$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa File: 32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa (raw, json) Hash identifier: 1jFzLUxs9mtQeHZ5n439UWDXpGGvAj2gkQawpw2mpuE= Subject key identifier: D5:E4:5B:A1:55:67:36:AA:58:7C:99:B1:5C:98:EB:4C:23:79:F7:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B280A0AB07652252CAC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 35994 IP address blocks: 23.58.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:28:0a:0a:b0:76:52:25:2c:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=5d30aa95-51c2-4336-9dbe-ece6a5c06018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:fd:83:2f:1e:2b:9c:60:8f:69:82:84:53: 12:7c:54:55:dd:10:6b:a4:88:38:1c:d8:fe:e3:5c: 7d:5f:bb:16:0a:5a:cd:ad:69:a6:a5:17:9e:b9:73: f2:85:15:73:c9:10:7b:e8:7f:28:1a:62:a8:93:61: 7c:11:d9:4c:46:0e:57:f0:9f:b5:29:4d:6d:88:ec: 3a:55:11:9b:42:c9:a7:3c:0a:93:05:87:c1:04:4b: a5:c1:08:2b:7e:f2:ea:13:08:85:90:e7:34:00:97: 95:b3:5a:f0:ee:bf:b0:20:1f:c9:97:88:69:30:f3: 61:f0:4d:16:91:3e:af:33:08:d5:cf:e8:e2:98:1e: 2c:41:77:36:f4:99:42:4b:77:45:8e:18:44:89:54: d8:10:4a:36:bb:a0:6f:69:f3:97:2b:85:e7:f8:36: d7:45:66:c2:67:a4:da:5e:c4:1c:2e:5d:b5:8d:fb: f6:6d:e9:7f:4e:ce:99:be:08:bf:b4:29:a9:d9:f4: 39:e3:b6:2a:31:58:a4:98:c0:fe:47:01:53:76:4f: 37:f1:3a:ce:3c:3f:e8:fc:d3:79:7c:34:73:12:55: 6c:65:f0:1a:0e:c7:d5:17:05:95:67:53:2c:3f:fb: f0:da:14:3b:f1:ed:bd:18:74:14:f8:09:38:15:53: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:5B:A1:55:67:36:AA:58:7C:99:B1:5C:98:EB:4C:23:79:F7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0f:e8:98:e1:33:0b:91:af:19:4e:30:2a:74:01:49:8b:9f: 35:4a:b9:37:b5:ca:3b:f2:f4:f6:01:01:0f:ba:23:9e:54:70: 59:5a:27:c2:51:3e:0c:1c:0d:5c:39:d5:94:46:7f:95:c3:c4: 6b:4c:d4:9a:e8:3f:b9:84:b0:19:af:b9:34:78:8a:06:19:60: 40:f7:ce:4f:c1:5a:5d:a7:c3:09:70:dc:b9:e2:88:c4:48:8d: 73:13:de:d4:36:48:88:17:25:9b:47:3b:42:1d:ef:e6:95:56: 5f:42:12:03:b0:1b:63:37:c6:ed:cf:81:b2:2c:45:92:a6:a8: fd:cc:6b:5a:d9:3c:c8:55:4e:05:1d:5c:d1:1a:48:90:53:38: 7e:3c:94:a0:80:41:5e:f0:74:fc:3a:c8:e9:1b:22:d6:cd:0c: 88:73:c3:93:d4:f0:17:b4:91:cb:33:4a:ec:e5:1d:b4:ac:d2: 69:30:9e:34:ca:ed:1a:a2:83:b2:eb:d4:76:f2:8f:e2:af:76: a8:27:ce:75:94:0e:a1:74:9c:f7:d8:d2:6c:a8:4a:89:b5:54: e3:e1:34:b8:83:f1:f2:3e:5b:d7:a0:b0:00:80:17:3b:88:74: 12:ac:ea:35:c3:8f:1a:f2:a9:7f:61:c3:9b:0c:4f:63:31:b1: 24:81:37:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOygKCrB2UiUsrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NWQzMGFhOTUtNTFjMi00MzM2LTlkYmUtZWNlNmE1YzA2MDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6/9gy8eK5xgj2mChFMSfFRV3RBrpIg4HNj+ 41x9X7sWClrNrWmmpReeuXPyhRVzyRB76H8oGmKok2F8EdlMRg5X8J+1KU1tiOw6 VRGbQsmnPAqTBYfBBEulwQgrfvLqEwiFkOc0AJeVs1rw7r+wIB/Jl4hpMPNh8E0W kT6vMwjVz+jimB4sQXc29JlCS3dFjhhEiVTYEEo2u6BvafOXK4Xn+DbXRWbCZ6Ta XsQcLl21jfv2bel/Ts6Zvgi/tCmp2fQ547YqMVikmMD+RwFTdk838TrOPD/o/NN5 fDRzElVsZfAaDsfVFwWVZ1MsP/vw2hQ78e29GHQU+Ak4FVP+rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXkW6FVZzaqWHyZsVyY60wjeffeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJjZGJjYTQtNWI5Yy0z OGFhLWI4OTAtOGU2MmQ0ZDM1N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQP6JjhMwuRrxlOMCp0AUmLnzVKuTe1yjvy9PYBAQ+6I55UcFlaJ8JR PgwcDVw51ZRGf5XDxGtM1JroP7mEsBmvuTR4igYZYED3zk/BWl2nwwlw3LniiMRI jXMT3tQ2SIgXJZtHO0Id7+aVVl9CEgOwG2M3xu3PgbIsRZKmqP3Ma1rZPMhVTgUd XNEaSJBTOH48lKCAQV7wdPw6yOkbItbNDIhzw5PU8Be0kcszSuzlHbSs0mkwnjTK 7Rqig7Lr1Hbyj+KvdqgnznWUDqF0nPfY0myoSom1VOPhNLiD8fI+W9egsACAFzuI dBKs6jXDjxryqX9hw5sMT2MxsSSBN8Y= -----END CERTIFICATE-----Generated at Sun Jun 29 13:34:04 2025 by rpki-client