$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/357f5f05-28cf-3164-adb9-c81bc0f8563a.roa File: 357f5f05-28cf-3164-adb9-c81bc0f8563a.roa (raw, json) Hash identifier: Kb4+EJQuCwx4alxbvtn/QwUF5sOEqjLHEcd5P0ymKYw= Subject key identifier: CA:1E:7D:8B:A9:43:1F:94:EE:3E:E9:79:B0:80:C2:F9:B2:F7:6A:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B35D66399ED594343BC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/357f5f05-28cf-3164-adb9-c81bc0f8563a.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.58.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:35:d6:63:99:ed:59:43:43:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=50dbc1f7-6cc1-4cea-8f01-5ee96e0a82c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:93:8a:91:89:f0:83:48:12:7e:31:72:47: 84:66:2a:84:a3:e1:45:a2:74:7a:cf:a0:2a:a0:37: 18:b4:50:0f:0c:42:1d:e3:08:35:9e:78:15:70:cd: f6:91:b1:59:9b:37:06:18:30:84:b6:9f:9e:1c:9f: 1f:7e:54:57:57:fd:af:02:06:a3:54:ba:90:6f:6e: f7:05:31:d2:e3:e5:f1:84:80:e9:74:80:11:8e:73: 01:b3:38:91:36:b5:d2:1c:40:22:c0:b2:b9:d6:f8: 97:6c:b4:bc:b1:a2:f3:9b:2b:f2:86:e9:b6:74:98: 56:6e:72:a2:0e:5e:b2:99:12:3e:62:7f:f1:fc:c4: 88:09:0f:62:a3:9b:14:07:cd:fe:c9:a2:1d:5f:af: 31:2d:75:7c:b1:c6:7f:9f:f8:5b:96:c6:b3:3a:8a: 95:23:59:79:01:d5:ef:7f:06:57:2e:9f:51:6a:4a: d4:30:d2:07:d1:44:aa:45:37:99:c4:b4:32:18:19: ab:bf:36:52:5e:8e:7e:eb:fe:76:33:77:40:c5:98: 40:f2:2d:46:4c:83:0b:76:f7:7f:26:82:32:8d:a0: 8d:99:9a:41:59:3b:3b:51:93:ae:6a:20:c7:ef:4a: 2d:41:1d:a8:42:d4:e8:de:03:ac:37:6e:23:0f:be: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:7D:8B:A9:43:1F:94:EE:3E:E9:79:B0:80:C2:F9:B2:F7:6A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/357f5f05-28cf-3164-adb9-c81bc0f8563a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cd:0e:67:61:a5:d3:57:b2:5e:59:a8:1e:74:0d:8e:94:33: 7c:38:2e:93:80:54:66:4d:5b:1d:df:59:a4:4c:96:c5:45:9f: a6:42:c4:22:ea:fb:f7:d1:00:96:4f:c2:c7:d4:ab:fe:59:f0: c6:9e:d0:db:6f:a4:48:16:44:d6:d5:87:ce:58:d2:53:e0:77: 25:c2:8c:34:5f:da:e8:2b:11:26:c5:1c:d8:cb:4b:a3:6c:4a: 19:e8:13:c3:cd:b8:85:55:20:0d:1c:bf:3e:de:0c:8b:ec:95: a2:e1:a5:fe:90:e4:48:cf:b3:96:10:c0:fd:32:3d:f6:d2:80: 26:ef:0a:cf:fc:a8:95:88:66:4c:23:97:bf:d8:37:5c:27:e8: 39:4a:db:f9:1d:a9:03:5a:27:f7:3e:01:e5:f3:96:73:ca:44: 01:f0:bf:67:04:e3:33:8d:49:a3:6b:c8:15:be:23:79:4e:a7: 68:c9:84:88:29:e6:39:91:1e:d3:77:aa:c9:ab:1c:a7:4f:f9: 72:d7:07:b1:26:09:29:6e:db:e6:95:a9:d1:bd:13:96:5e:09: 05:d7:8d:47:9b:53:ed:14:6c:83:49:7e:80:be:bc:a1:84:18: 2a:3b:f8:1d:30:d1:89:d0:2f:d1:bd:7d:ce:28:4d:52:b0:94: 71:ee:6a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzXWY5ntWUNDvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NTBkYmMxZjctNmNjMS00Y2VhLThmMDEtNWVlOTZlMGE4MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkuTipGJ8INIEn4xckeEZiqEo+FFonR6z6Aq oDcYtFAPDEId4wg1nngVcM32kbFZmzcGGDCEtp+eHJ8fflRXV/2vAgajVLqQb273 BTHS4+XxhIDpdIARjnMBsziRNrXSHEAiwLK51viXbLS8saLzmyvyhum2dJhWbnKi Dl6ymRI+Yn/x/MSICQ9io5sUB83+yaIdX68xLXV8scZ/n/hblsazOoqVI1l5AdXv fwZXLp9RakrUMNIH0USqRTeZxLQyGBmrvzZSXo5+6/52M3dAxZhA8i1GTIMLdvd/ JoIyjaCNmZpBWTs7UZOuaiDH70otQR2oQtTo3gOsN24jD74oBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoefYupQx+U7j7pebCAwvmy92qGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzU3ZjVmMDUtMjhjZi0z MTY0LWFkYjktYzgxYmMwZjg1NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPNDmdhpdNXsl5ZqB50DY6UM3w4LpOAVGZNWx3fWaRMlsVFn6ZCxCLq +/fRAJZPwsfUq/5Z8Mae0NtvpEgWRNbVh85Y0lPgdyXCjDRf2ugrESbFHNjLS6Ns ShnoE8PNuIVVIA0cvz7eDIvslaLhpf6Q5EjPs5YQwP0yPfbSgCbvCs/8qJWIZkwj l7/YN1wn6DlK2/kdqQNaJ/c+AeXzlnPKRAHwv2cE4zONSaNryBW+I3lOp2jJhIgp 5jmRHtN3qsmrHKdP+XLXB7EmCSlu2+aVqdG9E5ZeCQXXjUebU+0UbINJfoC+vKGE GCo7+B0w0YnQL9G9fc4oTVKwlHHuaiM= -----END CERTIFICATE-----Generated at Sun Jun 29 19:26:06 2025 by rpki-client