$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b76f7f-f92b-3685-bc06-ae9bc92772c1.roa File: 32b76f7f-f92b-3685-bc06-ae9bc92772c1.roa (raw, json) Hash identifier: 6n2S2wSs/YyIWQ4G6hmxCZBbwWRzjdrioiKcvnKOh3U= Subject key identifier: 90:E5:DB:7A:F9:A6:6E:1D:73:5D:D2:7D:A3:E9:FF:27:E6:7D:8E:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849B14A358780B455D060CE3C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b76f7f-f92b-3685-bc06-ae9bc92772c1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 23.40.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:35:87:80:b4:55:d0:60:ce:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4f697880-2c81-4fb0-98fe-ebc5e651ad79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:bd:e9:b2:ea:fa:45:a1:b1:8a:6b:cf:9b: de:1b:28:d6:f8:fd:50:e2:e2:49:63:e4:8a:d9:06: 34:f5:15:82:4d:1f:f1:16:c5:9a:63:69:d5:db:ef: d0:1b:65:19:ee:bc:c0:49:ec:7e:42:8c:e1:b4:86: 8d:76:12:1d:3e:44:70:be:14:33:43:54:6c:c0:5a: 9d:49:1d:d7:4a:e7:19:7c:62:94:e2:79:67:ea:4f: 10:b6:f5:d3:0d:08:de:0b:6f:3b:66:7d:4c:a7:21: e5:c6:e9:44:16:29:11:ce:85:50:57:db:d1:6a:db: 8c:db:5a:f5:c4:df:34:a2:cd:4b:75:2d:a0:33:7b: 6f:f1:8c:58:59:4a:b3:b3:99:f2:d5:ce:0f:8e:6c: 64:1e:54:82:50:b2:9b:67:b7:0a:60:9b:ed:76:ed: 49:36:03:b6:01:6a:46:a0:0a:98:7e:68:2a:9a:18: a4:66:33:b8:89:2f:3d:09:b0:b9:63:25:fb:1d:5a: 3f:61:41:af:89:1f:28:14:8e:7f:03:e0:ee:ed:31: 49:ed:48:0c:99:49:e3:c4:c0:61:3c:d3:16:f8:9b: 32:0b:61:73:a0:1f:c4:8e:42:5f:a3:52:8d:20:8a: d9:ce:0d:7d:9c:fe:12:a5:cc:09:3e:4b:e3:94:8a: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E5:DB:7A:F9:A6:6E:1D:73:5D:D2:7D:A3:E9:FF:27:E6:7D:8E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b76f7f-f92b-3685-bc06-ae9bc92772c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f4:29:cf:2e:dc:a9:fa:00:ef:78:17:aa:12:46:a9:f6:d4: 01:36:f2:da:84:02:92:33:8d:11:ad:2a:7b:a1:04:db:5e:d9: 02:fb:bf:ec:4c:2c:fd:c8:9b:04:0a:ad:f4:60:7f:53:e7:8a: 89:3e:21:10:ec:e0:15:b7:aa:40:84:14:0a:42:29:f3:fe:13: b2:ed:ce:60:0a:43:c8:bd:f0:38:03:8f:37:6a:60:dd:7b:e1: bd:c9:9a:66:05:a0:29:69:22:dc:b4:6d:37:c4:03:d5:48:03: f8:58:67:75:05:1d:10:52:93:c2:d3:f5:92:aa:67:a0:15:f0: 63:48:d2:61:b3:08:cf:31:87:e9:b4:48:9d:83:15:54:53:4b: 64:3c:6a:46:ff:e2:29:98:c7:c7:49:69:79:ae:e8:eb:1e:d1: 28:33:ad:af:94:59:d0:b4:b1:dd:08:0c:d6:e3:d9:01:3b:0c: d6:20:68:31:fc:0d:c8:b1:23:ce:3d:4f:7d:78:96:dd:4b:1d: eb:42:52:31:ad:d9:c8:20:d1:28:b8:8c:0f:52:fd:a6:02:8a: 1d:74:46:26:96:bb:50:c4:57:26:62:86:77:b8:79:42:f7:95: 62:90:f0:9d:b1:f0:54:aa:a7:4b:81:e8:20:b2:f6:25:a3:70: e3:67:76:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjWHgLRV0GDOPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGY2OTc4ODAtMmM4MS00ZmIwLTk4ZmUtZWJjNWU2NTFhZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzi96bLq+kWhsYprz5veGyjW+P1Q4uJJY+SK 2QY09RWCTR/xFsWaY2nV2+/QG2UZ7rzASex+QozhtIaNdhIdPkRwvhQzQ1RswFqd SR3XSucZfGKU4nln6k8QtvXTDQjeC287Zn1MpyHlxulEFikRzoVQV9vRatuM21r1 xN80os1LdS2gM3tv8YxYWUqzs5ny1c4PjmxkHlSCULKbZ7cKYJvtdu1JNgO2AWpG oAqYfmgqmhikZjO4iS89CbC5YyX7HVo/YUGviR8oFI5/A+Du7TFJ7UgMmUnjxMBh PNMW+JsyC2FzoB/EjkJfo1KNIIrZzg19nP4SpcwJPkvjlIqcqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDl23r5pm4dc13SfaPp/yfmfY4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJiNzZmN2YtZjkyYi0z Njg1LWJjMDYtYWU5YmM5Mjc3MmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE70Kc8u3Kn6AO94F6oSRqn21AE28tqEApIzjRGtKnuhBNte2QL7v+xM LP3ImwQKrfRgf1Pniok+IRDs4BW3qkCEFApCKfP+E7LtzmAKQ8i98DgDjzdqYN17 4b3JmmYFoClpIty0bTfEA9VIA/hYZ3UFHRBSk8LT9ZKqZ6AV8GNI0mGzCM8xh+m0 SJ2DFVRTS2Q8akb/4imYx8dJaXmu6Ose0Sgzra+UWdC0sd0IDNbj2QE7DNYgaDH8 DcixI849T314lt1LHetCUjGt2cgg0Si4jA9S/aYCih10RiaWu1DEVyZihne4eUL3 lWKQ8J2x8FSqp0uB6CCy9iWjcONndno= -----END CERTIFICATE-----Generated at Mon May 5 06:38:39 2025 by rpki-client