$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dbc2e9-5985-3592-be06-65a0dcda29b0.roa File: 74dbc2e9-5985-3592-be06-65a0dcda29b0.roa (raw, json) Hash identifier: RCYdasIeRqEuTQ8tYCrua1XjIFMsORgecpVZoj86joo= Subject key identifier: A3:75:9E:F6:A7:FB:68:29:B2:C9:D9:47:D5:29:1D:71:02:E1:61:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E41570624DB9FE7E856A780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dbc2e9-5985-3592-be06-65a0dcda29b0.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.33.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:57:06:24:db:9f:e7:e8:56:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=56587740-7b44-4fda-a16e-29b5b9c8f099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ca:75:da:d4:bc:e5:25:bf:e6:8f:3c:b3:3c: 61:90:1d:77:8c:73:5c:43:19:41:d1:db:16:7b:67: e7:87:df:66:9c:7d:16:2f:0a:0b:96:56:e9:a0:44: e2:23:ac:cd:d6:2e:4f:1a:15:c8:3a:1e:9d:28:25: 9a:ed:ab:ba:75:d2:0b:d4:73:f4:f1:79:6d:3f:5e: 1f:9b:fe:56:ec:cc:de:3a:e7:d8:66:d0:6b:8b:57: b5:94:ea:aa:87:b6:62:c8:7d:21:85:91:ca:84:4b: 43:f9:c8:4c:8f:fc:d3:03:4e:22:43:73:1c:07:ba: 28:b3:9c:aa:80:a7:b0:6f:2a:9e:52:10:d3:56:f9: 37:c8:22:d6:34:91:46:1e:df:91:01:8b:5d:3d:b0: 91:47:31:1b:13:af:fd:a4:0f:ae:9f:66:f6:4e:39: 15:87:ab:42:9b:54:19:ed:d6:99:a2:26:ee:37:80: d8:51:57:28:e0:91:42:6c:cf:42:3c:80:b3:38:6b: 67:de:3c:c7:ba:5e:99:f1:fd:d5:b1:6e:b5:18:17: 61:59:05:9d:ba:a9:67:89:13:48:16:03:f7:14:7f: 7c:6e:17:75:1d:91:18:4c:08:17:7e:97:c9:e6:34: 0e:53:56:20:8f:03:23:a5:be:23:7c:cb:78:6a:92: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:75:9E:F6:A7:FB:68:29:B2:C9:D9:47:D5:29:1D:71:02:E1:61:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dbc2e9-5985-3592-be06-65a0dcda29b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:70:7e:ae:30:da:29:09:6f:5d:ae:9f:32:3b:8b:ee:00:1f: 18:96:07:e7:7b:e8:24:1b:35:15:02:2c:70:b7:ba:c0:ba:fc: c9:fe:57:37:72:a7:77:39:af:b4:24:56:6a:66:0f:08:5a:ad: 8b:5e:80:9b:b4:3c:cb:89:35:7f:1f:ee:d4:cc:2f:af:c8:6c: d6:80:e2:b6:a3:fc:79:61:80:14:4e:7d:34:fb:7c:f3:54:5d: 81:14:40:0c:cb:bd:51:df:21:3b:56:bd:a5:b6:e8:1d:05:96: ce:11:69:a8:d0:a0:e0:32:c7:bb:8d:a6:e4:51:c8:8b:5a:31: 88:19:0a:93:3f:79:57:ab:ff:c2:22:a3:ec:3d:29:ec:c3:81: d4:1d:49:df:c5:d0:78:57:c7:18:f1:6b:08:57:c2:c2:c8:e2: 87:68:9b:b8:85:37:ce:ab:be:f8:7d:2d:8a:6d:2a:fd:8d:1f: 4c:0d:e7:f0:7a:dd:68:dd:96:57:c8:a2:01:86:76:be:f4:e1: da:2a:58:be:46:b4:81:43:1b:db:5b:5b:62:96:3f:66:f7:71: 79:5b:6b:fc:38:ca:c5:4f:e8:bc:eb:88:93:78:c2:7a:ef:c3: 7d:ef:90:e9:3c:e0:ed:d5:dc:c4:06:00:11:b8:f5:54:a2:84: fc:35:b6:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVcGJNuf5+hWp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTY1ODc3NDAtN2I0NC00ZmRhLWExNmUtMjliNWI5YzhmMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcp12tS85SW/5o88szxhkB13jHNcQxlB0dsW e2fnh99mnH0WLwoLllbpoETiI6zN1i5PGhXIOh6dKCWa7au6ddIL1HP08XltP14f m/5W7MzeOufYZtBri1e1lOqqh7ZiyH0hhZHKhEtD+chMj/zTA04iQ3McB7oos5yq gKewbyqeUhDTVvk3yCLWNJFGHt+RAYtdPbCRRzEbE6/9pA+un2b2TjkVh6tCm1QZ 7daZoibuN4DYUVco4JFCbM9CPICzOGtn3jzHul6Z8f3VsW61GBdhWQWduqlniRNI FgP3FH98bhd1HZEYTAgXfpfJ5jQOU1YgjwMjpb4jfMt4apK3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN1nvan+2gpssnZR9UpHXEC4WHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRkYmMyZTktNTk4NS0z NTkyLWJlMDYtNjVhMGRjZGEyOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhwfq4w2ikJb12unzI7i+4AHxiWB+d76CQbNRUCLHC3usC6/Mn+Vzdy p3c5r7QkVmpmDwharYtegJu0PMuJNX8f7tTML6/IbNaA4raj/HlhgBROfTT7fPNU XYEUQAzLvVHfITtWvaW26B0Fls4RaajQoOAyx7uNpuRRyItaMYgZCpM/eVer/8Ii o+w9KezDgdQdSd/F0HhXxxjxawhXwsLI4odom7iFN86rvvh9LYptKv2NH0wN5/B6 3WjdllfIogGGdr704doqWL5GtIFDG9tbW2KWP2b3cXlba/w4ysVP6LzriJN4wnrv w33vkOk84O3V3MQGABG49VSihPw1toc= -----END CERTIFICATE-----Generated at Sat Sep 6 07:30:02 2025 by rpki-client