$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5791f012-18d5-3e92-a84b-8ba780fd6eb3.roa File: 5791f012-18d5-3e92-a84b-8ba780fd6eb3.roa (raw, json) Hash identifier: TCDktPRbn0CCK7kwsqnr4oTgDWE3+8L1WU+S+EioikA= Subject key identifier: 1C:B3:44:C1:51:33:A5:D9:6B:BE:AC:E0:D2:36:2E:D9:B9:F0:22:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1B6012E01459771B2D832700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5791f012-18d5-3e92-a84b-8ba780fd6eb3.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 7552 IP address blocks: 23.40.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:12:e0:14:59:77:1b:2d:83:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=c6b5fb0f-52ac-453e-a0a4-eae1286f74e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:8d:2e:d2:47:a9:4d:75:62:19:a1:20:54: 5b:cd:5f:04:ab:6d:7e:30:13:2b:f2:78:91:eb:16: c7:8e:e4:d4:57:3f:87:b7:da:36:0b:62:93:1e:be: 84:af:40:43:03:fa:7a:5f:f5:ad:10:de:21:59:05: 39:dc:fa:20:00:d3:63:34:33:ed:22:1a:e4:12:4c: 30:e1:28:ee:6f:7e:15:17:0b:0f:0c:3a:26:a4:7e: d5:b6:0e:52:af:78:f9:f3:2d:ed:cc:3a:39:df:ec: 96:9d:b6:16:9e:11:09:50:2c:a4:9b:0f:31:eb:e3: 88:a7:72:ab:5c:4e:4a:ed:2e:91:71:57:eb:5a:c1: 5a:c6:0c:88:63:cc:5d:1f:d4:61:2b:b0:1d:1c:f8: 9b:b0:73:3a:7f:54:00:71:b3:8c:0a:1c:73:79:91: 66:1f:a6:8a:a1:91:74:2f:f5:34:18:91:47:5a:ad: 37:0b:d1:57:29:34:92:ab:0e:b0:7f:51:8b:81:7f: 2b:fb:c9:6a:f2:7d:9a:5c:39:20:67:0a:d9:b6:89: 29:04:00:75:84:72:41:06:93:19:ab:62:d7:ea:f3: a1:e1:72:38:38:d0:e6:c5:8f:d3:91:c6:51:63:ee: 30:8d:4c:ff:4a:58:bb:17:e1:13:68:a8:14:51:58: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B3:44:C1:51:33:A5:D9:6B:BE:AC:E0:D2:36:2E:D9:B9:F0:22:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5791f012-18d5-3e92-a84b-8ba780fd6eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:68:39:c5:b2:ac:61:20:5a:41:5b:12:77:09:8f:c7:f2:96: b6:ea:94:68:d6:e0:b8:88:5f:b4:dc:3a:ea:0c:ca:a5:b6:cc: 1c:67:52:26:38:bc:fb:06:1b:37:14:77:d2:7d:c9:d4:1a:a0: 51:5f:ce:eb:6c:52:fa:f6:04:13:3e:d9:81:ea:1d:c3:a0:5b: 5f:c6:ca:81:89:78:2e:ee:37:d1:ed:cf:ef:62:ac:aa:6f:87: c0:37:ab:94:e3:08:9b:b9:5c:8f:b8:ec:32:c2:ab:14:a4:cc: 4d:ed:eb:b5:73:6e:11:05:96:eb:f9:0b:74:67:d4:9f:81:1f: 77:17:28:7d:ab:bb:8f:34:7c:70:af:01:ee:83:5d:ea:31:ef: e2:58:55:4b:c3:85:9b:36:dc:17:04:55:3d:51:5d:47:e1:d5: f1:0e:92:b7:23:e5:9a:37:1a:38:fd:c9:b9:73:03:b6:df:aa: a8:b1:39:8d:68:c9:c8:fc:18:41:fe:f9:1e:be:c6:81:75:04: b7:c9:fa:8e:4d:e2:13:10:79:d6:59:01:39:18:2f:ee:51:6a: a4:51:ff:ab:31:22:eb:e2:1b:b4:9d:90:ca:4a:f3:57:9b:73: a3:80:3a:b5:97:57:cc:02:d5:cf:0f:cb:16:a4:c1:80:53:fe: a8:d5:13:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYBLgFFl3Gy2DJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk YzZiNWZiMGYtNTJhYy00NTNlLWEwYTQtZWFlMTI4NmY3NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxGNLtJHqU11YhmhIFRbzV8Eq21+MBMr8niR 6xbHjuTUVz+Ht9o2C2KTHr6Er0BDA/p6X/WtEN4hWQU53PogANNjNDPtIhrkEkww 4Sjub34VFwsPDDompH7Vtg5Sr3j58y3tzDo53+yWnbYWnhEJUCykmw8x6+OIp3Kr XE5K7S6RcVfrWsFaxgyIY8xdH9RhK7AdHPibsHM6f1QAcbOMChxzeZFmH6aKoZF0 L/U0GJFHWq03C9FXKTSSqw6wf1GLgX8r+8lq8n2aXDkgZwrZtokpBAB1hHJBBpMZ q2LX6vOh4XI4ONDmxY/TkcZRY+4wjUz/Sli7F+ETaKgUUVjlCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByzRMFRM6XZa76s4NI2Ltm58CIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc5MWYwMTItMThkNS0z ZTkyLWE4NGItOGJhNzgwZmQ2ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1oOcWyrGEgWkFbEncJj8fylrbqlGjW4LiIX7TcOuoMyqW2zBxnUiY4 vPsGGzcUd9J9ydQaoFFfzutsUvr2BBM+2YHqHcOgW1/GyoGJeC7uN9Htz+9irKpv h8A3q5TjCJu5XI+47DLCqxSkzE3t67VzbhEFluv5C3Rn1J+BH3cXKH2ru480fHCv Ae6DXeox7+JYVUvDhZs23BcEVT1RXUfh1fEOkrcj5Zo3Gjj9yblzA7bfqqixOY1o ycj8GEH++R6+xoF1BLfJ+o5N4hMQedZZATkYL+5RaqRR/6sxIuviG7SdkMpK81eb c6OAOrWXV8wC1c8PyxakwYBT/qjVE/Q= -----END CERTIFICATE-----Generated at Sat Jun 7 04:11:58 2025 by rpki-client