$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e009efa-8738-3067-a9db-ecb0b4f2b9af.roa File: 3e009efa-8738-3067-a9db-ecb0b4f2b9af.roa (raw, json) Hash identifier: MICTOu0eGMtek4NP6m7bUo3daWjyiK1Eru7Vv07xcJs= Subject key identifier: 68:3F:3D:2E:2A:FA:D7:B5:7B:60:8B:52:21:3A:DD:8C:4F:F8:13:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B2720F1671CCF6E577480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e009efa-8738-3067-a9db-ecb0b4f2b9af.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.58.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:27:20:f1:67:1c:cf:6e:57:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=dcec9dc5-b6d1-4e06-bf82-b45964f6a564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:06:0b:97:51:df:b5:5a:6e:35:f2:7e:08: 96:2e:2c:46:33:16:de:2b:4a:b5:3d:d0:39:ff:a4: 09:f6:e3:2d:29:26:99:a0:92:8d:fb:9e:b5:a7:01: 6a:21:11:35:58:8c:74:d3:34:56:6e:74:45:24:3e: 23:2c:1a:a6:e4:72:63:00:05:45:50:7c:31:d9:35: ef:ef:7c:18:0d:df:2d:7a:b5:bf:d4:7a:f1:d0:54: 80:8f:7e:cc:49:ca:3c:66:22:c3:80:38:aa:3d:2f: bb:50:32:06:80:bf:c6:49:e6:ae:4b:93:3b:6a:e4: 75:1d:56:04:93:e4:9d:56:8e:5a:e0:1a:63:bb:68: 40:3c:12:c6:76:38:ba:00:43:06:bc:36:62:7b:b7: 6d:49:01:88:97:9e:ca:83:61:c6:ad:79:7f:a7:c6: 05:0b:1f:f8:5f:06:5c:2b:5d:64:2c:5f:93:33:fe: 03:07:2b:de:ee:dc:79:a6:16:6e:8a:f9:9d:2b:b2: b5:87:26:32:1a:e4:e0:c9:70:d5:d3:7a:c2:f9:7d: 04:db:0a:27:b8:71:8b:55:c1:6e:7e:59:ae:e4:1d: 71:b6:77:f0:f5:bd:02:08:bc:7d:24:b7:21:ed:24: 29:4d:2b:cb:df:0b:71:3a:a9:e1:21:ad:04:3f:77: 4a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3F:3D:2E:2A:FA:D7:B5:7B:60:8B:52:21:3A:DD:8C:4F:F8:13:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e009efa-8738-3067-a9db-ecb0b4f2b9af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:24:c3:93:ae:f8:13:49:34:60:b2:a6:06:c2:bc:d2:13:7c: b4:35:22:76:b6:b7:6f:4e:07:c6:de:88:f2:ee:f2:3c:24:2c: 2e:78:d5:68:3a:e4:98:ed:32:24:b8:fe:a3:37:3f:f1:03:95: 7c:d2:01:35:e4:af:84:57:fe:c2:26:80:e8:03:b0:94:31:c5: f6:81:fe:95:fc:97:59:65:70:7c:e6:16:3e:fa:f0:cb:95:5f: 2e:fe:7c:c9:d3:77:2c:cc:a0:6e:45:0f:f7:81:e3:3d:df:79: 3a:df:21:6f:9b:3f:67:61:a2:1e:58:41:c5:8f:aa:87:5c:46: 14:46:96:cd:a0:cf:e8:f2:c2:30:77:3f:ea:4c:3a:7e:df:d1: 2e:fc:32:11:ad:33:cf:e4:b7:82:46:91:d2:b2:ee:e2:f9:25: a8:8d:5d:a0:85:ec:67:a4:6a:6d:64:59:35:dd:30:b9:d0:e9: 4c:5b:f6:9b:da:52:f0:0c:a2:1a:76:5e:ca:73:b7:43:e0:9b: f6:9a:aa:52:53:3a:3e:e7:ad:37:a2:2a:76:3b:ae:b1:c3:cb: 7f:99:d2:8f:52:a6:95:94:ac:68:1c:96:ec:ce:9e:3b:63:aa: 3c:0c:9e:d5:6e:89:f3:ca:e7:bb:c7:9a:08:c4:aa:c3:ee:1a: 00:3d:48:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOycg8Wccz25XdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZGNlYzlkYzUtYjZkMS00ZTA2LWJmODItYjQ1OTY0ZjZhNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb4GC5dR37VabjXyfgiWLixGMxbeK0q1PdA5 /6QJ9uMtKSaZoJKN+561pwFqIRE1WIx00zRWbnRFJD4jLBqm5HJjAAVFUHwx2TXv 73wYDd8terW/1Hrx0FSAj37MSco8ZiLDgDiqPS+7UDIGgL/GSeauS5M7auR1HVYE k+SdVo5a4Bpju2hAPBLGdji6AEMGvDZie7dtSQGIl57Kg2HGrXl/p8YFCx/4XwZc K11kLF+TM/4DByve7tx5phZuivmdK7K1hyYyGuTgyXDV03rC+X0E2wonuHGLVcFu flmu5B1xtnfw9b0CCLx9JLch7SQpTSvL3wtxOqnhIa0EP3dKTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg/PS4q+te1e2CLUiE63YxP+BNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2UwMDllZmEtODczOC0z MDY3LWE5ZGItZWNiMGI0ZjJiOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzoIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQkw5Ou+BNJNGCypgbCvNITfLQ1Ina2t29OB8beiPLu8jwkLC541Wg6 5JjtMiS4/qM3P/EDlXzSATXkr4RX/sImgOgDsJQxxfaB/pX8l1llcHzmFj768MuV Xy7+fMnTdyzMoG5FD/eB4z3feTrfIW+bP2dhoh5YQcWPqodcRhRGls2gz+jywjB3 P+pMOn7f0S78MhGtM8/kt4JGkdKy7uL5JaiNXaCF7Gekam1kWTXdMLnQ6Uxb9pva UvAMohp2Xspzt0Pgm/aaqlJTOj7nrTeiKnY7rrHDy3+Z0o9SppWUrGgcluzOnjtj qjwMntVuifPK57vHmgjEqsPuGgA9SMo= -----END CERTIFICATE-----Generated at Sun Jun 29 12:21:46 2025 by rpki-client