$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5bc1cd0-87f3-3f4a-ab6f-5c90117f3217.roa File: a5bc1cd0-87f3-3f4a-ab6f-5c90117f3217.roa (raw, json) Hash identifier: iBBa9j6qVUh53l1mCs1BSKPTxiCr2XtbryJDu5vFZhg= Subject key identifier: 4D:5F:12:82:CD:F6:F4:98:AE:D1:D9:D3:B1:03:B8:43:6E:AC:EC:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E415F9810F34219CD751600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5bc1cd0-87f3-3f4a-ab6f-5c90117f3217.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.33.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:5f:98:10:f3:42:19:cd:75:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=5a96140e-8a9e-42df-a6be-4e8499ace0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:c1:e4:a9:5f:64:40:1c:22:c9:77:34:55: 7d:d7:d3:af:ef:04:f7:37:c7:ff:60:1c:ae:a1:c4: d0:d3:a3:0b:85:b5:c5:5d:35:2e:59:8f:52:4e:6b: 4a:39:e7:57:e8:bd:92:87:00:e0:09:2c:c2:73:12: 08:f3:35:23:d3:26:64:8b:92:8b:9c:b8:af:2d:31: 95:d2:23:c6:6b:2b:80:a9:c5:63:2b:95:ff:90:b6: c0:44:6b:6e:dc:62:cb:ab:e3:15:ca:27:8f:08:e0: 99:f9:03:4d:ff:85:48:1b:3a:63:f4:ca:08:90:22: ba:1d:bf:8a:c9:f0:79:62:ca:f7:01:11:cc:b5:d0: e1:69:a3:9c:cd:65:b4:bd:c4:15:06:77:03:39:95: 97:88:18:c4:96:d8:7d:d7:39:02:e8:22:64:08:c4: a6:06:08:0e:c2:6b:f1:84:a1:83:04:37:4a:0a:14: 7c:3b:88:b0:a4:e4:76:a5:f2:d9:67:c5:3d:ac:c6: 9a:96:f8:12:67:9c:19:23:9f:00:2a:d7:e5:d7:42: cd:d3:94:3b:24:4c:a0:b7:a8:20:aa:04:63:99:79: 00:ac:40:e0:b4:bd:a1:b1:08:dc:ef:8a:4d:9b:7d: b6:e4:40:c3:c8:15:66:8a:0d:2a:4d:6e:65:fd:67: b3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5F:12:82:CD:F6:F4:98:AE:D1:D9:D3:B1:03:B8:43:6E:AC:EC:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5bc1cd0-87f3-3f4a-ab6f-5c90117f3217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e4:59:5f:62:89:ea:4e:16:72:c8:ab:19:27:aa:02:7a:7c: dd:23:81:6a:5a:de:26:d6:dd:46:68:13:ba:a1:f6:6b:5a:bd: 72:f1:fa:d8:69:08:da:fc:62:ce:cd:ca:93:80:51:b4:28:69: 00:6f:22:26:48:6f:d0:80:98:0c:80:e3:c7:f3:2b:62:4a:e7: 7a:e6:89:59:60:d3:ee:73:88:74:47:2a:4d:a7:75:db:87:ca: 2e:f1:56:f9:3b:fc:0b:68:43:ad:3e:b1:b4:49:a9:1d:af:51: 9a:9b:53:aa:eb:fa:30:db:d3:65:44:59:c8:e4:5c:75:5b:a0: 9a:60:5f:a6:9d:0a:92:41:43:1a:f4:1e:b7:db:8f:15:06:f2: 37:ac:1e:b8:37:26:a4:98:83:a0:05:22:38:d3:28:6e:fa:a3: 07:8a:60:70:24:e0:9b:c1:cc:58:64:22:b9:94:c4:95:12:89: c0:8e:8d:17:50:8f:22:e3:0a:0b:82:98:40:69:10:1a:52:b1: 33:21:7e:27:8d:be:fd:f9:ee:c8:d1:b3:33:de:0e:ab:01:8c: 34:c3:d8:53:c6:30:82:69:da:07:97:9f:04:ce:a3:7e:05:cc: e7:9e:0c:7e:f3:df:ab:f5:4a:bd:e7:cd:48:75:15:7e:05:81: 39:68:d8:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQV+YEPNCGc11FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWE5NjE0MGUtOGE5ZS00MmRmLWE2YmUtNGU4NDk5YWNlMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcXB5KlfZEAcIsl3NFV919Ov7wT3N8f/YByu ocTQ06MLhbXFXTUuWY9STmtKOedX6L2ShwDgCSzCcxII8zUj0yZki5KLnLivLTGV 0iPGayuAqcVjK5X/kLbARGtu3GLLq+MVyiePCOCZ+QNN/4VIGzpj9MoIkCK6Hb+K yfB5Ysr3ARHMtdDhaaOczWW0vcQVBncDOZWXiBjElth91zkC6CJkCMSmBggOwmvx hKGDBDdKChR8O4iwpOR2pfLZZ8U9rMaalvgSZ5wZI58AKtfl10LN05Q7JEygt6gg qgRjmXkArEDgtL2hsQjc74pNm3225EDDyBVmig0qTW5l/WezhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1fEoLN9vSYrtHZ07EDuENurOxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTViYzFjZDAtODdmMy0z ZjRhLWFiNmYtNWM5MDExN2YzMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjkWV9iiepOFnLIqxknqgJ6fN0jgWpa3ibW3UZoE7qh9mtavXLx+thp CNr8Ys7NypOAUbQoaQBvIiZIb9CAmAyA48fzK2JK53rmiVlg0+5ziHRHKk2ndduH yi7xVvk7/AtoQ60+sbRJqR2vUZqbU6rr+jDb02VEWcjkXHVboJpgX6adCpJBQxr0 HrfbjxUG8jesHrg3JqSYg6AFIjjTKG76oweKYHAk4JvBzFhkIrmUxJUSicCOjRdQ jyLjCguCmEBpEBpSsTMhfieNvv357sjRszPeDqsBjDTD2FPGMIJp2geXnwTOo34F zOeeDH7z36v1Sr3nzUh1FX4FgTlo2Hk= -----END CERTIFICATE-----Generated at Sat Sep 6 05:22:48 2025 by rpki-client