$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bae609-fa4c-3be9-a377-3aa04ef91f26.roa File: 40bae609-fa4c-3be9-a377-3aa04ef91f26.roa (raw, json) Hash identifier: +KLt8sFk3JBfy5ULNfdDtMmrCbFCroVBeyYhesM2rp0= Subject key identifier: 01:48:0C:9E:57:C5:70:84:D2:ED:F3:C6:AB:A5:39:62:BF:A8:19:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B004C22C45CDCF09A74F22920 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bae609-fa4c-3be9-a377-3aa04ef91f26.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.58.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:22:c4:5c:dc:f0:9a:74:f2:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=04bcb301-0a1e-40bb-b4ea-272e07192962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:be:b0:a9:56:fc:e6:65:11:e8:e8:eb:8d: 83:4f:6a:29:66:41:4b:cc:48:68:a3:58:36:4c:ad: c9:fe:1a:44:a7:56:2a:fa:d4:13:56:81:e5:25:4b: a0:da:76:f0:d7:0a:a1:be:fb:e3:1c:02:4b:e5:cd: ff:f4:98:4a:01:c8:83:32:d4:3d:88:8c:bf:74:d1: 8e:8a:f2:97:ea:29:64:0f:61:94:db:df:c7:82:f3: 2f:21:24:bf:5f:2e:8c:69:69:97:14:a5:0a:a6:dc: 00:82:4c:a2:45:3a:40:7f:93:97:5d:13:2f:5e:29: 37:d7:8d:19:22:e8:3e:e0:62:ef:fe:d1:6b:d2:14: 20:45:f0:6a:7f:25:aa:4b:5c:91:df:78:a5:77:7b: 20:aa:15:ee:8b:b0:fc:9b:a1:f2:c9:d1:85:fb:ca: 52:c0:25:cd:a5:05:0b:08:a5:d5:50:13:be:32:ef: 35:73:50:a7:43:67:62:c5:16:a1:1f:39:df:8b:e9: 2f:3c:e8:1f:7c:4e:ef:a9:bd:ad:d0:76:3a:10:dd: 28:e0:bc:69:d5:a1:31:9c:c3:56:d7:e0:40:7b:54: aa:0a:a0:5e:05:b7:c9:83:d1:a7:75:f0:32:0c:a5: db:f0:e0:ea:1b:4c:50:3c:68:22:3b:ff:b6:e1:eb: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:48:0C:9E:57:C5:70:84:D2:ED:F3:C6:AB:A5:39:62:BF:A8:19:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40bae609-fa4c-3be9-a377-3aa04ef91f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:45:64:84:73:0b:b0:64:a0:91:db:e2:7c:f6:c9:9c:b9:0a: fd:22:d8:88:82:6d:95:42:cd:48:85:8b:34:d9:08:37:d6:7d: 7b:77:04:a4:aa:4e:b8:5e:76:e8:ad:f5:85:8a:df:49:8a:f0: ec:cd:af:cd:91:2b:6e:68:d2:18:1c:b6:15:df:13:71:f4:ea: 0e:d5:88:11:d8:9a:d4:5b:c3:2c:89:1e:da:08:85:c3:69:d3: 6e:96:73:d8:d8:65:b2:82:0c:bf:e5:87:fb:85:0a:33:b8:67: 46:3a:a3:0d:7a:d2:ac:c0:e8:bb:92:5a:cf:31:6e:7d:82:b4: db:ac:7f:e7:18:64:51:2d:39:0d:9b:2d:8b:70:e9:5e:7d:32: 38:d2:8e:1f:1a:d0:46:e4:62:61:6c:a3:c8:df:f7:0a:23:3f: e8:5a:fd:b0:5c:c0:dd:b8:cc:16:ae:3c:01:6e:80:b1:8f:41: 28:02:ff:16:6f:7f:4a:e2:c2:0f:7f:d6:3c:79:93:ca:46:74: cd:8e:dc:e7:8f:fe:48:a0:ad:96:f6:4d:a3:3c:03:dd:69:c6: 0e:ef:31:1f:a6:59:d2:8b:68:9c:03:c1:d2:4a:19:81:fc:3a: 01:93:d9:17:2c:1d:da:b3:10:d1:57:8b:93:43:91:dd:c8:2f: 61:d0:0d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsATCLEXNzwmnTyKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MDRiY2IzMDEtMGExZS00MGJiLWI0ZWEtMjcyZTA3MTkyOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ++sKlW/OZlEejo642DT2opZkFLzEhoo1g2 TK3J/hpEp1Yq+tQTVoHlJUug2nbw1wqhvvvjHAJL5c3/9JhKAciDMtQ9iIy/dNGO ivKX6ilkD2GU29/HgvMvISS/Xy6MaWmXFKUKptwAgkyiRTpAf5OXXRMvXik3140Z Iug+4GLv/tFr0hQgRfBqfyWqS1yR33ild3sgqhXui7D8m6HyydGF+8pSwCXNpQUL CKXVUBO+Mu81c1CnQ2dixRahHznfi+kvPOgffE7vqb2t0HY6EN0o4Lxp1aExnMNW 1+BAe1SqCqBeBbfJg9GndfAyDKXb8ODqG0xQPGgiO/+24etpJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFIDJ5XxXCE0u3zxqulOWK/qBmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDBiYWU2MDktZmE0Yy0z YmU5LWEzNzctM2FhMDRlZjkxZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJFZIRzC7BkoJHb4nz2yZy5Cv0i2IiCbZVCzUiFizTZCDfWfXt3BKSq Trheduit9YWK30mK8OzNr82RK25o0hgcthXfE3H06g7ViBHYmtRbwyyJHtoIhcNp 026Wc9jYZbKCDL/lh/uFCjO4Z0Y6ow160qzA6LuSWs8xbn2CtNusf+cYZFEtOQ2b LYtw6V59MjjSjh8a0EbkYmFso8jf9wojP+ha/bBcwN24zBauPAFugLGPQSgC/xZv f0riwg9/1jx5k8pGdM2O3OeP/kigrZb2TaM8A91pxg7vMR+mWdKLaJwDwdJKGYH8 OgGT2RcsHdqzENFXi5NDkd3IL2HQDXE= -----END CERTIFICATE-----Generated at Sat Sep 6 01:12:26 2025 by rpki-client