$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa File: 0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa (raw, json) Hash identifier: hD2kSQ7IRDmBf+1F5plDTyEZdkM9kSDfAA6eRkA6SQ4= Subject key identifier: FF:02:30:74:5F:26:2F:8A:8E:33:E2:99:5D:64:1D:D9:DD:C6:4C:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D177F7704B0617C563EF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 32787 IP address blocks: 23.33.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:17:7f:77:04:b0:61:7c:56:3e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=f6025f6d-c47d-4d15-afa0-2a2b85b7330c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:9f:21:cc:eb:71:de:b2:fd:73:70:d9:52: a3:b5:0d:f8:c9:2d:7f:66:96:90:7b:f3:40:8c:ae: 7a:41:47:14:07:80:f7:86:4d:95:85:e9:75:c7:e2: ef:e9:c1:f7:59:f0:6c:0f:9d:ce:a8:c8:d0:7c:a6: 47:ee:a5:c8:dd:df:1f:eb:34:9b:ad:33:6f:e9:0e: bf:a3:4b:1c:0f:60:1c:47:5a:8e:cc:df:7e:e4:e5: 1b:f6:b3:a1:9f:06:1b:f8:db:e4:6d:0a:18:a8:a7: 72:ac:1e:9b:15:5a:e3:6c:ba:66:17:b0:f5:1f:dc: c6:e2:54:64:0a:cf:43:64:46:08:55:87:60:aa:82: 7e:7a:1a:70:06:68:73:45:d4:9c:a6:18:93:0a:98: 7c:aa:5c:04:9a:e2:d9:24:10:0d:dc:6c:45:4c:78: 6b:f1:ec:b7:9a:be:e0:ef:13:4e:be:ad:02:99:fd: ef:23:64:86:1a:25:34:76:d6:c4:00:e8:6c:7e:6f: eb:de:0f:be:b5:95:b0:73:e5:df:8b:ac:da:a8:89: cd:94:e3:f6:e8:e1:9b:aa:d7:09:c5:99:00:84:1f: c2:a2:25:3f:55:67:93:a7:d4:9e:74:35:5b:fa:f2: 94:2e:e2:b4:84:ab:2c:81:77:83:81:3d:e4:1a:4c: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:02:30:74:5F:26:2F:8A:8E:33:E2:99:5D:64:1D:D9:DD:C6:4C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:62:19:c2:82:2e:92:a5:d4:0a:8c:c1:05:b9:83:d6:77:c7: 70:07:1f:57:14:78:93:02:c8:2a:3c:15:e5:62:3c:18:be:f4: a2:b1:a4:80:ec:e9:eb:a0:6a:3f:1f:c0:60:e4:56:39:8e:35: c8:a2:d2:66:b2:e6:cd:c6:49:55:21:a2:f3:8b:f6:12:d2:ab: b2:08:0a:ed:4e:6c:98:e4:15:0f:5c:c0:73:6d:02:6d:75:d6: a1:aa:0e:1e:d6:96:ad:91:cd:55:f7:5d:e0:be:7e:41:dc:d1: 7b:bb:c3:a9:b8:fa:fb:ba:b6:cf:60:2f:03:c0:f9:b6:1b:5a: c0:95:1e:f8:63:bd:0e:dc:72:97:ef:0d:94:68:24:f9:0e:c0: b3:7a:bc:06:db:61:f7:57:01:ec:43:e4:17:c0:72:1c:75:9c: ac:91:da:68:fb:aa:06:ad:80:41:ae:39:ed:53:f2:70:88:0a: f5:bb:7c:43:42:c5:2f:ba:21:73:86:1e:7e:5e:b9:61:bc:49: 79:4c:c0:32:77:5a:78:ad:45:88:28:7b:24:15:d1:3b:5b:60: 7b:be:79:1f:c7:7b:4e:da:7f:fd:8e:56:50:d0:70:2c:ea:45: cc:ff:d6:9e:de:a4:36:ae:55:83:ff:c2:d0:de:6b:f3:ff:91: ba:e0:20:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRd/dwSwYXxWPvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZjYwMjVmNmQtYzQ3ZC00ZDE1LWFmYTAtMmEyYjg1YjczMzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoSfIczrcd6y/XNw2VKjtQ34yS1/ZpaQe/NA jK56QUcUB4D3hk2Vhel1x+Lv6cH3WfBsD53OqMjQfKZH7qXI3d8f6zSbrTNv6Q6/ o0scD2AcR1qOzN9+5OUb9rOhnwYb+NvkbQoYqKdyrB6bFVrjbLpmF7D1H9zG4lRk Cs9DZEYIVYdgqoJ+ehpwBmhzRdScphiTCph8qlwEmuLZJBAN3GxFTHhr8ey3mr7g 7xNOvq0Cmf3vI2SGGiU0dtbEAOhsfm/r3g++tZWwc+Xfi6zaqInNlOP26OGbqtcJ xZkAhB/CoiU/VWeTp9SedDVb+vKULuK0hKssgXeDgT3kGkwp8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8CMHRfJi+KjjPimV1kHdndxkwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE2NDAwMWUtZmZjOC0z NzM2LTg1ZWEtZmVkNGUzYTczMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJiGcKCLpKl1AqMwQW5g9Z3x3AHH1cUeJMCyCo8FeViPBi+9KKxpIDs 6eugaj8fwGDkVjmONcii0may5s3GSVUhovOL9hLSq7IICu1ObJjkFQ9cwHNtAm11 1qGqDh7Wlq2RzVX3XeC+fkHc0Xu7w6m4+vu6ts9gLwPA+bYbWsCVHvhjvQ7ccpfv DZRoJPkOwLN6vAbbYfdXAexD5BfAchx1nKyR2mj7qgatgEGuOe1T8nCICvW7fENC xS+6IXOGHn5euWG8SXlMwDJ3WnitRYgoeyQV0TtbYHu+eR/He07af/2OVlDQcCzq Rcz/1p7epDauVYP/wtDea/P/kbrgILU= -----END CERTIFICATE-----Generated at Tue Nov 4 17:17:14 2025 by rpki-client