$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d97ee865-1f02-3f65-9877-a6064187b157.roa File: d97ee865-1f02-3f65-9877-a6064187b157.roa (raw, json) Hash identifier: kBFFB60AIqppenIsNQSma6VFulG4yDbhcJRYXg4wNKQ= Subject key identifier: D0:A6:1F:CF:70:E6:D3:63:07:E9:BE:95:A1:6D:36:FB:30:9E:2A:14 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584AC01649F642BF9DF328372600 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d97ee865-1f02-3f65-9877-a6064187b157.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 33039 IP address blocks: 23.173.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:49:f6:42:bf:9d:f3:28:37:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=bf1f7b1f-961b-4671-99cb-ec87d09355e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:27:59:6b:76:4c:d9:2b:d1:3d:11:2d:01: e3:99:6d:83:65:c8:fc:91:c2:c6:5a:89:cc:42:8b: 61:d0:97:9d:69:ba:83:8c:42:45:73:24:44:21:63: 41:c7:36:17:2f:54:4d:d3:c2:07:8d:2d:9f:53:80: eb:e4:32:eb:9b:88:29:59:cc:ff:0a:80:94:4a:fe: af:3e:3c:6d:88:f5:2c:89:65:97:ba:87:80:d9:81: 73:4d:32:df:2a:1c:2f:c4:5c:d9:ca:8c:66:71:b3: 70:ab:48:dd:7b:13:32:7e:1d:c6:08:99:0f:31:b7: 54:11:31:33:fd:ac:47:ca:43:e1:ed:c9:5a:0c:18: da:53:b8:98:bb:d1:26:46:6a:2d:b2:c4:ce:e1:0c: fa:84:0f:90:4a:bb:35:0a:f0:0e:a5:40:f0:58:e5: d7:60:84:18:81:e4:88:5e:a8:e0:33:0a:f5:b2:ef: 88:28:bb:13:25:f0:2e:20:66:f4:20:18:45:2a:b5: 6f:85:94:81:54:46:bb:c6:55:ba:8a:65:79:b3:0e: e9:c8:2b:af:eb:33:2a:c0:91:1c:34:23:72:74:3e: 2f:38:c5:c8:b3:60:01:f2:b0:4a:0b:e1:8c:6b:87: db:8d:eb:88:20:17:94:43:ac:c2:64:31:2a:dd:eb: d2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A6:1F:CF:70:E6:D3:63:07:E9:BE:95:A1:6D:36:FB:30:9E:2A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/d97ee865-1f02-3f65-9877-a6064187b157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 23.173.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:73:24:a8:48:b4:2c:ba:2a:8e:6c:a2:69:28:d8:b4:8e:0f: 04:3a:ca:6b:51:c1:79:cb:39:71:c4:c3:6d:62:97:d9:9f:1f: ff:3b:23:67:d9:8a:e8:cd:7e:a8:85:68:e2:b3:c2:23:43:9a: 5c:48:1d:77:d6:20:89:14:07:cd:02:93:02:b7:56:46:00:e8: c0:66:64:e0:f9:dc:d1:cb:c4:86:c7:70:22:e7:e1:34:ae:40: 41:b6:fe:88:c4:2e:8a:bf:35:3b:40:79:53:9e:ef:e4:f7:63: 37:05:97:74:72:04:7c:cf:e9:8d:bd:b5:7b:04:55:84:5b:56: 81:96:70:92:69:4e:3c:b5:11:13:e5:4d:a7:a2:34:e1:c0:e1: fe:e8:50:85:19:11:ca:dc:4e:db:d0:67:cf:03:1f:10:2f:8b: f1:bb:4a:5e:ef:47:ba:e8:6a:7e:1d:f8:72:d5:ca:cc:5d:32: 04:89:d5:c0:e6:8d:20:d2:d6:55:26:63:22:df:83:f5:bb:7f: 4c:c3:4f:0b:7f:09:c8:64:73:6a:65:b1:5d:ef:56:a8:4f:4d: 52:13:82:31:02:cb:1e:8d:cf:74:1b:a0:ba:cf:73:ea:5e:cb: 6d:3d:3a:91:8c:dd:82:94:92:ca:b4:fe:36:0c:66:ac:88:1f: a0:fd:f1:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkn2Qr+d8yg3JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YmYxZjdiMWYtOTYxYi00NjcxLTk5Y2ItZWM4N2QwOTM1NWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U4nWWt2TNkr0T0RLQHjmW2DZcj8kcLGWonM Qoth0JedabqDjEJFcyREIWNBxzYXL1RN08IHjS2fU4Dr5DLrm4gpWcz/CoCUSv6v PjxtiPUsiWWXuoeA2YFzTTLfKhwvxFzZyoxmcbNwq0jdexMyfh3GCJkPMbdUETEz /axHykPh7claDBjaU7iYu9EmRmotssTO4Qz6hA+QSrs1CvAOpUDwWOXXYIQYgeSI XqjgMwr1su+IKLsTJfAuIGb0IBhFKrVvhZSBVEa7xlW6imV5sw7pyCuv6zMqwJEc NCNydD4vOMXIs2AB8rBKC+GMa4fbjeuIIBeUQ6zCZDEq3evShQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCmH89w5tNjB+m+laFtNvswnioUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvZDk3ZWU4NjUtMWYwMi0z ZjY1LTk4NzctYTYwNjQxODdiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBzJKhItCy6Ko5somko2LSODwQ6ymtRwXnLOXHEw21il9mfH/87I2fZ iujNfqiFaOKzwiNDmlxIHXfWIIkUB80CkwK3VkYA6MBmZOD53NHLxIbHcCLn4TSu QEG2/ojELoq/NTtAeVOe7+T3YzcFl3RyBHzP6Y29tXsEVYRbVoGWcJJpTjy1ERPl TaeiNOHA4f7oUIUZEcrcTtvQZ88DHxAvi/G7Sl7vR7roan4d+HLVysxdMgSJ1cDm jSDS1lUmYyLfg/W7f0zDTwt/Cchkc2plsV3vVqhPTVITgjECyx6Nz3QboLrPc+pe y209OpGM3YKUksq0/jYMZqyIH6D98a0= -----END CERTIFICATE-----Generated at Wed Aug 6 16:19:30 2025 by rpki-client