$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d23f69b6-c8c7-32b3-9f7f-79802125af17.roa File: d23f69b6-c8c7-32b3-9f7f-79802125af17.roa (raw, json) Hash identifier: 4+vq7bhEpUsMt6zV6C95bsph51gkGqq2Kt0R1FPDwHo= Subject key identifier: 2C:F5:0F:E8:FC:7F:87:0A:E1:CB:DD:62:11:28:05:C1:D7:5B:BC:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A1598BFC87F131C41939860 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d23f69b6-c8c7-32b3-9f7f-79802125af17.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.40.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:98:bf:c8:7f:13:1c:41:93:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=f7ca2380-58cc-4ba6-ad36-4b5445435628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a2:f0:12:f6:47:ed:5c:95:af:18:09:b4:96: b6:70:b3:f6:db:47:6b:4e:9b:56:a0:02:e3:21:d6: ab:dd:dd:38:b7:ec:56:3e:78:57:1f:0f:09:6c:01: c8:84:30:2a:8d:52:0a:c0:22:32:ee:55:27:c6:e0: 4f:45:2f:24:81:a5:7d:ca:1f:5d:d5:93:15:bf:47: 19:bd:ea:8f:a2:5c:94:53:a3:e5:f9:38:c8:02:a7: a0:91:63:9d:e8:4f:bc:9c:a7:5a:7a:bf:f8:a8:cf: 45:1b:ff:44:1a:2d:7b:23:4f:93:8e:01:7a:8f:35: 2f:02:f5:10:07:97:7a:75:b9:13:a8:16:c6:8b:79: fc:fb:18:a8:4d:f3:49:08:78:3c:82:19:d0:4b:04: df:bc:98:d2:a1:00:6b:6b:e2:0d:a4:5e:c4:e8:bb: 41:bd:16:b9:8d:a3:2b:55:1d:2d:af:58:d8:3b:2e: 37:83:ee:65:4b:1f:5b:47:d0:77:6e:0e:0d:21:a2: 75:24:76:b5:dd:56:83:5f:3a:7d:a5:be:ad:fa:98: 95:21:fe:1a:08:5f:02:61:65:3a:2f:7d:1c:6b:ed: 73:7c:93:f9:c0:1a:65:aa:19:cb:37:50:ad:ef:61: 21:ea:6e:18:9e:17:5f:1d:9b:6b:af:a8:df:69:fe: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F5:0F:E8:FC:7F:87:0A:E1:CB:DD:62:11:28:05:C1:D7:5B:BC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d23f69b6-c8c7-32b3-9f7f-79802125af17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:77:74:77:46:b6:ed:b2:b3:51:87:61:83:b5:d1:97:bd:db: 30:e7:d8:a6:08:55:ab:3b:73:20:5c:c4:38:92:d0:4f:de:f9: 4a:54:1b:9b:c3:2f:de:e8:fc:00:7a:5d:b8:0a:52:af:2f:d1: f3:3f:13:a2:7c:38:d5:ff:42:de:92:69:af:63:36:ec:84:3e: fb:bd:6c:93:23:95:03:07:32:a4:b1:86:5e:bf:33:a3:01:c1: 3f:c5:7f:df:06:a0:c6:58:06:e4:d9:6d:44:49:7b:af:79:8a: 7e:72:79:b0:b2:bb:f3:a4:15:69:e7:33:61:bf:3c:5e:55:72: 61:64:03:d3:0f:b3:4d:26:4c:67:f9:b6:95:27:90:b1:8e:93: b9:a7:0d:91:7c:c9:99:23:eb:cc:22:2c:d9:34:2b:99:fa:6a: 43:a9:06:91:a0:08:39:6c:70:8b:10:42:18:9c:f3:65:9d:02: f8:c0:d6:98:78:00:c2:87:71:04:b3:b3:54:18:ca:d6:86:d4: 94:cd:8f:ec:b7:7d:f8:fa:60:ad:2f:6b:e2:c5:e4:b1:88:bb: 35:31:aa:35:75:b2:3d:09:f6:26:30:75:68:31:a7:4e:50:21: 42:5b:72:d1:5d:49:35:ef:c6:66:24:7c:db:0c:17:b4:e1:82: a6:b6:72:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZi/yH8THEGTmGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZjdjYTIzODAtNThjYy00YmE2LWFkMzYtNGI1NDQ1NDM1NjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqLwEvZH7VyVrxgJtJa2cLP220drTptWoALj Idar3d04t+xWPnhXHw8JbAHIhDAqjVIKwCIy7lUnxuBPRS8kgaV9yh9d1ZMVv0cZ veqPolyUU6Pl+TjIAqegkWOd6E+8nKdaer/4qM9FG/9EGi17I0+TjgF6jzUvAvUQ B5d6dbkTqBbGi3n8+xioTfNJCHg8ghnQSwTfvJjSoQBra+INpF7E6LtBvRa5jaMr VR0tr1jYOy43g+5lSx9bR9B3bg4NIaJ1JHa13VaDXzp9pb6t+piVIf4aCF8CYWU6 L30ca+1zfJP5wBplqhnLN1Ct72Eh6m4YnhdfHZtrr6jfaf63cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCz1D+j8f4cK4cvdYhEoBcHXW7zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDIzZjY5YjYtYzhjNy0z MmIzLTlmN2YtNzk4MDIxMjVhZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFygQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH13dHdGtu2ys1GHYYO10Ze92zDn2KYIVas7cyBcxDiS0E/e+UpUG5vD L97o/AB6XbgKUq8v0fM/E6J8ONX/Qt6Saa9jNuyEPvu9bJMjlQMHMqSxhl6/M6MB wT/Ff98GoMZYBuTZbURJe695in5yebCyu/OkFWnnM2G/PF5VcmFkA9MPs00mTGf5 tpUnkLGOk7mnDZF8yZkj68wiLNk0K5n6akOpBpGgCDlscIsQQhic82WdAvjA1ph4 AMKHcQSzs1QYytaG1JTNj+y3ffj6YK0va+LF5LGIuzUxqjV1sj0J9iYwdWgxp05Q IUJbctFdSTXvxmYkfNsMF7Thgqa2cu8= -----END CERTIFICATE-----Generated at Sun Jun 29 12:43:45 2025 by rpki-client