$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeeb47a0-41b4-320e-b062-048b8e0b0394.roa File: aeeb47a0-41b4-320e-b062-048b8e0b0394.roa (raw, json) Hash identifier: QBimNv1tieb6DgdgT5x7yTJErrEZyy6Bf2iA8fY1SDM= Subject key identifier: E2:96:E2:DE:38:58:BD:B8:76:99:ED:F1:7F:7F:AF:CF:94:85:EA:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A15998747E769C5F311DA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeeb47a0-41b4-320e-b062-048b8e0b0394.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.40.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:99:87:47:e7:69:c5:f3:11:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=3135f2b4-23c7-44ae-b4ea-502442da4b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:d9:78:4d:f8:e0:42:7b:ca:4b:09:f0:9c: 34:9e:81:13:33:3d:aa:c5:44:ba:2e:70:2d:01:6d: 2f:30:61:b1:53:94:88:8e:86:d3:06:67:f1:89:ad: d8:c9:60:39:7a:16:20:3d:4f:89:0d:7e:e4:f5:cb: 65:9b:69:c6:1f:3a:f0:33:67:e2:cc:d5:2a:40:e1: f8:e8:66:aa:ea:bf:06:23:e8:20:b4:52:67:42:05: 88:c2:dc:73:ca:fa:ca:4e:c5:f0:11:5b:7c:83:c2: 65:aa:06:02:82:e7:45:f2:af:e2:38:27:1a:0b:1d: c8:25:cc:48:fd:62:65:c0:8e:43:5d:34:37:43:01: 71:b2:18:52:6f:0d:29:a1:56:dc:13:bc:16:b3:9f: a9:ff:d6:c7:1f:15:76:b6:04:bd:f8:4c:f8:e1:6b: cb:87:d6:aa:e4:bf:92:97:f4:47:e7:3c:81:31:c4: c7:09:a1:be:28:33:c6:ab:81:e0:36:58:08:42:41: d9:99:8c:b6:8b:24:9c:02:c4:53:d1:c6:c1:b9:65: 06:79:8d:2f:2c:dc:7e:45:77:6c:39:e6:c0:9e:21: 36:b1:ba:ff:ff:ce:42:08:7c:74:e5:65:61:62:40: 77:c2:47:f6:d3:b1:17:6d:8e:fb:5c:89:de:31:ab: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:96:E2:DE:38:58:BD:B8:76:99:ED:F1:7F:7F:AF:CF:94:85:EA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aeeb47a0-41b4-320e-b062-048b8e0b0394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:8d:80:38:d0:59:56:51:af:31:a7:a8:8c:a7:f4:2a:44:77: 1b:26:f6:a7:1d:c0:17:69:66:22:61:8d:22:5d:fc:44:5e:07: 5e:fd:50:7e:70:11:55:e3:30:c6:e3:a6:c7:5d:8a:fc:b0:3e: 55:bb:ca:85:f2:89:3f:10:67:2f:89:50:66:d3:2c:65:b1:a9: f3:ef:5b:9a:d7:e7:18:82:63:5a:b0:41:38:c2:f0:93:98:13: 71:54:4b:8b:7f:48:e8:5d:80:6a:24:7d:45:82:4a:f7:25:68: 64:e5:53:05:c3:7f:49:82:e8:d7:a6:40:1c:58:90:2f:05:d6: 66:e3:2f:5e:c0:42:54:14:79:7d:e2:31:68:be:3d:6d:d0:26: 9c:c8:a0:8d:0c:e5:a4:81:56:f7:83:18:9b:f4:92:e6:44:dc: fb:79:b1:10:91:1c:36:ba:b5:50:4b:d6:cf:65:6a:09:08:cc: ed:6a:74:6a:7c:40:c5:26:99:63:80:96:a7:44:3d:8b:7b:1a: f1:75:46:9b:c8:3b:2b:b7:e4:65:d8:83:b9:4a:ca:e6:b1:93: a3:83:9c:b2:c1:f0:dc:1c:43:1c:28:05:9a:d0:0a:05:6b:3c: da:34:82:70:7a:a9:a3:c6:14:52:f7:28:52:16:98:c7:8e:26: ea:77:97:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZmHR+dpxfMR2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MzEzNWYyYjQtMjNjNy00NGFlLWI0ZWEtNTAyNDQyZGE0YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHvZeE344EJ7yksJ8Jw0noETMz2qxUS6LnAt AW0vMGGxU5SIjobTBmfxia3YyWA5ehYgPU+JDX7k9ctlm2nGHzrwM2fizNUqQOH4 6Gaq6r8GI+ggtFJnQgWIwtxzyvrKTsXwEVt8g8JlqgYCgudF8q/iOCcaCx3IJcxI /WJlwI5DXTQ3QwFxshhSbw0poVbcE7wWs5+p/9bHHxV2tgS9+Ez44WvLh9aq5L+S l/RH5zyBMcTHCaG+KDPGq4HgNlgIQkHZmYy2iyScAsRT0cbBuWUGeY0vLNx+RXds OebAniE2sbr//85CCHx05WVhYkB3wkf207EXbY77XIneMavLVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKW4t44WL24dpnt8X9/r8+UheqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVlYjQ3YTAtNDFiNC0z MjBlLWIwNjItMDQ4YjhlMGIwMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACONgDjQWVZRrzGnqIyn9CpEdxsm9qcdwBdpZiJhjSJd/EReB179UH5w EVXjMMbjpsddivywPlW7yoXyiT8QZy+JUGbTLGWxqfPvW5rX5xiCY1qwQTjC8JOY E3FUS4t/SOhdgGokfUWCSvclaGTlUwXDf0mC6NemQBxYkC8F1mbjL17AQlQUeX3i MWi+PW3QJpzIoI0M5aSBVveDGJv0kuZE3Pt5sRCRHDa6tVBL1s9lagkIzO1qdGp8 QMUmmWOAlqdEPYt7GvF1RpvIOyu35GXYg7lKyuaxk6ODnLLB8NwcQxwoBZrQCgVr PNo0gnB6qaPGFFL3KFIWmMeOJup3l7w= -----END CERTIFICATE-----Generated at Sun Jun 29 13:47:29 2025 by rpki-client