$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc89e720-5e94-3dc5-a7a5-27fd0b5a7373.roa File: bc89e720-5e94-3dc5-a7a5-27fd0b5a7373.roa (raw, json) Hash identifier: SjsSJeOyJBdJtchc1SemW+9k/Q1uyJIuZJ8U2cygZ9U= Subject key identifier: 42:04:17:35:8E:32:74:40:C4:99:89:89:0E:C4:ED:53:99:7D:3C:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F331D2AD8D06BF41DC776B980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc89e720-5e94-3dc5-a7a5-27fd0b5a7373.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.33.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2a:d8:d0:6b:f4:1d:c7:76:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=db62e8ea-0a21-44ee-8d75-9847798dd8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:67:f2:ae:3d:02:17:69:d1:75:e7:f4:65: 3c:53:8d:d9:4f:34:6d:75:c1:ce:2e:b6:dd:b6:ea: 89:48:cc:7b:b2:2b:5e:da:e0:14:7b:39:6d:b0:f7: c6:7b:c3:84:65:92:de:f2:a4:f1:0c:b4:70:73:37: 6d:65:97:b0:30:e0:ff:db:0d:ee:06:18:e7:84:1d: bc:81:cb:21:ab:78:27:12:3d:ac:1c:4d:bd:78:ce: d8:db:94:a7:ae:6b:29:2d:7a:6a:14:6c:87:ab:bd: 53:09:d9:b0:be:22:a5:1c:9f:34:3d:e3:6f:01:09: c4:65:02:55:72:56:23:86:58:8d:83:5e:03:ed:22: cc:4d:53:55:20:ce:2b:6e:dd:69:be:6a:31:ec:5d: 9c:2b:18:3d:26:79:ae:26:5c:44:fc:49:82:d4:d2: 63:b5:b5:03:65:49:e5:36:9c:85:6d:50:9a:e3:51: 80:38:f6:09:2e:1a:a5:9c:3c:89:7d:87:d3:76:61: d8:3b:f1:f1:8e:b0:cf:a7:dc:92:be:6e:ee:eb:0f: c4:3a:5d:59:14:9b:c2:b6:0d:39:b3:b0:2c:eb:b7: 83:7c:7e:76:a7:ea:ab:55:9b:40:4b:49:6c:0b:55: ba:9d:54:4a:f0:ee:46:dd:fb:5b:79:b3:1e:97:31: a7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:04:17:35:8E:32:74:40:C4:99:89:89:0E:C4:ED:53:99:7D:3C:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc89e720-5e94-3dc5-a7a5-27fd0b5a7373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a2:13:e6:c7:b7:68:57:0d:7b:3d:03:2f:a2:c3:20:27:d9: 86:87:53:ec:3d:c6:a3:d0:b0:d9:21:0b:32:a4:9e:f2:77:bc: 31:c8:ee:65:55:c9:ae:88:bc:ad:16:dd:e1:c0:a7:d1:58:98: 68:28:ac:17:f2:5d:37:26:c1:23:60:aa:10:97:d1:de:16:93: f3:ae:af:ad:52:68:e4:9e:61:e0:6f:12:3b:3f:da:d0:c9:ea: 4d:8c:79:62:6e:0f:33:68:43:69:83:8f:8c:86:83:40:10:e2: 40:84:98:f3:ee:3f:6d:46:fa:00:d7:0c:75:7e:9f:e3:68:58: aa:fb:51:65:16:46:3f:9c:6c:ec:da:67:f3:12:4c:1b:46:0a: c8:eb:cf:93:19:ea:1d:c5:63:d6:a3:b3:6f:56:4f:89:e9:80: d7:e7:77:f6:ca:7f:56:cf:8d:40:d0:79:dc:1a:7a:5e:7d:a4: 2d:8a:a0:9d:e9:12:ae:eb:29:19:7e:9a:07:30:19:18:98:8a: 80:7a:59:cf:85:d6:cd:85:3a:b0:5a:62:fd:94:9f:25:e4:2d: 04:95:44:fb:2b:c2:46:ec:aa:1c:f8:a3:58:cd:f8:65:e2:d6: a0:b7:43:e2:74:fb:74:8c:a5:b1:8e:4a:ec:8b:c4:98:5a:b8: 2c:e6:2b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSrY0Gv0Hcd2uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZGI2MmU4ZWEtMGEyMS00NGVlLThkNzUtOTg0Nzc5OGRkOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojNn8q49Ahdp0XXn9GU8U43ZTzRtdcHOLrbd tuqJSMx7site2uAUezltsPfGe8OEZZLe8qTxDLRwczdtZZewMOD/2w3uBhjnhB28 gcshq3gnEj2sHE29eM7Y25SnrmspLXpqFGyHq71TCdmwviKlHJ80PeNvAQnEZQJV clYjhliNg14D7SLMTVNVIM4rbt1pvmox7F2cKxg9JnmuJlxE/EmC1NJjtbUDZUnl NpyFbVCa41GAOPYJLhqlnDyJfYfTdmHYO/HxjrDPp9ySvm7u6w/EOl1ZFJvCtg05 s7As67eDfH52p+qrVZtAS0lsC1W6nVRK8O5G3ftbebMelzGnNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIEFzWOMnRAxJmJiQ7E7VOZfTy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmM4OWU3MjAtNWU5NC0z ZGM1LWE3YTUtMjdmZDBiNWE3MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOiE+bHt2hXDXs9Ay+iwyAn2YaHU+w9xqPQsNkhCzKknvJ3vDHI7mVV ya6IvK0W3eHAp9FYmGgorBfyXTcmwSNgqhCX0d4Wk/Our61SaOSeYeBvEjs/2tDJ 6k2MeWJuDzNoQ2mDj4yGg0AQ4kCEmPPuP21G+gDXDHV+n+NoWKr7UWUWRj+cbOza Z/MSTBtGCsjrz5MZ6h3FY9ajs29WT4npgNfnd/bKf1bPjUDQedwael59pC2KoJ3p Eq7rKRl+mgcwGRiYioB6Wc+F1s2FOrBaYv2UnyXkLQSVRPsrwkbsqhz4o1jN+GXi 1qC3Q+J0+3SMpbGOSuyLxJhauCzmK2w= -----END CERTIFICATE-----Generated at Tue Sep 22 00:05:10 2026 by rpki-client