$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d444f008-3949-3abf-a9ff-a2f1c5b78bd2.roa File: d444f008-3949-3abf-a9ff-a2f1c5b78bd2.roa (raw, json) Hash identifier: X6Ee+ZDziLENRYaR+S8shu4AMg6zvkFxATadX4X6m2U= Subject key identifier: DA:C8:A3:23:28:8B:9F:07:77:AB:E5:D3:0F:2B:63:9A:3E:F5:CF:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AB91B88F6E0571890C7B30880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d444f008-3949-3abf-a9ff-a2f1c5b78bd2.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 33905 IP address blocks: 23.40.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:88:f6:e0:57:18:90:c7:b3:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=18358687-2e84-453c-94b8-d34f5f52287f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6b:e4:27:6a:ff:00:cd:93:80:5c:d1:88:ae: 63:d8:c4:c5:4f:c4:59:53:9f:7f:15:b7:04:ac:68: 2a:e7:d7:57:8f:2d:f0:69:ad:7c:f5:fa:54:4e:65: b3:2c:d2:df:2e:f3:64:00:44:c4:ed:84:fb:28:8b: 6f:04:d8:09:5b:1e:53:e9:48:bd:9a:e7:71:77:1c: 90:84:77:d7:9d:69:bd:05:c6:97:31:7b:b3:59:ac: ab:7b:09:da:97:38:9a:d9:aa:43:20:3c:56:dd:5d: 81:20:f7:ed:12:83:51:7b:c5:27:2d:22:75:6e:f8: 0f:34:9c:30:10:1d:7a:ce:55:a6:84:81:e7:a1:50: 95:be:25:9d:3c:5f:c7:ac:05:12:c3:9f:eb:e6:c2: 52:c3:a4:28:49:a0:fd:49:5d:92:81:4b:f1:24:a1: 2b:73:a7:87:d2:ac:2a:21:1d:12:92:19:d3:d6:30: d6:1f:8d:df:5f:84:52:42:ef:67:ef:ae:4f:36:e2: e8:2c:28:30:a9:ea:39:8b:17:38:89:1a:be:ea:96: 46:ae:e7:36:7a:ff:4e:86:b3:ce:81:12:e0:40:0e: d4:0f:9f:33:ea:46:28:36:f8:39:27:c7:57:b5:69: 58:92:95:ee:3a:0d:5d:4e:c2:42:8e:7e:67:ce:f4: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C8:A3:23:28:8B:9F:07:77:AB:E5:D3:0F:2B:63:9A:3E:F5:CF:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d444f008-3949-3abf-a9ff-a2f1c5b78bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:64:f9:ca:39:c2:65:bf:37:8f:59:8d:79:45:30:99:35:6b: 40:da:b3:5a:d6:53:75:09:ee:80:83:c6:d4:c2:2b:97:27:d8: 33:70:5c:53:f4:f4:50:8c:ad:f6:2e:b5:20:6e:1d:81:97:be: ed:6c:7c:91:7a:7d:9b:3a:63:00:72:2f:0f:9d:01:1e:09:58: b4:4a:2d:b2:0d:df:0f:3f:4f:ce:f3:6a:12:1e:27:e8:75:a3: f1:66:9a:ae:46:c7:37:f8:c6:0a:43:e8:bb:b6:06:32:d7:2f: ea:06:6a:c4:c7:89:7c:df:84:d2:df:f7:9f:58:93:44:7f:74: 66:f8:b6:4b:27:5b:66:a5:28:a7:b7:78:3a:34:f0:c9:e7:e8: c3:89:a0:6a:d8:66:f3:64:a4:cc:e4:0d:11:a3:b5:1e:7c:6d: 7a:bf:c8:0e:10:28:47:86:23:bd:a3:66:b3:cb:f8:4e:0e:6b: ea:0f:ff:79:83:d6:dd:50:52:14:21:9e:7b:d3:6d:c9:9a:23: ae:de:0d:56:ff:fd:14:37:c4:c3:f7:de:f8:0d:b2:92:7a:71: 0c:60:67:fe:15:91:f1:43:1f:d2:d9:b0:66:17:f2:88:37:c2: 53:4d:b2:b0:9c:c8:69:c9:bd:b1:49:dd:62:52:01:1a:fe:07: cf:d0:1c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4j24FcYkMezCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTgzNTg2ODctMmU4NC00NTNjLTk0YjgtZDM0ZjVmNTIyODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mvkJ2r/AM2TgFzRiK5j2MTFT8RZU59/FbcE rGgq59dXjy3waa189fpUTmWzLNLfLvNkAETE7YT7KItvBNgJWx5T6Ui9mudxdxyQ hHfXnWm9BcaXMXuzWayrewnalzia2apDIDxW3V2BIPftEoNRe8UnLSJ1bvgPNJww EB16zlWmhIHnoVCVviWdPF/HrAUSw5/r5sJSw6QoSaD9SV2SgUvxJKErc6eH0qwq IR0SkhnT1jDWH43fX4RSQu9n765PNuLoLCgwqeo5ixc4iRq+6pZGruc2ev9OhrPO gRLgQA7UD58z6kYoNvg5J8dXtWlYkpXuOg1dTsJCjn5nzvQp2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrIoyMoi58Hd6vl0w8rY5o+9c9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ0NGYwMDgtMzk0OS0z YWJmLWE5ZmYtYTJmMWM1Yjc4YmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZk+co5wmW/N49ZjXlFMJk1a0Das1rWU3UJ7oCDxtTCK5cn2DNwXFP0 9FCMrfYutSBuHYGXvu1sfJF6fZs6YwByLw+dAR4JWLRKLbIN3w8/T87zahIeJ+h1 o/Fmmq5Gxzf4xgpD6Lu2BjLXL+oGasTHiXzfhNLf959Yk0R/dGb4tksnW2alKKe3 eDo08Mnn6MOJoGrYZvNkpMzkDRGjtR58bXq/yA4QKEeGI72jZrPL+E4Oa+oP/3mD 1t1QUhQhnnvTbcmaI67eDVb//RQ3xMP33vgNspJ6cQxgZ/4VkfFDH9LZsGYX8og3 wlNNsrCcyGnJvbFJ3WJSARr+B8/QHA0= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:30 2025 by rpki-client