$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5791f012-18d5-3e92-a84b-8ba780fd6eb3.roa File: 5791f012-18d5-3e92-a84b-8ba780fd6eb3.roa (raw, json) Hash identifier: ORyO9PXERyr4CKV4A9t+me+Ivs0HPljMJ0H7gAfhLTY= Subject key identifier: D0:F0:21:9B:33:7A:B1:B9:7D:B0:25:53:F7:33:CD:0D:8F:30:3B:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C150EBD0911609A4BDBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5791f012-18d5-3e92-a84b-8ba780fd6eb3.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7552 IP address blocks: 23.40.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:15:0e:bd:09:11:60:9a:4b:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=4650285d-d9ba-4524-92b2-1cad196b16c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:3d:94:71:52:54:e4:d6:6c:11:33:12:18: 6d:92:38:2c:5b:85:bc:03:88:03:f2:e2:b0:79:d4: 87:bd:dd:60:53:a9:1f:f3:09:1e:4f:70:5b:0c:52: 39:94:81:bf:93:78:42:b3:1c:be:25:5b:76:d8:61: fa:b7:06:09:40:06:5b:18:74:29:67:50:b2:7f:69: 16:c1:9a:d0:89:da:7d:37:1c:ca:60:08:8b:36:71: 8c:4a:08:51:d9:a9:12:68:bd:bb:bb:2e:34:6d:47: 3f:a8:a5:e9:e2:2b:32:68:42:61:94:e2:b0:c0:54: 24:51:02:29:64:87:16:04:a0:16:40:a7:5d:03:cf: fc:b2:dc:c7:33:f5:8e:7f:cd:27:53:ca:db:27:fc: 16:a0:fd:3d:48:a7:90:50:e6:8a:ac:2c:ae:b1:c3: ad:35:c7:ea:0a:4d:49:78:d2:be:6a:dc:49:18:3a: d6:3f:c3:e5:2d:95:4d:25:2c:01:ee:04:8c:71:dd: 89:3c:24:55:4f:ac:42:93:07:f3:55:8a:b0:9f:22: 4c:94:19:02:da:47:2a:13:e6:3d:f4:10:32:17:5d: 4f:5b:a4:95:dc:fe:ed:48:3b:9d:2b:67:d6:42:dc: 68:0a:74:89:c4:e6:82:f6:74:c7:4d:85:dc:0c:79: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F0:21:9B:33:7A:B1:B9:7D:B0:25:53:F7:33:CD:0D:8F:30:3B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5791f012-18d5-3e92-a84b-8ba780fd6eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a3:83:88:b3:82:c7:db:45:52:07:16:90:9e:df:02:47:e0: 96:d7:ef:51:1f:65:88:15:2f:f4:f2:0c:aa:c2:90:0a:d1:8a: c6:78:d8:c3:e3:d4:b8:df:d3:1b:01:c0:56:68:1f:6c:68:af: 20:8c:e9:aa:07:36:7e:08:c5:32:bb:ff:0c:37:41:03:51:d5: 3f:55:a4:db:e0:70:9c:c7:53:92:16:c5:64:90:0e:fb:93:3c: 26:36:f6:d7:14:58:76:63:14:a9:65:3e:2d:70:2c:05:de:9e: b1:e7:2a:6a:9e:a4:2c:61:21:8a:cb:eb:42:2c:1b:f0:ab:0f: 9e:7c:72:fd:a2:fd:c4:80:57:81:20:7f:3b:48:6d:99:2e:68: cf:03:8c:0f:36:a3:ce:e8:86:bc:5d:ed:4a:47:eb:ce:e0:19: 65:c4:d0:bb:09:8b:41:66:61:aa:c7:40:9c:72:9e:3d:c6:93: db:fe:53:ff:c2:11:17:08:8f:c0:40:e6:0c:49:2b:4a:46:77: ce:3d:53:14:1c:9b:69:ac:67:8f:03:a6:27:30:81:ab:a1:24: 59:dc:43:57:da:dd:dd:12:14:0b:dd:b2:d1:1b:97:0d:90:4c: 18:09:58:ac:6f:69:81:ff:55:39:b7:0f:1a:67:d5:c3:c3:6b: 0b:66:a8:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBUOvQkRYJpL28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDY1MDI4NWQtZDliYS00NTI0LTkyYjItMWNhZDE5NmIxNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK49lHFSVOTWbBEzEhhtkjgsW4W8A4gD8uKw edSHvd1gU6kf8wkeT3BbDFI5lIG/k3hCsxy+JVt22GH6twYJQAZbGHQpZ1Cyf2kW wZrQidp9NxzKYAiLNnGMSghR2akSaL27uy40bUc/qKXp4isyaEJhlOKwwFQkUQIp ZIcWBKAWQKddA8/8stzHM/WOf80nU8rbJ/wWoP09SKeQUOaKrCyuscOtNcfqCk1J eNK+atxJGDrWP8PlLZVNJSwB7gSMcd2JPCRVT6xCkwfzVYqwnyJMlBkC2kcqE+Y9 9BAyF11PW6SV3P7tSDudK2fWQtxoCnSJxOaC9nTHTYXcDHmDpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDwIZszerG5fbAlU/czzQ2PMDvgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc5MWYwMTItMThkNS0z ZTkyLWE4NGItOGJhNzgwZmQ2ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWjg4izgsfbRVIHFpCe3wJH4JbX71EfZYgVL/TyDKrCkArRisZ42MPj 1Ljf0xsBwFZoH2xoryCM6aoHNn4IxTK7/ww3QQNR1T9VpNvgcJzHU5IWxWSQDvuT PCY29tcUWHZjFKllPi1wLAXenrHnKmqepCxhIYrL60IsG/CrD558cv2i/cSAV4Eg fztIbZkuaM8DjA82o87ohrxd7UpH687gGWXE0LsJi0FmYarHQJxynj3Gk9v+U//C ERcIj8BA5gxJK0pGd849UxQcm2msZ48DpicwgauhJFncQ1fa3d0SFAvdstEblw2Q TBgJWKxvaYH/VTm3Dxpn1cPDawtmqCA= -----END CERTIFICATE-----Generated at Sat Sep 6 05:08:18 2025 by rpki-client