$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbdfc184-d255-38f3-8220-30bcea6b8a25.roa File: bbdfc184-d255-38f3-8220-30bcea6b8a25.roa (raw, json) Hash identifier: H0eFMvd6gTxm+N539FUyQVrjtp3O/1oWfqY2hf6V69g= Subject key identifier: C9:B4:D0:0F:A1:68:1E:DE:88:8D:B0:3A:C3:61:F5:93:90:CE:51:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E415ED70DAD3481D866EF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbdfc184-d255-38f3-8220-30bcea6b8a25.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.33.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:5e:d7:0d:ad:34:81:d8:66:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=38db9aed-c7cb-4977-b7c2-157bcfc496b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:47:9c:85:0a:70:82:69:1a:ad:6f:13:92:9e: bb:7e:9e:1b:d5:0e:00:e9:8f:8c:cb:ce:b8:05:c1: 0c:3b:5e:68:22:d7:98:c8:92:d0:cc:fa:69:64:8d: bf:1b:eb:55:da:11:4c:ac:ee:c1:2e:4b:d2:39:42: 86:80:73:fa:ac:32:84:f5:36:4d:8e:d4:b0:53:95: 4c:62:70:be:9a:93:e4:b6:93:56:35:62:61:cf:d6: 24:47:bc:25:4e:02:52:a0:f3:1f:97:3a:92:cd:27: b9:04:e4:ee:bd:af:2c:0b:95:73:63:43:07:2b:45: 00:be:19:91:b4:d2:82:d7:89:a0:2c:d1:06:a2:f0: c8:5d:0a:7c:fd:15:dc:56:5e:a2:3c:3f:3a:e4:52: ca:c6:0b:37:ac:01:b4:84:57:6a:ab:46:cd:49:0c: 11:70:3e:b7:06:6d:ae:4c:c2:b2:6c:6a:c9:c8:21: 37:01:ef:19:c4:7a:94:2b:7d:72:6b:ab:ed:db:59: a2:6d:8f:39:c3:f0:19:2f:1a:26:dc:ff:41:f8:07: d8:78:1b:3e:bb:9c:ae:b6:15:8f:fc:94:6c:d4:ab: c5:6d:33:66:2a:f9:3d:90:69:40:4b:86:ee:ea:92: 0d:11:b4:4d:74:44:ed:77:06:3d:e8:a8:bb:9f:fa: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B4:D0:0F:A1:68:1E:DE:88:8D:B0:3A:C3:61:F5:93:90:CE:51:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbdfc184-d255-38f3-8220-30bcea6b8a25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:39:df:4a:75:30:3f:eb:1a:87:18:4e:03:b5:f6:71:76:70: 26:64:8e:6d:f2:ab:1d:05:ae:de:39:e0:53:44:00:63:b9:f6: fe:0b:39:94:a5:1f:a0:74:ed:3d:c9:4c:70:43:65:0e:0c:72: b2:86:80:bb:40:0e:17:a9:74:2b:3c:95:53:b1:a7:2e:54:b2: 87:f9:d5:4f:ba:5d:7a:7c:ac:e1:27:4b:b7:3d:d8:31:f6:33: 63:4d:ae:d8:26:e6:0b:d9:4d:00:85:ed:ba:92:93:13:79:25: b8:f1:9f:a2:07:78:c5:9e:7a:da:09:37:8e:fe:fb:57:4a:b0: 2f:77:fd:9f:98:71:91:32:21:82:a1:b5:98:df:f0:6a:39:10: 34:79:1a:e8:2d:36:9f:2b:a1:45:82:46:55:b1:d4:ed:c8:80: 2f:39:0c:80:67:90:03:ad:a3:e9:ae:0d:3b:7d:32:77:b4:69: 7c:65:25:1b:ea:ea:2e:51:79:d6:cf:21:72:c9:ab:33:a0:85: b4:d0:11:38:8d:31:18:2e:81:ef:00:2a:ac:00:a5:7f:75:cc: c3:47:d7:9e:e4:d6:41:ae:11:34:26:d3:e6:64:e2:a6:8c:85: f1:51:a3:a3:a5:8d:ce:23:80:df:b5:3e:71:5f:30:89:71:59: 69:7b:66:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQV7XDa00gdhm74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzhkYjlhZWQtYzdjYi00OTc3LWI3YzItMTU3YmNmYzQ5NmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UechQpwgmkarW8Tkp67fp4b1Q4A6Y+My864 BcEMO15oIteYyJLQzPppZI2/G+tV2hFMrO7BLkvSOUKGgHP6rDKE9TZNjtSwU5VM YnC+mpPktpNWNWJhz9YkR7wlTgJSoPMflzqSzSe5BOTuva8sC5VzY0MHK0UAvhmR tNKC14mgLNEGovDIXQp8/RXcVl6iPD865FLKxgs3rAG0hFdqq0bNSQwRcD63Bm2u TMKybGrJyCE3Ae8ZxHqUK31ya6vt21mibY85w/AZLxom3P9B+AfYeBs+u5yuthWP /JRs1KvFbTNmKvk9kGlAS4bu6pINEbRNdETtdwY96Ki7n/orDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm00A+haB7eiI2wOsNh9ZOQzlEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmJkZmMxODQtZDI1NS0z OGYzLTgyMjAtMzBiY2VhNmI4YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo530p1MD/rGocYTgO19nF2cCZkjm3yqx0Frt454FNEAGO59v4LOZSl H6B07T3JTHBDZQ4McrKGgLtADhepdCs8lVOxpy5Usof51U+6XXp8rOEnS7c92DH2 M2NNrtgm5gvZTQCF7bqSkxN5Jbjxn6IHeMWeetoJN47++1dKsC93/Z+YcZEyIYKh tZjf8Go5EDR5GugtNp8roUWCRlWx1O3IgC85DIBnkAOto+muDTt9Mne0aXxlJRvq 6i5RedbPIXLJqzOghbTQETiNMRguge8AKqwApX91zMNH157k1kGuETQm0+Zk4qaM hfFRo6Oljc4jgN+1PnFfMIlxWWl7Zok= -----END CERTIFICATE-----Generated at Sat Sep 6 01:15:17 2025 by rpki-client