$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa File: 4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa (raw, json) Hash identifier: 8zvbmjwhbJGFxpNfuSsV97nR60EdodRye6j+v5jRHns= Subject key identifier: FB:BA:AB:C5:83:77:6A:01:8E:A4:3D:1D:96:0E:AE:6C:04:06:E8:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC2469D64DB2BEA1091A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 35994 IP address blocks: 23.32.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:24:69:d6:4d:b2:be:a1:09:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=32c96866-d7a1-43e8-af35-9812d0cac970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:32:85:a4:06:28:9d:db:76:39:ab:cb:eb:e1: 6f:b7:b6:9c:d1:4b:fe:36:35:c7:f7:1f:14:1f:ac: 41:21:78:fc:b5:dd:7e:78:a9:e9:d3:12:c0:75:b6: 07:ec:92:b3:34:d6:8c:9a:90:dd:15:0c:4a:49:0c: 31:25:ea:eb:69:5f:13:73:2c:9a:dc:ed:d5:c0:86: 7e:cd:33:ab:38:c6:2e:06:d5:9b:98:4d:01:29:af: fe:14:59:67:4d:95:68:a5:a1:e2:4e:c1:59:2d:68: 57:a7:d8:cf:a6:6a:66:fb:f9:6e:c2:ad:db:c9:33: 34:8a:e9:e8:c0:b5:52:1a:8f:a5:51:9f:51:24:66: 4d:6c:ad:77:bb:f7:0b:2c:d2:36:9e:c7:85:47:ae: cd:98:aa:d7:0d:64:b9:4c:32:6b:92:fb:b1:4a:23: ad:ec:14:e8:a1:b7:a3:1a:f7:fd:5c:06:9b:05:89: 31:5a:a9:08:ea:15:7d:2f:09:24:45:2c:52:ee:a7: 8a:9b:8a:eb:1f:cf:7d:bf:67:5f:f2:a0:49:93:69: ad:1c:c3:8d:07:c8:cd:cb:24:cf:fa:f0:17:71:b3: ba:21:22:83:24:41:fb:3d:bc:11:a7:46:a9:c7:cc: 1b:27:66:71:e5:47:c8:a6:27:08:ee:3e:41:5b:da: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BA:AB:C5:83:77:6A:01:8E:A4:3D:1D:96:0E:AE:6C:04:06:E8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5d:49:54:c8:1f:8c:bf:83:08:c2:79:bb:77:d7:56:56:e5: 03:8b:b9:1f:4b:6f:cb:19:d6:88:1b:a4:4c:8c:f7:be:54:40: 3c:d6:a3:d8:f6:51:73:aa:ab:57:42:33:64:8e:4b:d3:00:06: c7:2a:59:f1:67:38:74:8f:fb:95:50:4d:30:90:7b:67:e6:ef: e8:9c:4a:22:84:08:c2:cb:fe:69:cd:a6:f5:5a:57:28:10:91: 5d:64:ee:2d:44:13:22:eb:a5:04:ca:8e:6f:65:b8:0c:73:22: 57:99:eb:0a:9d:5e:92:1e:d3:5b:03:b5:cc:ae:7d:b0:5b:60: b0:10:30:fa:97:d6:14:94:5c:cb:85:d5:b8:d7:e0:c7:e2:c8: 5f:73:08:12:69:db:4a:79:32:0d:fc:9a:cd:01:5d:7c:12:1c: c7:15:e4:ec:6f:fc:04:c3:a1:08:64:c2:35:c1:b0:e5:79:d4: f5:ad:6a:02:db:e9:02:6f:3f:36:67:33:e0:22:9b:13:c6:6a: c6:38:6e:56:5b:9d:9d:cb:b8:f8:98:3e:d4:bc:2c:23:90:05: 6d:c7:73:58:44:41:a1:81:de:41:ef:cb:3a:c9:43:0a:21:3e: 4d:6e:1a:66:a7:9c:0f:58:73:10:67:9d:ca:b3:58:44:44:7d: 42:26:e3:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CRp1k2yvqEJGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MzJjOTY4NjYtZDdhMS00M2U4LWFmMzUtOTgxMmQwY2FjOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDKFpAYondt2OavL6+Fvt7ac0Uv+NjXH9x8U H6xBIXj8td1+eKnp0xLAdbYH7JKzNNaMmpDdFQxKSQwxJerraV8Tcyya3O3VwIZ+ zTOrOMYuBtWbmE0BKa/+FFlnTZVopaHiTsFZLWhXp9jPpmpm+/luwq3byTM0iuno wLVSGo+lUZ9RJGZNbK13u/cLLNI2nseFR67NmKrXDWS5TDJrkvuxSiOt7BToobej Gvf9XAabBYkxWqkI6hV9LwkkRSxS7qeKm4rrH899v2df8qBJk2mtHMONB8jNyyTP +vAXcbO6ISKDJEH7PbwRp0apx8wbJ2Zx5UfIpicI7j5BW9pEFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPu6q8WDd2oBjqQ9HZYOrmwEBuh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGIxYWE0NDgtYTA2OS0z ZGI0LTlkMGYtM2RlOWM1Yzc2Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBdSVTIH4y/gwjCebt311ZW5QOLuR9Lb8sZ1ogbpEyM975UQDzWo9j2 UXOqq1dCM2SOS9MABscqWfFnOHSP+5VQTTCQe2fm7+icSiKECMLL/mnNpvVaVygQ kV1k7i1EEyLrpQTKjm9luAxzIleZ6wqdXpIe01sDtcyufbBbYLAQMPqX1hSUXMuF 1bjX4MfiyF9zCBJp20p5Mg38ms0BXXwSHMcV5Oxv/ATDoQhkwjXBsOV51PWtagLb 6QJvPzZnM+AimxPGasY4blZbnZ3LuPiYPtS8LCOQBW3Hc1hEQaGB3kHvyzrJQwoh Pk1uGmannA9YcxBnncqzWEREfUIm4zY= -----END CERTIFICATE-----Generated at Sat Sep 6 05:16:59 2025 by rpki-client