$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa File: e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa (raw, json) Hash identifier: LMevLjU59E2eAU43y2/yku5VFJRf+uftk0ILEp+VrG4= Subject key identifier: 8B:A5:4E:E8:86:4B:C6:04:95:BC:45:FD:B4:D8:69:62:90:1A:C9:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AA1621BAD24AA792EA62EEF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.40.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:62:1b:ad:24:aa:79:2e:a6:2e:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=66c8e16e-1436-40f7-a8e1-712c1437d558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b0:41:74:5c:4c:76:5b:c4:06:90:58:76:2c: c4:67:f5:98:4c:aa:72:97:90:2b:b6:7a:01:7b:61: a5:ad:0b:75:5e:48:3a:4d:8b:c6:a0:00:ed:c5:d5: 34:4c:73:79:83:5b:b5:ea:52:7d:d0:a2:7c:a9:98: 70:45:cc:c6:db:45:0c:5a:55:69:c9:dd:13:56:d6: 77:5e:1a:c2:08:8d:27:2c:59:db:f8:cd:fe:b8:0b: f1:0d:72:72:41:65:2a:25:f4:ee:98:00:ab:08:3b: 58:79:ed:0d:91:e9:ab:3f:cc:b4:f1:fc:fe:8a:0b: f7:1d:d4:9d:71:40:f0:6d:14:a5:52:66:19:97:b3: 1f:ac:3d:3c:07:ba:04:98:fc:70:70:89:bf:e8:15: a9:a8:b2:68:44:9a:f5:fb:d9:6f:5a:1b:24:56:b4: 76:b4:b1:d8:ab:c0:fe:a9:ff:79:13:3c:c4:fe:7f: 9b:14:cb:fd:66:8b:19:fb:40:c8:fd:13:16:0e:31: 01:13:5e:ac:2e:b2:41:d5:36:1a:97:27:14:19:a0: 49:a3:21:8b:05:49:b8:65:e2:37:bf:d8:27:da:78: dd:0d:6e:37:88:1c:ad:a5:da:df:ea:a8:73:4c:38: 2e:4a:3c:d8:66:d4:a7:b2:a7:69:42:82:c3:02:89: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A5:4E:E8:86:4B:C6:04:95:BC:45:FD:B4:D8:69:62:90:1A:C9:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ee:50:8d:e2:96:9a:c3:1f:27:5a:a2:63:e1:92:3f:3a:a0: 1d:c2:c8:61:e4:ed:50:ce:03:e4:7e:d0:72:79:ca:f9:77:68: 49:e2:27:e9:9b:5f:8b:01:f6:29:d5:36:ba:dc:6b:1b:93:ac: 95:87:49:3c:30:3f:f6:5e:88:72:d2:5f:2d:4f:8f:97:98:51: 4d:af:35:92:8f:34:ec:8c:88:3a:72:c7:fb:2b:1e:b3:ca:3c: 89:b3:51:7e:de:4a:18:18:eb:1c:b2:71:f9:ab:01:c4:37:0e: 13:03:5e:80:17:50:15:b2:85:0b:50:3d:17:60:23:27:95:d3: c9:c2:cd:2c:fa:55:07:a5:60:03:c0:03:a9:6d:84:53:e0:03: 5f:b0:0d:49:6f:30:56:2e:11:56:a1:18:e4:4c:86:09:f4:e1: f6:65:f2:fe:43:42:f6:78:15:5e:12:c9:ce:ac:7a:63:8d:e0: be:76:58:9c:8a:de:e2:4c:9f:77:6e:79:9d:98:71:50:5d:13: 11:ec:51:3c:42:0d:62:83:98:67:a2:96:ec:b5:60:54:4f:5c: 6f:ec:df:d6:2a:f4:1d:60:74:0d:a8:05:d6:a6:1a:5e:84:5e: 82:8c:dd:95:87:95:5b:14:eb:a4:73:96:c1:e2:bf:9c:d7:cf: e7:f9:68:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYhutJKp5LqYu70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NjZjOGUxNmUtMTQzNi00MGY3LWE4ZTEtNzEyYzE0MzdkNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47BBdFxMdlvEBpBYdizEZ/WYTKpyl5ArtnoB e2GlrQt1Xkg6TYvGoADtxdU0THN5g1u16lJ90KJ8qZhwRczG20UMWlVpyd0TVtZ3 XhrCCI0nLFnb+M3+uAvxDXJyQWUqJfTumACrCDtYee0NkemrP8y08fz+igv3HdSd cUDwbRSlUmYZl7MfrD08B7oEmPxwcIm/6BWpqLJoRJr1+9lvWhskVrR2tLHYq8D+ qf95EzzE/n+bFMv9ZosZ+0DI/RMWDjEBE16sLrJB1TYalycUGaBJoyGLBUm4ZeI3 v9gn2njdDW43iBytpdrf6qhzTDguSjzYZtSnsqdpQoLDAonmRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIulTuiGS8YElbxF/bTYaWKQGsleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQzNGViMjQtODNlZS0z NzcwLWI4NmItZjNhNjFmYjVjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7uUI3ilprDHydaomPhkj86oB3CyGHk7VDOA+R+0HJ5yvl3aEniJ+mb X4sB9inVNrrcaxuTrJWHSTwwP/ZeiHLSXy1Pj5eYUU2vNZKPNOyMiDpyx/srHrPK PImzUX7eShgY6xyycfmrAcQ3DhMDXoAXUBWyhQtQPRdgIyeV08nCzSz6VQelYAPA A6lthFPgA1+wDUlvMFYuEVahGORMhgn04fZl8v5DQvZ4FV4Syc6semON4L52WJyK 3uJMn3dueZ2YcVBdExHsUTxCDWKDmGeiluy1YFRPXG/s39Yq9B1gdA2oBdamGl6E XoKM3ZWHlVsU66RzlsHiv5zXz+f5aOg= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:48 2025 by rpki-client