$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa File: e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa (raw, json) Hash identifier: nrGPWyQvFU7K0ceryhCfG2XErvdudqmFeVj1y7Pvi6o= Subject key identifier: 38:E3:62:C0:48:70:66:2C:22:5F:92:E3:93:4A:04:99:21:02:8E:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849C20B49D9FE89E766529FE670 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20940 IP address blocks: 23.40.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0b:49:d9:fe:89:e7:66:52:9f:e6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=9068c2eb-b53f-4c5d-8d0e-2833e29331ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:aa:18:c2:7f:f7:1a:bf:4e:af:91:35:2b: d0:a1:ad:34:32:b3:b0:ea:bf:80:3a:40:94:97:39: 66:cd:a2:07:a4:75:2a:8a:6d:f5:f0:a1:09:93:9f: c9:8d:a8:e1:4b:b2:a8:2e:f4:96:f1:e4:97:c9:5b: 6a:e2:57:0f:91:35:e6:67:be:17:28:9f:d3:63:b2: c3:d4:3b:e7:92:05:7d:b2:95:e4:a7:e3:7d:fe:0c: 14:5d:aa:43:75:60:83:9a:f7:ae:46:07:0d:b2:3b: 06:54:90:1a:f4:0b:8e:ce:39:c5:8e:72:37:1c:68: 85:23:64:af:ac:16:ab:cd:73:13:01:33:ca:70:71: f8:f2:0d:58:fc:27:2c:95:9c:bf:85:96:52:b0:9a: d6:df:2e:26:52:84:7e:14:48:dd:4a:6f:b1:0b:5e: 7c:f6:73:2e:6b:50:33:2d:90:6c:c1:b2:1b:1c:2b: f4:07:c6:55:ba:4f:11:58:bb:e7:2c:5c:fc:8d:e9: 53:c3:1a:32:2c:65:14:6c:f7:26:2b:50:62:71:af: 62:a7:41:ef:8b:cc:4b:4a:85:20:09:ea:8d:a3:19: 46:0a:40:65:09:a1:5b:b5:e1:62:50:94:db:87:84: 9b:bc:8b:ff:33:96:b4:0d:3d:af:29:93:57:4f:10: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E3:62:C0:48:70:66:2C:22:5F:92:E3:93:4A:04:99:21:02:8E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cb:ec:f6:c6:2c:e5:b0:f1:8e:b7:0e:dc:51:e1:f7:26:6b: 23:89:cc:cc:8d:65:9b:ba:fe:1a:7a:82:fb:1e:db:0a:ca:41: b6:a0:e4:a3:3c:5f:a1:e4:c2:a1:69:e3:fc:6b:72:9e:fa:94: a2:15:9c:77:b8:4c:f7:1b:60:75:88:73:55:10:fb:1d:4f:86: c1:c4:f6:81:be:ca:7d:64:e6:f5:cf:fb:5b:56:ce:ae:12:87: 71:c2:24:ca:20:bb:82:d9:cc:3a:f5:c7:ec:97:06:09:4c:b8: 1f:fe:83:bf:aa:50:dd:4a:1a:7c:d7:64:4e:37:6b:8b:6a:93: 19:f8:d7:f5:4d:c9:fc:3a:97:1a:cb:b5:54:a8:cc:c0:a0:c1: 3d:10:d3:c5:ed:68:72:6d:15:0f:83:04:d6:c5:a7:d3:44:3e: e2:02:74:9f:1b:60:5a:78:a0:e7:aa:3d:cf:26:0a:3b:e0:e0: f9:8f:59:3e:d2:a1:c4:10:7b:ce:a4:2d:9d:4d:eb:12:dd:05: 91:3d:6e:33:45:b7:9b:95:b9:1d:b8:ff:ab:a2:8a:af:9a:62: ba:8a:1f:37:5a:95:ee:26:2f:2a:5d:e0:06:33:39:9e:56:76: 76:f0:43:95:81:5c:b3:4f:3e:cf:c1:d3:d0:e8:33:63:8f:7e: 29:ec:c6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCC0nZ/onnZlKf5nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OTA2OGMyZWItYjUzZi00YzVkLThkMGUtMjgzM2UyOTMzMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqOqGMJ/9xq/Tq+RNSvQoa00MrOw6r+AOkCU lzlmzaIHpHUqim318KEJk5/JjajhS7KoLvSW8eSXyVtq4lcPkTXmZ74XKJ/TY7LD 1DvnkgV9spXkp+N9/gwUXapDdWCDmveuRgcNsjsGVJAa9AuOzjnFjnI3HGiFI2Sv rBarzXMTATPKcHH48g1Y/CcslZy/hZZSsJrW3y4mUoR+FEjdSm+xC1589nMua1Az LZBswbIbHCv0B8ZVuk8RWLvnLFz8jelTwxoyLGUUbPcmK1Bica9ip0Hvi8xLSoUg CeqNoxlGCkBlCaFbteFiUJTbh4SbvIv/M5a0DT2vKZNXTxBxtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjjYsBIcGYsIl+S45NKBJkhAo5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQzNGViMjQtODNlZS0z NzcwLWI4NmItZjNhNjFmYjVjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrL7PbGLOWw8Y63DtxR4fcmayOJzMyNZZu6/hp6gvse2wrKQbag5KM8 X6HkwqFp4/xrcp76lKIVnHe4TPcbYHWIc1UQ+x1PhsHE9oG+yn1k5vXP+1tWzq4S h3HCJMogu4LZzDr1x+yXBglMuB/+g7+qUN1KGnzXZE43a4tqkxn41/VNyfw6lxrL tVSozMCgwT0Q08XtaHJtFQ+DBNbFp9NEPuICdJ8bYFp4oOeqPc8mCjvg4PmPWT7S ocQQe86kLZ1N6xLdBZE9bjNFt5uVuR24/6uiiq+aYrqKHzdale4mLypd4AYzOZ5W dnbwQ5WBXLNPPs/B09DoM2OPfinsxiY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:11 2025 by rpki-client