$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa File: 535ca5e8-8eea-348a-8f21-12be826d9d2f.roa (raw, json) Hash identifier: yQRTqPhEfGkVY7ob03UI5rT5H65ES5vHCD5l2LkFjOg= Subject key identifier: 66:5C:F9:1C:B2:49:76:93:12:3D:FB:60:23:BA:74:82:75:3D:9A:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A7A4B57A4C4BE3BD4BDAF7280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 20940 IP address blocks: 23.209.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:57:a4:c4:be:3b:d4:bd:af:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=7793ef5d-1e8d-4fb5-b0d9-1ffbfaaf5076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:71:5e:62:43:cd:d7:79:56:07:f8:ec:9f:7d: d1:59:da:e4:56:71:51:cf:b4:23:96:b9:b0:70:98: 0e:02:45:d7:20:fb:13:69:3a:c1:98:ad:af:7e:76: d3:39:88:61:3d:c2:55:70:4e:65:63:ed:a7:7c:8f: 5f:6f:34:fa:c8:1a:ca:58:25:70:f7:e8:0b:34:5d: 98:3e:19:9d:16:f8:84:3b:dd:ce:5d:c3:c7:18:ed: 09:7f:b6:da:fb:96:23:72:f2:ed:75:e5:72:46:00: d2:6e:06:41:23:ea:fb:66:20:31:7e:1d:4c:55:eb: c6:1c:a5:31:bb:8b:4a:4e:de:d8:26:c5:96:8f:88: 9d:bb:a6:f1:2c:b2:bc:0c:59:ea:c8:99:59:09:9d: 16:0a:4f:dc:c0:b1:83:62:09:95:c1:fa:48:56:d8: 75:5e:b5:9c:7f:4e:e6:3a:ee:5a:75:2e:a3:f2:6b: 11:e9:c6:23:b5:2d:81:2b:58:e7:ca:e0:8e:28:8f: d4:f3:e8:fe:66:08:fa:70:38:06:b9:8f:24:91:ff: 2a:99:6c:3d:01:ea:a8:2f:71:23:85:05:84:03:26: 4d:7e:e4:8b:60:e8:99:76:77:84:1f:15:68:ee:08: d1:83:26:bc:be:a0:1e:e2:e4:70:ab:c0:4a:c7:a9: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:F9:1C:B2:49:76:93:12:3D:FB:60:23:BA:74:82:75:3D:9A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:85:6a:bf:66:ed:dc:cc:6b:e5:2b:47:b2:4c:7b:1d:24:ff: 4a:b1:5c:46:06:84:f3:e7:ac:8e:a2:ab:ab:55:bd:45:97:95: 38:87:51:38:5e:1c:7f:15:49:cf:d9:38:da:28:a6:96:eb:a7: f1:ba:ae:5f:e9:2b:01:39:f3:2b:55:27:3d:28:49:41:22:c4: 3e:ab:ba:14:99:9d:a2:98:b2:19:92:2a:29:c6:5f:4e:2e:1c: 5d:cb:da:1d:86:7a:55:6d:7b:cb:cb:81:5c:c9:92:e2:12:78: 58:c9:f7:2b:b2:2f:7f:d1:d5:70:18:38:43:01:30:24:fd:3a: 25:bc:45:eb:9e:58:c4:85:05:67:5b:b1:11:d8:4f:aa:f5:b8: e3:7e:3e:f7:f3:03:56:5b:a8:7d:47:49:c7:cf:91:15:c5:79: de:f4:7f:db:51:b7:e4:f4:95:2b:6a:9a:48:f5:c5:af:92:0e: c4:97:df:fe:5e:57:41:9e:e7:21:c3:c3:ab:0f:3a:bc:c0:e0: 3e:2c:37:01:67:f4:8e:7d:62:d4:a7:23:02:e4:d7:9f:0c:50: b5:af:2e:a4:8d:2a:bc:d1:d9:4e:ef:fc:f1:ad:ad:97:6e:71: 68:b4:16:ff:74:e5:19:7c:4a:b1:f4:a3:16:8c:99:8e:16:08: ff:89:ad:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S1ekxL471L2vcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk Nzc5M2VmNWQtMWU4ZC00ZmI1LWIwZDktMWZmYmZhYWY1MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnFeYkPN13lWB/jsn33RWdrkVnFRz7Qjlrmw cJgOAkXXIPsTaTrBmK2vfnbTOYhhPcJVcE5lY+2nfI9fbzT6yBrKWCVw9+gLNF2Y PhmdFviEO93OXcPHGO0Jf7ba+5YjcvLtdeVyRgDSbgZBI+r7ZiAxfh1MVevGHKUx u4tKTt7YJsWWj4idu6bxLLK8DFnqyJlZCZ0WCk/cwLGDYgmVwfpIVth1XrWcf07m Ou5adS6j8msR6cYjtS2BK1jnyuCOKI/U8+j+Zgj6cDgGuY8kkf8qmWw9AeqoL3Ej hQWEAyZNfuSLYOiZdneEHxVo7gjRgya8vqAe4uRwq8BKx6kfvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZc+RyySXaTEj37YCO6dIJ1PZpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM1Y2E1ZTgtOGVlYS0z NDhhLThmMjEtMTJiZTgyNmQ5ZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGFar9m7dzMa+UrR7JMex0k/0qxXEYGhPPnrI6iq6tVvUWXlTiHUThe HH8VSc/ZONooppbrp/G6rl/pKwE58ytVJz0oSUEixD6ruhSZnaKYshmSKinGX04u HF3L2h2GelVte8vLgVzJkuISeFjJ9yuyL3/R1XAYOEMBMCT9OiW8ReueWMSFBWdb sRHYT6r1uON+PvfzA1ZbqH1HScfPkRXFed70f9tRt+T0lStqmkj1xa+SDsSX3/5e V0Ge5yHDw6sPOrzA4D4sNwFn9I59YtSnIwLk158MULWvLqSNKrzR2U7v/PGtrZdu cWi0Fv905Rl8SrH0oxaMmY4WCP+JrSE= -----END CERTIFICATE-----Generated at Wed Jul 23 01:39:58 2025 by rpki-client