$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71f6964d-b119-318b-93b8-9c6936bef93e.roa File: 71f6964d-b119-318b-93b8-9c6936bef93e.roa (raw, json) Hash identifier: hpNJm7PmFgaSCXeQfXVRsYh33BkHHa6VvEPBDtWa29c= Subject key identifier: 34:8A:15:E4:94:08:35:19:B5:C7:3D:AD:A0:79:E8:25:C5:82:19:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC248F363BFE15E2232680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71f6964d-b119-318b-93b8-9c6936bef93e.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.32.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:24:8f:36:3b:fe:15:e2:23:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=a89e1d18-6530-40d3-8ccf-bc6e16e98590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6f:5a:94:09:21:87:04:e1:ae:a4:86:8b:f0: a2:86:c3:c2:64:ab:58:71:1e:36:16:88:f5:ba:73: 75:cd:a3:32:d0:90:85:9c:fb:79:39:65:d8:cb:21: 8f:60:73:85:08:59:f0:57:b0:7b:5a:f7:08:7f:a5: c8:9b:82:f1:44:fc:0e:7e:43:33:bb:c3:f6:21:a2: d3:62:ef:ba:10:58:83:37:f1:5b:a4:0a:d0:0e:e2: 58:b9:ce:51:9f:f8:69:1b:22:3a:a1:1f:7e:f6:e3: 63:4e:db:c4:54:61:1c:3b:3b:0e:27:6d:c3:bc:3a: ce:04:8d:f2:12:3e:d2:f4:a7:f0:f2:b0:7d:1c:76: c9:e0:0b:2a:45:a9:5b:93:4a:e3:20:ef:0f:be:59: 10:63:3f:ae:31:d6:48:76:ed:99:d1:ff:d6:a6:db: 50:8b:c9:16:f1:d8:01:c2:f4:18:71:58:7b:20:8f: ab:b7:da:ba:9c:f9:45:18:b7:6d:57:97:8e:cc:65: c7:4f:98:f4:d2:7f:07:d4:c7:c8:da:8c:fd:ca:a9: 60:d6:09:0f:59:3e:e0:7d:f7:d8:29:94:85:87:a1: 2b:6d:a1:69:4f:82:5f:21:99:88:4b:aa:1c:bd:d5: c2:87:b7:e9:eb:e6:dd:4e:c7:7e:62:fd:30:4b:3b: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8A:15:E4:94:08:35:19:B5:C7:3D:AD:A0:79:E8:25:C5:82:19:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71f6964d-b119-318b-93b8-9c6936bef93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f7:dd:a8:35:dc:66:d2:07:16:93:1b:3b:95:ca:1a:48:f7: 45:79:34:72:81:af:36:a6:e8:37:5a:ba:1e:ab:04:be:36:e3: ff:92:8b:22:5d:de:7e:f9:f6:7f:e0:af:07:18:f5:ff:f0:0c: 43:db:ef:2c:69:71:54:5b:4d:c3:86:3e:60:6c:df:2d:01:af: b8:ad:35:82:25:9b:e1:bf:f3:01:34:71:58:e0:4f:11:bd:dc: c0:55:58:ab:dc:23:b9:de:46:81:cb:d6:b9:7a:59:ac:b8:ed: 4f:30:2b:43:58:76:bd:2a:3a:13:7a:98:9d:74:23:4a:7b:5e: de:01:d9:dc:a0:c5:fd:1d:18:30:b8:f5:e9:57:eb:9b:4f:19: 0f:8a:5c:f2:0f:8e:b9:5a:70:99:13:77:ac:f5:5c:27:92:6d: a0:08:d7:8f:91:c5:bf:ce:74:06:85:73:6d:da:d2:c9:7a:68: 52:a9:a7:3f:c1:17:58:13:33:60:31:8f:f4:2a:e8:2b:d1:07: 6b:6d:a8:18:2d:ce:b4:64:3d:8c:01:72:a6:48:b3:2c:79:9f: 45:85:2a:fd:a7:81:0f:e3:82:13:7e:d3:70:c0:5b:88:56:85: 55:a8:03:ec:44:c1:74:3d:08:01:af:ba:3b:16:c3:76:56:f9: 4a:6e:ef:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CSPNjv+FeIjJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk YTg5ZTFkMTgtNjUzMC00MGQzLThjY2YtYmM2ZTE2ZTk4NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW9alAkhhwThrqSGi/CihsPCZKtYcR42Foj1 unN1zaMy0JCFnPt5OWXYyyGPYHOFCFnwV7B7WvcIf6XIm4LxRPwOfkMzu8P2IaLT Yu+6EFiDN/FbpArQDuJYuc5Rn/hpGyI6oR9+9uNjTtvEVGEcOzsOJ23DvDrOBI3y Ej7S9Kfw8rB9HHbJ4AsqRalbk0rjIO8PvlkQYz+uMdZIdu2Z0f/WpttQi8kW8dgB wvQYcVh7II+rt9q6nPlFGLdtV5eOzGXHT5j00n8H1MfI2oz9yqlg1gkPWT7gfffY KZSFh6ErbaFpT4JfIZmIS6ocvdXCh7fp6+bdTsd+Yv0wSzuKewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSKFeSUCDUZtcc9raB56CXFghkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFmNjk2NGQtYjExOS0z MThiLTkzYjgtOWM2OTM2YmVmOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb33ag13GbSBxaTGzuVyhpI90V5NHKBrzam6Ddauh6rBL424/+SiyJd 3n759n/grwcY9f/wDEPb7yxpcVRbTcOGPmBs3y0Br7itNYIlm+G/8wE0cVjgTxG9 3MBVWKvcI7neRoHL1rl6Way47U8wK0NYdr0qOhN6mJ10I0p7Xt4B2dygxf0dGDC4 9elX65tPGQ+KXPIPjrlacJkTd6z1XCeSbaAI14+Rxb/OdAaFc23a0sl6aFKppz/B F1gTM2Axj/Qq6CvRB2ttqBgtzrRkPYwBcqZIsyx5n0WFKv2ngQ/jghN+03DAW4hW hVWoA+xEwXQ9CAGvujsWw3ZW+Upu77E= -----END CERTIFICATE-----Generated at Sat Sep 6 05:09:42 2025 by rpki-client