$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa File: bd33f4d9-4929-38ef-8538-0f044f0be78d.roa (raw, json) Hash identifier: KK5U4hXfKlJZPIEAyhz2ieZJZG4t3laL27hBnWrAsKs= Subject key identifier: 99:74:7F:E2:A4:E3:5F:8F:2D:7B:84:75:BD:A8:37:69:9B:9C:77:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C371793BDEC0D2F30AA5590 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.44.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:17:93:bd:ec:0d:2f:30:aa:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c47dbced-7951-4cf6-bef9-84d69591dbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:84:10:b4:e8:e3:1e:55:2f:20:cb:94:de:ca: d3:1d:44:27:ea:30:cf:68:3c:0b:4a:da:09:86:d3: 6c:17:78:dd:0e:57:b6:c1:08:02:70:17:50:c5:f6: 1e:9c:ef:90:0b:2d:3a:03:90:b9:46:4a:b2:42:81: ee:49:cb:53:ea:cf:5d:93:77:a1:a0:dd:e2:4e:c9: b2:1c:b1:ed:41:b8:3e:5d:de:31:0a:3d:70:8e:34: 5c:f6:ad:83:28:ae:7a:dc:47:91:6a:40:e6:08:7b: 4f:09:5a:74:b5:6c:8f:e5:8b:ec:84:2c:56:e0:bc: 95:ac:9b:30:8f:ab:00:31:e8:92:0c:95:b2:f0:93: f1:17:10:fa:4e:8a:51:22:a3:09:48:92:76:55:2e: 0b:fe:fd:93:22:c4:1b:7c:40:d7:98:77:49:51:39: 22:72:cf:8e:ca:78:8a:44:1b:af:bd:22:60:bc:17: 9f:5e:18:7d:8c:be:40:cb:a2:d9:ad:f7:29:ee:07: c2:b2:df:4a:45:63:7f:86:68:be:03:3d:5e:6d:d0: 91:70:51:1d:0a:e0:6d:54:4e:5d:d9:d7:8d:8f:67: ad:5a:f0:41:08:5f:63:5b:c7:e3:ef:f6:16:47:23: 9d:2c:fd:c9:df:fa:34:95:c3:ce:d4:e0:9d:da:b4: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:74:7F:E2:A4:E3:5F:8F:2D:7B:84:75:BD:A8:37:69:9B:9C:77:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:33:a9:2d:62:e2:a9:04:96:38:a8:f4:60:ac:1e:45:fa:df: ba:06:10:c4:92:79:a0:f0:41:52:93:e6:22:2e:40:a9:77:dc: 17:9b:33:94:a0:be:d0:29:10:71:72:fe:9f:6a:59:2f:e2:ce: 30:87:30:f5:e0:7b:0f:0a:15:48:04:21:7f:9b:31:23:5e:8f: ac:84:b4:cc:97:e4:02:5e:21:2f:55:d4:3a:19:60:59:a4:d0: 21:02:20:76:bc:79:85:82:12:ba:51:db:c0:80:b9:b9:a2:57: ba:2f:7c:a5:db:e9:b7:ac:9f:f8:85:33:fa:ca:9a:83:14:54: 59:cd:3e:b9:84:22:12:ab:93:05:c1:9e:d8:36:4b:5f:bf:51: 03:99:74:8d:fe:70:9d:81:13:74:bd:73:35:a3:af:2c:b0:3f: a5:93:f6:76:53:5a:19:30:5e:74:58:e7:d5:d2:ef:b3:94:17: db:63:37:e7:7a:a8:77:84:78:39:b7:80:29:7f:d2:51:44:04: 81:12:23:f9:63:7f:7b:d5:5d:55:80:08:2d:b7:db:9c:17:6a: 1f:b5:0f:47:eb:34:6a:50:f4:d2:74:10:c4:ab:68:ad:c6:eb: 44:f7:a6:84:61:c6:7b:42:6f:bf:7d:36:8b:d0:54:87:9d:2b: 33:8a:ba:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxeTvewNLzCqVZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzQ3ZGJjZWQtNzk1MS00Y2Y2LWJlZjktODRkNjk1OTFkYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34QQtOjjHlUvIMuU3srTHUQn6jDPaDwLStoJ htNsF3jdDle2wQgCcBdQxfYenO+QCy06A5C5RkqyQoHuSctT6s9dk3ehoN3iTsmy HLHtQbg+Xd4xCj1wjjRc9q2DKK563EeRakDmCHtPCVp0tWyP5YvshCxW4LyVrJsw j6sAMeiSDJWy8JPxFxD6TopRIqMJSJJ2VS4L/v2TIsQbfEDXmHdJUTkics+OyniK RBuvvSJgvBefXhh9jL5Ay6LZrfcp7gfCst9KRWN/hmi+Az1ebdCRcFEdCuBtVE5d 2deNj2etWvBBCF9jW8fj7/YWRyOdLP3J3/o0lcPO1OCd2rQg8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl0f+Kk41+PLXuEdb2oN2mbnHfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQzM2Y0ZDktNDkyOS0z OGVmLTg1MzgtMGYwNDRmMGJlNzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIszqS1i4qkEljio9GCsHkX637oGEMSSeaDwQVKT5iIuQKl33BebM5Sg vtApEHFy/p9qWS/izjCHMPXgew8KFUgEIX+bMSNej6yEtMyX5AJeIS9V1DoZYFmk 0CECIHa8eYWCErpR28CAubmiV7ovfKXb6besn/iFM/rKmoMUVFnNPrmEIhKrkwXB ntg2S1+/UQOZdI3+cJ2BE3S9czWjryywP6WT9nZTWhkwXnRY59XS77OUF9tjN+d6 qHeEeDm3gCl/0lFEBIESI/ljf3vVXVWACC2325wXah+1D0frNGpQ9NJ0EMSraK3G 60T3poRhxntCb799NovQVIedKzOKunc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:04 2025 by rpki-client