$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa File: 2f69a741-6e96-3761-aea8-14609458ccb2.roa (raw, json) Hash identifier: EASec+tB8hfxO0j2fSRJrdxCTxfGpor2/b0eCka9YpQ= Subject key identifier: EF:D1:68:66:2E:E5:74:DD:7D:70:8E:D9:1E:25:71:0F:83:B9:75:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159946C348C07E72E8A9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.40.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:99:46:c3:48:c0:7e:72:e8:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=c1d6cf7e-f294-44d2-a294-98a7aa8101b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d4:41:e4:c6:60:1e:14:ea:e1:9f:bd:4c:19: f3:91:4f:af:55:e0:6c:da:6d:1f:55:ee:93:d2:73: 5a:34:dc:d6:12:54:f0:75:58:ed:a5:5e:a6:5c:05: 8a:4b:55:9b:b5:a0:ba:1e:3c:60:08:73:62:d6:2c: ec:06:4b:73:1c:e5:b1:8f:a7:12:07:f8:e2:1b:82: 46:48:b2:d2:5c:cf:f9:b4:7f:f7:84:d6:2b:ae:33: c4:2d:02:42:98:21:cc:0d:16:23:57:d9:17:11:dc: d9:d9:cf:9f:c8:fd:b6:e3:58:b3:fd:c1:a9:0a:1f: ad:12:70:26:18:f2:0e:68:ae:c8:c5:92:d0:cb:4c: c1:7c:00:cb:e7:db:57:f5:12:de:b3:f4:f4:12:64: 5c:d0:9e:2b:d1:6f:4b:3a:a7:d6:06:8b:4c:55:aa: 3f:84:80:ff:62:7b:ca:6f:62:13:3e:bb:03:89:b4: 2b:0c:06:d3:a9:bf:06:86:2b:1c:8b:e2:a6:fa:20: 70:cd:11:b4:03:93:74:e7:d4:e3:5a:fa:dc:21:98: 95:0c:3a:d7:7f:f9:9c:58:45:28:54:38:cf:e0:b7: b8:46:0b:b8:34:6a:b8:05:d6:6e:41:0a:6b:2e:c7: 7b:09:d9:9d:c4:38:8c:22:86:fe:50:70:3b:4f:b9: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D1:68:66:2E:E5:74:DD:7D:70:8E:D9:1E:25:71:0F:83:B9:75:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a1:7d:de:65:da:87:f2:d1:cd:a2:f2:5d:3f:ef:c1:9e:71: b0:c8:6c:b2:49:2d:7c:66:ab:2f:79:a8:50:24:62:e8:8a:fd: 18:6e:d5:27:46:71:57:e4:ae:37:c3:f4:44:24:49:54:a7:a6: 87:d3:fe:88:0a:dc:f4:3e:2e:b9:6f:f5:2e:08:4b:39:bc:f2: f5:d3:b8:98:57:a9:ee:79:3c:47:ca:0b:3f:80:5e:ef:35:c2: 62:88:75:47:22:65:e7:49:8c:a5:33:98:0c:f3:a9:93:38:fc: 64:2a:57:4b:c2:65:68:87:4c:d8:08:be:97:f3:75:24:4c:53: f1:ad:06:c6:65:18:82:49:10:d7:84:35:df:f2:d1:c6:ff:49: 4b:fa:9a:a0:92:95:5e:b2:c9:36:47:c5:4d:c2:5c:2e:ac:a3: 2e:43:68:b8:15:1f:03:dd:09:36:fd:75:76:da:5c:92:e3:fa: 1b:5f:05:15:c9:d2:eb:12:f5:47:dc:36:9b:02:7e:5a:87:a0: ba:29:c1:0b:8f:81:fe:58:0a:24:9c:2a:14:41:0d:e8:8c:56: e3:16:54:3d:6e:5d:06:51:44:d4:8d:3b:9a:e9:eb:e8:50:66: c3:d2:55:26:2d:b6:c4:0a:36:92:9e:dd:7a:c5:cf:77:da:f2: ba:06:19:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZlGw0jAfnLoqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YzFkNmNmN2UtZjI5NC00NGQyLWEyOTQtOThhN2FhODEwMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNRB5MZgHhTq4Z+9TBnzkU+vVeBs2m0fVe6T 0nNaNNzWElTwdVjtpV6mXAWKS1WbtaC6HjxgCHNi1izsBktzHOWxj6cSB/jiG4JG SLLSXM/5tH/3hNYrrjPELQJCmCHMDRYjV9kXEdzZ2c+fyP2241iz/cGpCh+tEnAm GPIOaK7IxZLQy0zBfADL59tX9RLes/T0EmRc0J4r0W9LOqfWBotMVao/hID/YnvK b2ITPrsDibQrDAbTqb8Ghisci+Km+iBwzRG0A5N059TjWvrcIZiVDDrXf/mcWEUo VDjP4Le4Rgu4NGq4BdZuQQprLsd7CdmdxDiMIob+UHA7T7l6zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/RaGYu5XTdfXCO2R4lcQ+DuXXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY2OWE3NDEtNmU5Ni0z NzYxLWFlYTgtMTQ2MDk0NThjY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2hfd5l2ofy0c2i8l0/78GecbDIbLJJLXxmqy95qFAkYuiK/Rhu1SdG cVfkrjfD9EQkSVSnpofT/ogK3PQ+Lrlv9S4ISzm88vXTuJhXqe55PEfKCz+AXu81 wmKIdUciZedJjKUzmAzzqZM4/GQqV0vCZWiHTNgIvpfzdSRMU/GtBsZlGIJJENeE Nd/y0cb/SUv6mqCSlV6yyTZHxU3CXC6soy5DaLgVHwPdCTb9dXbaXJLj+htfBRXJ 0usS9UfcNpsCflqHoLopwQuPgf5YCiScKhRBDeiMVuMWVD1uXQZRRNSNO5rp6+hQ ZsPSVSYttsQKNpKe3XrFz3fa8roGGZo= -----END CERTIFICATE-----Generated at Tue Jul 1 03:18:02 2025 by rpki-client