC1F4621F3A72B6B2806C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35a9d8b7-4191-3ee1-8e98-9aff46ce510d.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.32.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1f:46:21:f3:a7:2b:6b:28:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=3ff22df9-9aee-4d5a-8574-08395ed67b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:02:da:c7:a2:0f:8c:6d:5b:5d:e8:7b:7d: 30:ec:c2:d0:25:d4:a7:73:21:9b:ea:4f:66:d2:30: 9a:03:f9:48:0a:1e:fd:c2:36:b2:eb:9c:27:f1:c7: 74:bc:d9:49:b7:82:f3:5f:7a:59:21:b3:c6:12:9b: ba:53:3c:ce:5a:b1:1a:9c:09:0d:53:3c:b8:2d:f5: 5d:56:24:17:7f:a9:a6:9e:63:60:7c:14:c4:a7:5a: e6:54:ff:b0:c9:ec:08:46:28:78:4e:0d:5e:0c:5e: ae:4f:98:b0:61:a7:21:95:5f:cc:ee:3f:f1:3f:7c: 01:bb:8f:17:b7:17:f3:87:9c:16:b3:00:57:52:ee: f7:12:a5:cf:ca:83:c0:64:28:6d:4d:2a:c1:09:2b: ee:fe:7a:18:22:2e:02:84:91:ac:b6:8d:79:1a:4a: ac:17:80:07:53:d7:95:74:e3:01:ab:f8:44:5f:62: 76:d1:c6:89:ca:06:fd:06:d1:de:20:98:ee:0a:25: db:c2:a9:63:bb:50:62:4d:ab:6b:fa:2a:05:1f:c9: 44:5e:23:f1:80:c3:0b:6d:fe:bf:40:98:15:f4:54: d4:e7:60:35:8a:b6:8d:52:99:ab:5b:04:69:47:b6: ee:2c:82:dc:81:9e:5e:b9:a6:a8:4b:8b:26:86:8f: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:84:05:3E:1F:F6:0E:78:AF:24:B5:4D:D2:0B:00:26:AC:02:3E:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35a9d8b7-4191-3ee1-8e98-9aff46ce510d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a1:6d:ef:59:cd:86:4f:73:55:56:40:51:f2:dc:c8:3e:e7: 73:12:b9:7b:57:57:48:a6:9f:ab:c0:eb:e9:bd:bd:93:4e:f0: e6:3e:cf:d9:a8:ae:49:a0:83:62:8c:24:02:c9:05:15:d5:f1: dd:ab:d3:6b:98:f9:20:de:6c:1b:b9:93:f7:5c:b3:c6:43:b1: 34:7c:22:47:0b:2a:1c:4c:96:ad:ee:28:16:66:cd:d1:42:0a: ff:c8:5b:61:cf:62:0f:08:fc:18:13:d8:dd:43:88:08:9f:08: c0:8b:05:63:e9:9e:8a:f5:cc:d9:90:3f:fe:75:5c:67:15:29: b6:65:19:df:32:35:3b:c3:0c:69:ef:32:cd:a7:13:6c:ec:01: 87:2a:fa:64:4a:00:4d:16:24:63:4b:71:a6:9d:14:48:4c:a5: a6:39:b3:96:c1:9e:be:75:50:00:08:10:74:27:10:60:70:f0: ed:53:1a:e5:2d:bd:fe:99:06:c5:0e:a1:ab:5d:f3:97:e2:b9: fa:2e:0d:36:a1:88:53:ee:14:c7:23:93:98:19:94:18:f2:09: cc:24:bd:e0:ed:01:81:1f:15:51:c4:ac:e1:33:ce:6e:0c:d8: 99:8c:54:14:77:73:e8:7a:93:a2:02:3f:5e:a5:4d:43:76:de: 7f:7c:46:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3B9GIfOnK2soBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk M2ZmMjJkZjktOWFlZS00ZDVhLTg1NzQtMDgzOTVlZDY3YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15IC2seiD4xtW13oe30w7MLQJdSncyGb6k9m 0jCaA/lICh79wjay65wn8cd0vNlJt4LzX3pZIbPGEpu6UzzOWrEanAkNUzy4LfVd ViQXf6mmnmNgfBTEp1rmVP+wyewIRih4Tg1eDF6uT5iwYachlV/M7j/xP3wBu48X txfzh5wWswBXUu73EqXPyoPAZChtTSrBCSvu/noYIi4ChJGsto15GkqsF4AHU9eV dOMBq/hEX2J20caJygb9BtHeIJjuCiXbwqlju1BiTatr+ioFH8lEXiPxgMMLbf6/ QJgV9FTU52A1iraNUpmrWwRpR7buLILcgZ5euaaoS4smho+wpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOEBT4f9g54ryS1TdILACasAj6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVhOWQ4YjctNDE5MS0z ZWUxLThlOTgtOWFmZjQ2Y2U1MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKhbe9ZzYZPc1VWQFHy3Mg+53MSuXtXV0imn6vA6+m9vZNO8OY+z9mo rkmgg2KMJALJBRXV8d2r02uY+SDebBu5k/dcs8ZDsTR8IkcLKhxMlq3uKBZmzdFC Cv/IW2HPYg8I/BgT2N1DiAifCMCLBWPpnor1zNmQP/51XGcVKbZlGd8yNTvDDGnv Ms2nE2zsAYcq+mRKAE0WJGNLcaadFEhMpaY5s5bBnr51UAAIEHQnEGBw8O1TGuUt vf6ZBsUOoatd85fiufouDTahiFPuFMcjk5gZlBjyCcwkveDtAYEfFVHErOEzzm4M 2JmMVBR3c+h6k6ICP16lTUN23n98Rgg= -----END CERTIFICATE-----Generated at Sat Sep 6 01:17:23 2025 by rpki-client