$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23d6b3fa-b247-378e-93d9-769edb34c8b0.roa File: 23d6b3fa-b247-378e-93d9-769edb34c8b0.roa (raw, json) Hash identifier: bWtWndeZ6CfcmqT6wYsf9mWdJjM+sQobVAncucTAsEk= Subject key identifier: 89:46:8A:76:7D:45:81:5A:E3:4C:1B:A0:F7:26:B2:0A:68:82:37:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7E7B56F75F2F705B74D32100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23d6b3fa-b247-378e-93d9-769edb34c8b0.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.40.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:56:f7:5f:2f:70:5b:74:d3:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=99b22acc-1844-4327-9b85-3eb418f74eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:09:b2:0a:1e:38:f9:d7:76:9c:81:21:73: 22:ca:05:4f:2e:4c:4b:b7:53:f6:8f:23:0e:38:68: 26:e2:ce:03:4f:6c:70:06:ef:16:34:df:84:28:14: 5a:52:aa:b9:d5:6d:cd:da:68:37:11:4c:8d:21:4d: cf:86:60:01:84:a6:80:55:43:6b:f4:1a:f5:b3:88: 7a:04:37:5e:6b:7f:f4:eb:b4:8a:5f:7f:53:42:ae: 19:65:68:58:9d:b7:db:1d:fd:03:58:78:d0:29:f6: 07:d1:07:26:37:de:83:cc:ec:97:14:fe:43:1e:53: ac:75:f4:6a:f8:34:29:80:1e:30:3e:2e:ef:67:24: e7:e6:52:60:3b:eb:ac:fd:8d:3e:ee:66:f8:c1:a8: fe:3e:e9:e4:f5:26:76:8e:5a:21:67:87:57:fc:88: ec:10:bf:9d:8d:86:ec:bd:1b:74:3d:1e:a1:52:30: 9d:5f:b7:0f:9e:22:68:7a:a6:dc:25:4b:59:48:4b: 97:a7:e3:33:f9:79:6f:ef:f6:53:44:28:26:56:29: aa:3b:2a:19:5f:42:b8:04:68:01:1c:82:fb:d6:d3: b0:75:99:d9:0a:2a:93:b7:74:4c:86:34:e5:e7:39: 0f:4b:66:d1:66:fa:6f:e1:b7:a0:96:75:fa:4b:01: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:46:8A:76:7D:45:81:5A:E3:4C:1B:A0:F7:26:B2:0A:68:82:37:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23d6b3fa-b247-378e-93d9-769edb34c8b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:7a:1f:4e:dc:5f:0d:c6:b3:f2:82:57:c9:2c:83:57:ff:fd: 81:4d:0b:91:7d:90:3e:f6:9d:ae:00:0b:35:d1:b5:7a:36:dd: 55:2c:f3:01:72:18:a2:8c:fe:3e:e2:41:b4:79:29:59:9a:c3: 72:5c:5d:ae:73:82:34:f7:f6:29:b0:9b:0a:c1:32:ef:34:8e: ec:fb:54:b5:29:bd:19:65:d2:72:50:dc:9d:6f:5f:57:4b:63: 02:4c:24:e0:0a:29:6a:33:16:3d:bc:ef:94:46:cd:25:10:82: 52:1a:26:93:39:57:ec:f1:b1:37:0d:9f:86:8b:c0:d2:cc:74: 7a:ec:4b:df:af:0f:92:8b:48:99:04:3c:75:69:34:7e:3a:97: ff:aa:ce:2c:b7:c6:e8:4f:da:33:19:4f:42:1f:16:69:7e:da: 75:53:ed:2c:cb:3c:cc:44:63:20:81:e0:7b:c8:7e:93:1e:89: 48:b9:87:32:e4:b7:41:96:40:91:b0:0d:14:aa:7e:e6:58:a2: ed:f0:85:2f:47:05:62:91:63:b4:51:10:c4:e5:ec:5a:d2:4f: 40:8b:56:d9:96:26:d2:ca:a7:65:aa:50:06:09:bc:20:7f:db: 6c:52:e8:8e:c8:8f:57:a6:47:79:5f:ec:64:aa:aa:fa:6f:e7: 2a:c0:ce:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1b3Xy9wW3TTIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OTliMjJhY2MtMTg0NC00MzI3LTliODUtM2ViNDE4Zjc0ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWEJsgoeOPnXdpyBIXMiygVPLkxLt1P2jyMO OGgm4s4DT2xwBu8WNN+EKBRaUqq51W3N2mg3EUyNIU3PhmABhKaAVUNr9Br1s4h6 BDdea3/067SKX39TQq4ZZWhYnbfbHf0DWHjQKfYH0QcmN96DzOyXFP5DHlOsdfRq +DQpgB4wPi7vZyTn5lJgO+us/Y0+7mb4waj+Punk9SZ2jlohZ4dX/IjsEL+djYbs vRt0PR6hUjCdX7cPniJoeqbcJUtZSEuXp+Mz+Xlv7/ZTRCgmVimqOyoZX0K4BGgB HIL71tOwdZnZCiqTt3RMhjTl5zkPS2bRZvpv4beglnX6SwH1TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlGinZ9RYFa40wboPcmsgpogjf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNkNmIzZmEtYjI0Ny0z NzhlLTkzZDktNzY5ZWRiMzRjOGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF6H07cXw3Gs/KCV8ksg1f//YFNC5F9kD72na4ACzXRtXo23VUs8wFy GKKM/j7iQbR5KVmaw3JcXa5zgjT39imwmwrBMu80juz7VLUpvRll0nJQ3J1vX1dL YwJMJOAKKWozFj2875RGzSUQglIaJpM5V+zxsTcNn4aLwNLMdHrsS9+vD5KLSJkE PHVpNH46l/+qziy3xuhP2jMZT0IfFml+2nVT7SzLPMxEYyCB4HvIfpMeiUi5hzLk t0GWQJGwDRSqfuZYou3whS9HBWKRY7RREMTl7FrST0CLVtmWJtLKp2WqUAYJvCB/ 22xS6I7Ij1emR3lf7GSqqvpv5yrAzv0= -----END CERTIFICATE-----Generated at Thu Jul 24 11:54:09 2025 by rpki-client