$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e13d87-6f63-36de-985b-235de77028b3.roa File: 07e13d87-6f63-36de-985b-235de77028b3.roa (raw, json) Hash identifier: 4BLy1mZG4bh/EBaGiHwJ2BYeQTBKlyqedH1oJh+n8Mg= Subject key identifier: 5B:AA:5A:00:94:7C:EC:2F:C7:75:A3:4E:06:F9:0E:F9:91:2C:69:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B3547CD3280B7647A2E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e13d87-6f63-36de-985b-235de77028b3.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.58.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:35:47:cd:32:80:b7:64:7a:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=0b51c73f-93e5-4ab4-acf2-ba639a590863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:ce:3b:76:80:a9:ec:4e:f3:e5:1b:cb:33: c2:6a:1a:38:bf:0e:85:09:74:58:e2:c9:ce:14:59: ff:db:90:c6:97:a4:58:71:b4:53:26:51:c6:e2:da: 58:d7:54:73:66:49:20:f7:0a:d9:d9:ca:36:13:ff: dc:a4:6e:60:d0:2f:dd:ec:90:f8:9e:1b:fc:44:b1: 27:57:99:d5:46:39:ca:c3:ec:bb:4a:89:fe:b7:8e: 27:74:48:1d:9e:85:1a:90:6c:6f:a9:af:d7:d6:fd: f3:e1:ab:a6:54:c9:26:db:8e:4b:6b:9e:9a:b5:3f: e8:22:1d:f7:84:ad:9f:14:4a:f5:20:cb:d8:1f:a7: 5e:ff:dc:86:1a:46:24:3c:1a:1d:47:67:07:bd:45: 00:7a:73:93:c0:3c:19:0e:dd:85:59:62:02:6e:ae: fd:83:14:30:14:4b:08:9c:93:48:15:0c:83:b7:86: f8:57:c6:6b:0e:f0:2f:0a:33:48:8e:7e:de:af:19: 24:dc:2e:60:a9:bd:b8:1b:0d:aa:fb:f6:90:cd:34: 6b:dd:7e:d3:18:0e:d9:d0:5a:b9:6b:99:80:c6:b0: bb:da:d3:6d:af:28:c9:bc:40:dc:97:aa:4b:c9:a1: 97:67:38:33:fd:d5:a0:2d:f5:32:35:b0:15:41:72: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AA:5A:00:94:7C:EC:2F:C7:75:A3:4E:06:F9:0E:F9:91:2C:69:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e13d87-6f63-36de-985b-235de77028b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9d:b0:d8:44:f9:95:02:cc:de:92:6b:fc:e3:ad:bc:ee:ec: 89:7c:83:ae:f6:ac:61:8f:9b:5f:1f:19:71:04:fb:25:7e:ae: 25:45:9b:61:4f:23:77:5c:67:cc:31:b3:0c:ab:c3:85:88:36: 4f:07:2e:59:d4:4d:a4:4c:0f:d9:3f:eb:d2:9d:25:02:74:61: b0:22:04:98:82:13:2c:c4:c3:e7:31:6c:34:c7:90:26:07:d8: 63:b4:4f:d5:4d:15:8e:a2:fb:1b:78:c1:db:2f:9b:39:09:6f: e9:7a:dc:4c:2c:b2:88:d7:27:67:1b:25:9c:c1:25:1b:66:bb: a5:1a:0b:18:74:97:77:0b:0d:b3:99:4e:5d:c3:13:4f:21:57: 20:13:f5:f6:9b:60:66:17:ef:ba:ca:a6:d1:5d:9e:92:19:2a: 48:a4:57:6f:8b:98:36:18:73:30:f5:83:02:25:57:0f:bf:de: e5:5a:6b:74:7a:90:89:73:ea:96:16:67:2b:1b:f9:49:3b:dc: 51:46:9a:38:a7:bd:52:51:47:b2:7d:6d:64:38:b5:f4:c8:fb: c7:f0:46:85:d4:c7:10:20:9d:5e:0a:e2:3e:7a:6d:68:d9:09: b4:97:0c:29:62:c1:d2:f1:87:5e:a6:f9:0c:1e:76:ab:34:da: d9:c1:bb:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzVHzTKAt2R6LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MGI1MWM3M2YtOTNlNS00YWI0LWFjZjItYmE2MzlhNTkwODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9/OO3aAqexO8+UbyzPCaho4vw6FCXRY4snO FFn/25DGl6RYcbRTJlHG4tpY11RzZkkg9wrZ2co2E//cpG5g0C/d7JD4nhv8RLEn V5nVRjnKw+y7Son+t44ndEgdnoUakGxvqa/X1v3z4aumVMkm245La56atT/oIh33 hK2fFEr1IMvYH6de/9yGGkYkPBodR2cHvUUAenOTwDwZDt2FWWICbq79gxQwFEsI nJNIFQyDt4b4V8ZrDvAvCjNIjn7erxkk3C5gqb24Gw2q+/aQzTRr3X7TGA7Z0Fq5 a5mAxrC72tNtryjJvEDcl6pLyaGXZzgz/dWgLfUyNbAVQXIipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuqWgCUfOwvx3WjTgb5DvmRLGlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDdlMTNkODctNmY2My0z NmRlLTk4NWItMjM1ZGU3NzAyOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzoGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2dsNhE+ZUCzN6Sa/zjrbzu7Il8g672rGGPm18fGXEE+yV+riVFm2FP I3dcZ8wxswyrw4WINk8HLlnUTaRMD9k/69KdJQJ0YbAiBJiCEyzEw+cxbDTHkCYH 2GO0T9VNFY6i+xt4wdsvmzkJb+l63EwssojXJ2cbJZzBJRtmu6UaCxh0l3cLDbOZ Tl3DE08hVyAT9fabYGYX77rKptFdnpIZKkikV2+LmDYYczD1gwIlVw+/3uVaa3R6 kIlz6pYWZysb+Uk73FFGmjinvVJRR7J9bWQ4tfTI+8fwRoXUxxAgnV4K4j56bWjZ CbSXDCliwdLxh16m+Qwedqs02tnBuyM= -----END CERTIFICATE-----Generated at Sun Jun 29 14:21:31 2025 by rpki-client