$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa File: 606a4411-5047-3e42-9ccf-b65d55d53a12.roa (raw, json) Hash identifier: /FZ0HnFR+CGO0Fha1Q0iu5adcY0SIVxtTaelTrW2Pl0= Subject key identifier: D5:CE:34:57:5F:F4:2B:1B:F4:4C:07:AA:70:D1:BE:FA:D8:AF:F7:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD3A11C602ED73171802DA300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 55644 IP address blocks: 23.40.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:1c:60:2e:d7:31:71:80:2d:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=a325c052-e616-45ad-971c-e184e3f0e364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:81:81:bd:63:ce:f2:e2:fd:94:65:04:2c: 84:e1:24:21:a9:2e:0a:cb:7a:4d:f8:29:e5:68:4a: 65:18:ae:18:71:0c:1f:ea:52:d4:a1:76:51:8e:7f: 15:9a:12:b5:75:06:79:0f:10:4f:86:b1:35:1d:4f: a3:75:0d:68:68:c0:ab:2b:24:64:7c:55:c2:e7:90: 67:21:f3:3d:93:23:0b:72:b6:17:3c:98:f0:a6:af: a8:71:43:e9:be:d0:e1:bc:f1:41:a6:53:16:e7:7b: 8b:17:e3:6d:09:f1:47:e4:de:e1:eb:f5:b1:a3:02: d6:4f:cc:77:b5:6a:5f:11:09:66:15:5e:a7:12:cc: 3a:e1:fe:be:66:3e:d1:79:21:50:f2:5d:73:21:7f: 7e:29:51:6b:63:ec:56:7f:cf:d1:64:7b:9d:52:34: 52:d4:86:53:c4:7b:6b:59:a8:4e:c4:9c:a0:4a:92: 5c:25:45:88:0e:87:fb:7e:d5:38:10:d8:fd:0a:a0: 7b:75:52:2e:ba:27:d2:70:27:7b:8a:d6:14:4c:4b: df:4d:b3:78:43:5c:cd:77:b4:4c:eb:14:75:f5:de: 14:8f:f3:fe:73:f8:c5:c9:b5:c9:e7:1f:1c:b4:71: 0d:53:66:35:d2:62:51:0c:86:d1:4a:51:1d:ae:07: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CE:34:57:5F:F4:2B:1B:F4:4C:07:AA:70:D1:BE:FA:D8:AF:F7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2f:96:f8:cf:12:08:d7:e5:01:2a:ba:c7:26:11:e7:cf:4c: 3c:ad:02:b2:10:ea:b5:eb:ae:f6:8b:26:cc:46:e1:3f:59:d9: 72:ce:54:8d:78:c9:6e:38:10:4f:57:8c:a4:2c:93:2b:65:06: f4:a6:d6:03:b3:22:16:60:f0:04:35:6a:a8:94:4b:8b:ab:66: f6:90:9b:bd:dc:56:32:cf:8e:c6:dc:a4:d9:44:8c:77:2c:27: 20:59:48:36:91:30:17:51:a0:aa:ac:2a:31:2b:0e:3b:92:6e: 4d:2c:13:67:0c:9f:9c:7e:43:76:12:e1:86:30:82:f3:cb:9e: 45:6d:80:68:08:2b:db:12:cf:69:3b:78:8f:64:c1:ca:59:47: 69:0f:bc:f7:a5:56:08:7d:67:aa:5b:c4:cb:5f:8e:16:dd:2d: 84:9f:38:ac:6c:29:a4:41:ed:55:9d:a6:fd:16:0c:eb:ed:cb: 15:7d:bc:1a:2f:81:5f:6a:cb:db:ca:f0:67:7d:86:0c:0b:41: 5d:05:df:54:69:36:be:9d:a1:9e:bc:00:aa:24:f9:b9:0f:e8: 05:0f:da:5f:17:97:06:1e:2f:54:8f:28:6c:c6:54:c4:ca:35: ea:05:79:35:e5:b8:23:27:4d:28:cb:aa:10:83:7a:a5:b7:40: a8:ad:b3:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToRxgLtcxcYAtowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YTMyNWMwNTItZTYxNi00NWFkLTk3MWMtZTE4NGUzZjBlMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywWBgb1jzvLi/ZRlBCyE4SQhqS4Ky3pN+Cnl aEplGK4YcQwf6lLUoXZRjn8VmhK1dQZ5DxBPhrE1HU+jdQ1oaMCrKyRkfFXC55Bn IfM9kyMLcrYXPJjwpq+ocUPpvtDhvPFBplMW53uLF+NtCfFH5N7h6/WxowLWT8x3 tWpfEQlmFV6nEsw64f6+Zj7ReSFQ8l1zIX9+KVFrY+xWf8/RZHudUjRS1IZTxHtr WahOxJygSpJcJUWIDof7ftU4ENj9CqB7dVIuuifScCd7itYUTEvfTbN4Q1zNd7RM 6xR19d4Uj/P+c/jFybXJ5x8ctHENU2Y10mJRDIbRSlEdrgfaFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXONFdf9Csb9EwHqnDRvvrYr/d+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjA2YTQ0MTEtNTA0Ny0z ZTQyLTljY2YtYjY1ZDU1ZDUzYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMvlvjPEgjX5QEquscmEefPTDytArIQ6rXrrvaLJsxG4T9Z2XLOVI14 yW44EE9XjKQskytlBvSm1gOzIhZg8AQ1aqiUS4urZvaQm73cVjLPjsbcpNlEjHcs JyBZSDaRMBdRoKqsKjErDjuSbk0sE2cMn5x+Q3YS4YYwgvPLnkVtgGgIK9sSz2k7 eI9kwcpZR2kPvPelVgh9Z6pbxMtfjhbdLYSfOKxsKaRB7VWdpv0WDOvtyxV9vBov gV9qy9vK8Gd9hgwLQV0F31RpNr6doZ68AKok+bkP6AUP2l8XlwYeL1SPKGzGVMTK NeoFeTXluCMnTSjLqhCDeqW3QKits3U= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:28 2025 by rpki-client