$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fb9e516-08ce-38c4-bcc1-aa1fb0df389f.roa File: 0fb9e516-08ce-38c4-bcc1-aa1fb0df389f.roa (raw, json) Hash identifier: kkTrC7y2Jhh06rqNm5A0GdoZxA3hxBw2tge5fHSN9CQ= Subject key identifier: 41:5E:1D:0E:3B:CF:D6:AB:47:5F:A5:89:40:B1:2A:42:AE:D6:F3:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B2818AB6CCB5C21BC6A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fb9e516-08ce-38c4-bcc1-aa1fb0df389f.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.58.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:28:18:ab:6c:cb:5c:21:bc:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=2dcea816-9c1b-447f-ac36-b1f913f8bb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:1c:83:06:43:fe:f7:a9:cb:46:07:68:d3: b2:4b:25:f5:f8:a9:35:06:dd:8f:d1:30:4c:c1:91: 10:33:f3:e7:54:78:92:22:d4:7c:24:05:24:41:8c: 36:c6:62:b7:c8:7d:09:fd:7c:36:76:f0:32:f3:21: ea:12:73:ff:a6:fa:13:7e:a5:94:31:4c:a1:89:32: 88:ad:16:ba:90:6b:a4:32:93:62:32:b1:b7:a1:c0: 80:41:b3:fa:77:4a:19:3c:9b:e7:90:7e:8e:8e:03: ea:44:73:c5:da:62:c3:f9:ca:27:a4:00:71:d5:7b: 14:7f:20:24:fb:05:cd:e6:bd:1f:d6:02:5b:7d:4c: ee:24:d2:d9:45:9c:b7:47:58:0c:9f:68:2e:e3:92: 4a:1f:f9:8b:7a:1f:70:8b:83:8c:1a:0b:36:50:53: 25:b9:5c:c9:a0:cf:e2:e1:d6:08:54:5c:a4:fe:f2: c2:1c:13:2f:9b:7a:75:ea:5a:ba:67:02:7a:6d:84: 55:2f:f6:7c:21:d9:2b:a8:98:93:a1:07:83:6a:fa: 75:cf:e8:e6:b5:74:09:ce:b1:0e:61:8d:2b:f1:9d: 7c:5d:8f:eb:e9:f1:20:95:d4:dc:98:fe:82:49:bd: 52:0e:c4:80:4d:52:44:d0:26:c4:c3:29:e9:4d:2e: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:1D:0E:3B:CF:D6:AB:47:5F:A5:89:40:B1:2A:42:AE:D6:F3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fb9e516-08ce-38c4-bcc1-aa1fb0df389f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7c:c0:8d:35:10:66:38:6a:c2:3e:3a:92:91:82:a6:4e:f5: 81:3b:2b:76:e4:f5:05:80:38:d5:94:8a:b6:b3:33:a0:7c:44: d8:d7:a6:be:3c:3b:16:10:c8:ac:b4:8e:6a:d6:b8:25:14:d0: 03:d5:57:ad:09:54:91:be:3a:6c:a6:6e:10:b3:54:13:b4:34: 00:b3:3b:86:89:d2:19:10:e0:9e:0a:4d:af:fd:a4:74:8a:1f: 93:c1:03:5d:d3:a0:bc:36:3f:d1:53:8a:b1:09:74:da:ee:82: 8d:5e:83:8a:c3:55:19:9c:89:70:a4:0f:4d:50:3f:8d:b2:45: df:3b:69:e0:f4:00:7a:0b:6e:c3:41:05:cd:c7:5e:71:ed:0a: 84:cc:9b:a5:ec:08:31:ca:f9:15:93:fb:c9:8a:73:60:16:b2: 6c:a1:22:05:2d:95:e3:b7:b0:8d:44:97:57:01:e8:cb:50:aa: 82:20:e4:8c:19:ea:fc:e6:cc:4d:ca:01:97:70:d9:8a:d1:4b: ec:c2:e4:9e:34:cf:54:ae:0d:3d:d8:34:1a:d0:b6:5d:3c:61: 00:ed:da:46:9c:92:87:e7:e5:33:86:49:c5:6c:12:6d:73:59: a1:a6:fc:d8:3f:e2:da:7f:f9:25:58:5c:ba:bf:98:49:e4:c5: 10:25:a2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOygYq2zLXCG8agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MmRjZWE4MTYtOWMxYi00NDdmLWFjMzYtYjFmOTEzZjhiYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9gcgwZD/vepy0YHaNOySyX1+Kk1Bt2P0TBM wZEQM/PnVHiSItR8JAUkQYw2xmK3yH0J/Xw2dvAy8yHqEnP/pvoTfqWUMUyhiTKI rRa6kGukMpNiMrG3ocCAQbP6d0oZPJvnkH6OjgPqRHPF2mLD+conpABx1XsUfyAk +wXN5r0f1gJbfUzuJNLZRZy3R1gMn2gu45JKH/mLeh9wi4OMGgs2UFMluVzJoM/i 4dYIVFyk/vLCHBMvm3p16lq6ZwJ6bYRVL/Z8IdkrqJiToQeDavp1z+jmtXQJzrEO YY0r8Z18XY/r6fEgldTcmP6CSb1SDsSATVJE0CbEwynpTS4UGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFeHQ47z9arR1+liUCxKkKu1vN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGZiOWU1MTYtMDhjZS0z OGM0LWJjYzEtYWExZmIwZGYzODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD98wI01EGY4asI+OpKRgqZO9YE7K3bk9QWAONWUirazM6B8RNjXpr48 OxYQyKy0jmrWuCUU0APVV60JVJG+OmymbhCzVBO0NACzO4aJ0hkQ4J4KTa/9pHSK H5PBA13ToLw2P9FTirEJdNrugo1eg4rDVRmciXCkD01QP42yRd87aeD0AHoLbsNB Bc3HXnHtCoTMm6XsCDHK+RWT+8mKc2AWsmyhIgUtleO3sI1El1cB6MtQqoIg5IwZ 6vzmzE3KAZdw2YrRS+zC5J40z1SuDT3YNBrQtl08YQDt2kackofn5TOGScVsEm1z WaGm/Ng/4tp/+SVYXLq/mEnkxRAlojk= -----END CERTIFICATE-----Generated at Sun Jun 29 13:25:27 2025 by rpki-client