$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f712885e-ab58-36d0-9685-7cfd9d4c0956.roa File: f712885e-ab58-36d0-9685-7cfd9d4c0956.roa (raw, json) Hash identifier: GqYrua5JunDhXsrUho9VWk+1kXt/7SbOs/garwR0Ewo= Subject key identifier: 68:56:35:97:4E:14:3B:40:20:EB:C4:7D:C1:23:6E:B8:F8:6F:DB:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B277F4884D9D42C554E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f712885e-ab58-36d0-9685-7cfd9d4c0956.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 3786 IP address blocks: 23.58.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:27:7f:48:84:d9:d4:2c:55:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=8f772681-5652-4266-aefd-90196fc83cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:52:a7:97:68:86:17:2d:6f:2e:a7:27:b3: 1b:41:d9:81:0b:56:79:cf:1e:c4:16:ca:85:4a:ef: e4:b3:26:98:31:85:40:53:30:2e:91:58:f5:69:49: ea:f0:79:76:a0:9e:c8:b2:f7:3a:02:2a:a0:52:4e: 8b:24:c9:a2:29:1f:62:80:7b:5f:75:bf:89:66:20: fe:45:9f:d6:1b:3e:49:bf:44:ab:7e:6e:c9:8b:07: a6:3d:c6:66:a3:cf:7b:3c:c0:37:67:3a:ce:ce:8d: f9:ee:27:8e:c7:83:80:f0:54:d5:ec:e5:ec:16:2a: 51:b2:f5:d3:41:0c:66:4f:65:b1:28:c6:3e:8e:a3: 15:a2:64:63:fe:bd:87:75:80:53:cc:51:1a:dd:c6: b6:68:7f:c1:12:51:c9:62:4d:0b:35:ac:62:a3:ac: 17:bf:e9:b9:10:89:f7:2e:47:0a:4f:39:46:d3:b6: 1a:aa:8b:1a:63:08:ad:b5:49:14:f3:37:f4:c9:3e: be:76:44:56:50:c0:51:3c:61:47:8f:98:57:5f:d8: d0:e8:c7:4b:dc:5a:be:62:c5:09:84:78:84:6e:09: 9e:a6:ef:b1:bc:61:25:c7:c9:0c:f3:ea:69:d4:52: 81:83:cf:a1:d9:49:b5:a3:e9:49:79:c0:7a:a0:e0: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:35:97:4E:14:3B:40:20:EB:C4:7D:C1:23:6E:B8:F8:6F:DB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f712885e-ab58-36d0-9685-7cfd9d4c0956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:30:94:6e:05:ce:10:19:23:73:09:3b:40:57:e9:0a:5a:17: 7e:76:65:cd:c1:bb:96:32:36:94:d1:24:6e:83:65:5b:02:31: 1e:b4:d3:7c:8e:5b:61:7b:1c:a4:2b:c1:64:51:6d:73:c5:56: b2:10:29:69:7b:42:ed:de:dc:dd:8d:20:85:e3:4e:27:6f:8d: dc:6f:49:22:ef:81:0d:b1:55:89:24:01:b9:c2:dc:ef:c5:e8: 71:c6:75:d6:5f:7f:b9:a9:78:c6:72:cf:80:20:65:2f:4e:da: e9:34:2d:1b:6f:cd:96:bf:df:a1:b0:83:0a:a1:28:6f:e4:3f: 6f:d8:d9:ca:b6:8d:be:c2:24:07:e0:73:18:09:20:b4:d3:ea: 29:af:93:26:a3:d0:5d:11:ef:14:22:82:92:42:84:c2:e3:16: 52:77:fe:9e:ae:a0:4c:b3:ce:3c:66:d9:f2:02:5e:7a:9e:3b: 26:28:d2:ef:1d:04:db:f6:cf:5d:a5:01:17:b5:37:c0:b8:ad: 8c:e1:d7:28:01:6c:3d:a8:46:75:8c:73:9b:75:cb:a6:58:d7: 1a:11:44:04:35:4f:e2:9b:f1:27:1e:65:6d:47:cb:32:4f:42: 49:bc:5d:11:e5:86:3a:aa:10:a8:b5:c5:14:57:4b:f4:ce:80: ef:f0:3c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOyd/SITZ1CxVTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk OGY3NzI2ODEtNTY1Mi00MjY2LWFlZmQtOTAxOTZmYzgzY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCRSp5dohhctby6nJ7MbQdmBC1Z5zx7EFsqF Su/ksyaYMYVAUzAukVj1aUnq8Hl2oJ7Isvc6AiqgUk6LJMmiKR9igHtfdb+JZiD+ RZ/WGz5Jv0Srfm7JiwemPcZmo897PMA3ZzrOzo357ieOx4OA8FTV7OXsFipRsvXT QQxmT2WxKMY+jqMVomRj/r2HdYBTzFEa3ca2aH/BElHJYk0LNaxio6wXv+m5EIn3 LkcKTzlG07YaqosaYwittUkU8zf0yT6+dkRWUMBRPGFHj5hXX9jQ6MdL3Fq+YsUJ hHiEbgmepu+xvGElx8kM8+pp1FKBg8+h2Um1o+lJecB6oOA3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhWNZdOFDtAIOvEfcEjbrj4b9vaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjcxMjg4NWUtYWI1OC0z NmQwLTk2ODUtN2NmZDlkNGMwOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEwlG4FzhAZI3MJO0BX6QpaF352Zc3Bu5YyNpTRJG6DZVsCMR6003yO W2F7HKQrwWRRbXPFVrIQKWl7Qu3e3N2NIIXjTidvjdxvSSLvgQ2xVYkkAbnC3O/F 6HHGddZff7mpeMZyz4AgZS9O2uk0LRtvzZa/36GwgwqhKG/kP2/Y2cq2jb7CJAfg cxgJILTT6imvkyaj0F0R7xQigpJChMLjFlJ3/p6uoEyzzjxm2fICXnqeOyYo0u8d BNv2z12lARe1N8C4rYzh1ygBbD2oRnWMc5t1y6ZY1xoRRAQ1T+Kb8SceZW1HyzJP Qkm8XRHlhjqqEKi1xRRXS/TOgO/wPNo= -----END CERTIFICATE-----Generated at Sun Jun 29 14:50:38 2025 by rpki-client