$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab594200-8c7f-3bd3-8d91-b2de1af30ff3.roa File: ab594200-8c7f-3bd3-8d91-b2de1af30ff3.roa (raw, json) Hash identifier: PfcGcLm3LZ77cBqiA8XoVZtzSorNaUz+SwXYE43bgyA= Subject key identifier: B0:DE:9A:8B:D5:7C:12:C7:33:3B:35:24:25:3D:83:BC:4A:5E:79:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B27A7EBEC9093A8B63B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab594200-8c7f-3bd3-8d91-b2de1af30ff3.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.58.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:27:a7:eb:ec:90:93:a8:b6:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=c8aead74-c455-495b-af2e-0db02ae9ddc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:02:42:91:ad:e5:92:5e:c4:33:d5:78:30: 52:5d:25:94:5a:85:4e:a6:ce:84:39:02:ea:d2:f0: f9:a6:81:3c:a4:05:a5:ec:0f:06:d3:bb:54:9d:96: 25:15:f7:47:b1:66:93:bd:c4:f1:6c:73:40:ad:42: 34:59:ce:62:04:80:c5:37:70:eb:24:8e:fa:fc:11: 25:9b:74:fd:5b:16:cc:28:44:47:61:0d:74:db:78: 16:48:6f:82:fd:60:7d:79:83:03:6e:b3:6e:94:56: ed:34:05:1f:cf:92:f1:8c:b7:ab:78:36:65:04:f6: f3:04:f5:ac:f5:4b:e9:d1:43:62:04:70:44:a4:d3: 39:d6:5f:4a:64:74:d8:24:e8:4b:6a:96:88:c7:62: fc:11:a6:72:f3:35:89:d3:f6:5b:43:81:a8:f5:bf: 8d:d6:f9:9c:e4:fd:0f:d0:32:e7:1d:3e:ea:99:7c: f0:7a:2e:b3:14:be:b9:e4:cf:35:dd:36:74:27:55: 42:81:16:51:56:50:67:56:3b:9d:1f:f6:6d:93:9c: af:48:24:61:56:0d:2f:48:0e:15:f7:13:52:71:a7: 8f:29:71:0c:7d:57:66:84:9a:2b:56:df:f6:da:bd: 97:9d:f0:16:ad:65:c8:69:56:22:af:df:3b:dc:58: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DE:9A:8B:D5:7C:12:C7:33:3B:35:24:25:3D:83:BC:4A:5E:79:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab594200-8c7f-3bd3-8d91-b2de1af30ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:79:66:bc:0c:e7:24:4e:92:ee:d8:e0:4e:27:a2:20:21:93: c2:22:0c:91:6a:33:f9:d8:a6:1d:6b:c1:9f:ba:15:5d:ce:d8: c9:67:94:10:c1:10:65:31:9e:90:05:f4:d0:60:2a:3a:d7:eb: 1d:e5:ae:be:72:89:2c:bf:b6:90:12:b1:d7:2c:5e:bd:dc:4d: 2b:1e:ab:ad:20:ce:b0:0d:19:bc:f9:f1:bf:44:09:1c:d3:0b: 7c:ab:0e:06:7f:2f:93:c4:14:1f:15:de:c1:42:ee:97:70:66: 2b:33:2f:f7:c9:d2:e9:44:72:b1:11:f2:76:0a:04:6e:8c:7b: fe:50:75:90:75:99:42:c9:29:ff:e1:a6:6b:70:69:96:2d:9c: 92:fa:fa:57:d3:ad:6c:d1:bc:88:b5:a4:4a:ad:54:11:93:62: 63:de:fb:23:6e:7d:78:43:ab:44:c7:7c:af:00:ff:7c:5b:76: 82:8c:a7:21:25:8c:b0:60:a7:94:ea:4a:41:6c:e9:00:db:7a: 21:f4:79:2b:f5:83:1f:70:88:d3:8d:91:21:51:66:5c:19:3b: 26:22:f4:32:37:34:d3:33:6f:02:62:21:8c:2f:8c:93:aa:1e: 6b:c1:51:c7:f2:d5:d1:ba:77:bb:0f:a3:e2:eb:1f:25:b6:50: 2c:9d:f3:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOyen6+yQk6i2O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk YzhhZWFkNzQtYzQ1NS00OTViLWFmMmUtMGRiMDJhZTlkZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2kCQpGt5ZJexDPVeDBSXSWUWoVOps6EOQLq 0vD5poE8pAWl7A8G07tUnZYlFfdHsWaTvcTxbHNArUI0Wc5iBIDFN3DrJI76/BEl m3T9WxbMKERHYQ1023gWSG+C/WB9eYMDbrNulFbtNAUfz5LxjLereDZlBPbzBPWs 9Uvp0UNiBHBEpNM51l9KZHTYJOhLapaIx2L8EaZy8zWJ0/ZbQ4Go9b+N1vmc5P0P 0DLnHT7qmXzwei6zFL655M813TZ0J1VCgRZRVlBnVjudH/Ztk5yvSCRhVg0vSA4V 9xNScaePKXEMfVdmhJorVt/22r2XnfAWrWXIaVYir9873Fj7bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDemovVfBLHMzs1JCU9g7xKXnnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWI1OTQyMDAtOGM3Zi0z YmQzLThkOTEtYjJkZTFhZjMwZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV5ZrwM5yROku7Y4E4noiAhk8IiDJFqM/nYph1rwZ+6FV3O2MlnlBDB EGUxnpAF9NBgKjrX6x3lrr5yiSy/tpASsdcsXr3cTSseq60gzrANGbz58b9ECRzT C3yrDgZ/L5PEFB8V3sFC7pdwZiszL/fJ0ulEcrER8nYKBG6Me/5QdZB1mULJKf/h pmtwaZYtnJL6+lfTrWzRvIi1pEqtVBGTYmPe+yNufXhDq0THfK8A/3xbdoKMpyEl jLBgp5TqSkFs6QDbeiH0eSv1gx9wiNONkSFRZlwZOyYi9DI3NNMzbwJiIYwvjJOq HmvBUcfy1dG6d7sPo+LrHyW2UCyd844= -----END CERTIFICATE-----Generated at Sun Jun 29 13:32:26 2025 by rpki-client