$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2a4247b-0746-37d0-8a66-1270c25b3185.roa File: a2a4247b-0746-37d0-8a66-1270c25b3185.roa (raw, json) Hash identifier: ikBY53bltS+J+5Za/Kd4FnRrrSIzcPsYTpPf9z9bFL4= Subject key identifier: 89:2E:AF:63:5D:34:E4:D3:7D:D5:E6:E4:AA:C2:7C:CD:86:DB:43:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B274F8BC9B4722BBB47C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2a4247b-0746-37d0-8a66-1270c25b3185.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.58.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:27:4f:8b:c9:b4:72:2b:bb:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=3db51203-a792-46b2-8987-554bf74b2273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:73:f3:5e:e7:ab:4e:2d:a5:df:51:e5:39: 02:9b:79:cd:1e:0d:f4:86:9c:38:ed:08:fd:15:12: f2:a3:ce:ed:a2:47:41:37:32:3d:fa:92:35:2b:2c: a7:ea:da:77:94:a2:a7:b0:2f:8e:1d:d6:5c:77:4e: 0a:ea:c0:5f:c6:57:53:85:a9:51:aa:20:7a:49:31: ad:75:b3:28:89:40:40:cf:75:04:90:6c:92:d0:e1: b9:d4:9c:b5:10:0a:ff:2c:a8:8d:2a:0e:d9:f2:72: 6b:4c:a3:a8:20:46:0e:e1:01:8f:a9:c2:17:af:b8: 95:e5:02:8e:3a:ee:41:82:c2:9d:a3:9f:bb:d9:ba: ac:58:4b:54:98:bd:38:d9:c4:c0:a4:2a:0c:f8:04: a5:05:ab:12:78:36:ce:90:14:d4:ff:93:7f:d2:81: 01:55:57:f4:95:f7:e0:54:77:e8:25:9c:f1:f5:f8: 90:82:07:98:c4:a1:69:bd:e1:ea:92:9d:df:de:00: 52:ce:62:c1:cc:d0:1b:d0:47:3c:2a:5a:c1:91:12: 0f:92:ac:65:01:4b:85:9b:4c:16:bf:9c:12:be:2c: 36:ef:01:4e:b3:9a:bb:fd:a0:b8:ae:f0:2c:59:6d: 4d:62:52:ed:bd:54:70:94:8d:02:4e:58:fb:7e:80: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:AF:63:5D:34:E4:D3:7D:D5:E6:E4:AA:C2:7C:CD:86:DB:43:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2a4247b-0746-37d0-8a66-1270c25b3185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ef:43:10:16:f9:93:8d:f4:ae:65:12:dc:13:7c:8b:27:6a: 03:16:03:c3:fb:10:19:0c:b3:a2:e9:21:bf:82:15:91:25:42: 88:62:70:a0:05:df:9b:a8:f5:38:ed:0c:41:ca:56:53:85:9e: 92:94:fe:63:86:a4:9e:9e:42:e1:87:36:bf:27:94:17:35:ae: 8d:8b:a6:24:05:1e:bf:ee:fa:d5:be:71:d8:03:39:25:60:c4: 4c:ba:1e:46:54:4e:e7:06:14:04:ad:82:8f:2b:81:45:64:b0: f6:3d:35:27:7f:97:8b:4d:a7:4e:07:c3:df:88:83:e3:e4:ef: 78:a4:98:09:53:ed:36:67:7a:bf:a2:ce:4c:3d:9a:17:bd:ee: 73:07:74:51:ad:f1:00:78:8a:ba:fe:bd:63:5b:6d:4c:3b:80: 81:40:b1:4c:84:87:1a:1b:fb:56:e6:c0:ed:39:20:df:28:f0: 31:5c:be:bf:88:3c:34:fa:78:aa:6c:88:8a:4f:09:1f:8c:2b: cf:0d:04:96:0d:43:c9:80:c9:10:80:90:be:e2:76:d3:ad:22: c2:18:92:4b:bf:82:84:12:d1:29:4b:f2:23:19:f4:75:0b:7c: 29:cd:91:8b:ca:85:9b:06:51:19:8e:cc:aa:33:4e:ce:8d:50: 5f:9b:9e:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOydPi8m0ciu7R8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk M2RiNTEyMDMtYTc5Mi00NmIyLTg5ODctNTU0YmY3NGIyMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYBz817nq04tpd9R5TkCm3nNHg30hpw47Qj9 FRLyo87tokdBNzI9+pI1Kyyn6tp3lKKnsC+OHdZcd04K6sBfxldThalRqiB6STGt dbMoiUBAz3UEkGyS0OG51Jy1EAr/LKiNKg7Z8nJrTKOoIEYO4QGPqcIXr7iV5QKO Ou5BgsKdo5+72bqsWEtUmL042cTApCoM+ASlBasSeDbOkBTU/5N/0oEBVVf0lffg VHfoJZzx9fiQggeYxKFpveHqkp3f3gBSzmLBzNAb0Ec8KlrBkRIPkqxlAUuFm0wW v5wSviw27wFOs5q7/aC4rvAsWW1NYlLtvVRwlI0CTlj7foCOrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkur2NdNOTTfdXm5KrCfM2G20MTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTJhNDI0N2ItMDc0Ni0z N2QwLThhNjYtMTI3MGMyNWIzMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzvQxAW+ZON9K5lEtwTfIsnagMWA8P7EBkMs6LpIb+CFZElQohicKAF 35uo9TjtDEHKVlOFnpKU/mOGpJ6eQuGHNr8nlBc1ro2LpiQFHr/u+tW+cdgDOSVg xEy6HkZUTucGFAStgo8rgUVksPY9NSd/l4tNp04Hw9+Ig+Pk73ikmAlT7TZner+i zkw9mhe97nMHdFGt8QB4irr+vWNbbUw7gIFAsUyEhxob+1bmwO05IN8o8DFcvr+I PDT6eKpsiIpPCR+MK88NBJYNQ8mAyRCAkL7idtOtIsIYkku/goQS0SlL8iMZ9HUL fCnNkYvKhZsGURmOzKozTs6NUF+bnr0= -----END CERTIFICATE-----Generated at Mon Jun 30 11:59:23 2025 by rpki-client