$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa741991-33cb-3c58-9f8d-63a83ab4b2c9.roa File: fa741991-33cb-3c58-9f8d-63a83ab4b2c9.roa (raw, json) Hash identifier: hJCSS3DIvXp5LuV9f5nYwGum0f3OM0Hi9bxe+83K6iQ= Subject key identifier: D3:51:D0:8C:D2:81:51:EB:E9:B6:93:6B:DF:5F:D0:9C:9C:CD:C1:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B358CA76EC8859A99BC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa741991-33cb-3c58-9f8d-63a83ab4b2c9.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 9498 IP address blocks: 23.58.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:35:8c:a7:6e:c8:85:9a:99:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=b5b478dd-960a-47e6-b75f-055f5ffa7d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:2a:31:78:7c:3e:d6:aa:45:db:46:5a:14: c7:90:99:18:0d:15:1c:48:68:41:e4:60:41:34:80: 09:70:bb:d1:4c:bb:3b:2e:73:6e:2a:f4:e6:a4:7b: 05:da:28:fc:11:c0:12:80:fa:61:c7:88:87:52:d3: d5:0a:1a:d6:f8:ce:5c:dd:9c:10:d5:a0:c4:13:03: 90:04:e6:b4:95:37:35:9f:2a:b0:35:7d:18:77:49: 98:36:b6:dc:e5:b1:41:8a:26:50:ae:ef:57:a1:4d: cb:d0:5e:16:ba:ad:3d:ef:b7:cb:2b:7d:b7:a2:6e: 50:9f:f0:67:b5:97:5a:63:9a:96:79:8b:07:8e:fa: 85:cb:33:72:55:43:40:a1:92:f4:5a:f7:d0:5f:10: a0:2c:23:84:84:cb:02:7a:cb:af:3e:ec:b7:82:1a: 73:1a:ba:68:25:76:b4:d9:52:85:51:a0:b4:07:a0: e1:32:d9:ed:5f:e6:f5:fa:3b:59:04:89:50:c0:f4: 6d:71:ca:21:4b:c6:78:86:33:c0:53:9c:55:19:c4: 96:f9:2c:e9:82:8d:44:ff:f7:55:3b:b8:85:95:3a: 72:3f:b2:51:08:1d:e1:fc:6f:59:a2:0b:a7:15:0c: c4:d6:25:01:a5:6c:e9:b1:10:87:d5:fc:ff:fd:a3: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:51:D0:8C:D2:81:51:EB:E9:B6:93:6B:DF:5F:D0:9C:9C:CD:C1:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa741991-33cb-3c58-9f8d-63a83ab4b2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9f:1e:60:fe:9f:7e:5d:4b:fc:b4:db:79:a0:34:6a:e2:56: c3:6b:6d:da:05:44:c0:b4:43:33:7e:db:fa:cf:ef:a4:05:db: ed:16:66:8f:b4:6f:22:2c:95:b2:e5:38:71:3b:c1:0b:d3:61: 9f:aa:b6:7d:de:81:c1:e5:95:fa:37:76:03:96:92:e2:46:9b: f7:f7:6b:6b:87:57:74:72:d0:6a:d5:03:50:2d:c6:6a:02:55: db:ef:da:9f:12:7b:d2:6e:63:ad:69:51:97:9d:04:0b:b7:cd: 3c:b8:ab:67:64:5b:19:cf:34:90:b5:0a:c6:a3:de:50:64:e9: 6c:df:d6:d0:39:7e:41:5b:ea:68:b9:1b:4f:bd:d5:1c:1b:5f: 3c:db:04:9b:8f:0d:fe:63:ab:62:14:9c:b5:33:93:f0:e8:ac: 81:69:8c:9a:e2:87:a5:d7:ca:9e:21:8a:9e:a8:69:f5:e5:5d: f4:da:32:62:cf:59:17:bc:e4:75:bf:3a:78:b8:92:5f:b0:68: ac:4b:e8:e3:e0:91:6f:7c:58:82:34:ac:71:fd:e0:e8:f7:23: 3f:da:32:2f:1b:67:42:ce:ca:14:30:3e:58:c8:4e:f2:50:a3: fc:a5:cc:a6:fc:9a:51:ee:df:25:0e:d5:57:1d:02:e1:ad:39: 2b:3c:d0:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzWMp27IhZqZvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk YjViNDc4ZGQtOTYwYS00N2U2LWI3NWYtMDU1ZjVmZmE3ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkEqMXh8PtaqRdtGWhTHkJkYDRUcSGhB5GBB NIAJcLvRTLs7LnNuKvTmpHsF2ij8EcASgPphx4iHUtPVChrW+M5c3ZwQ1aDEEwOQ BOa0lTc1nyqwNX0Yd0mYNrbc5bFBiiZQru9XoU3L0F4Wuq0977fLK323om5Qn/Bn tZdaY5qWeYsHjvqFyzNyVUNAoZL0WvfQXxCgLCOEhMsCesuvPuy3ghpzGrpoJXa0 2VKFUaC0B6DhMtntX+b1+jtZBIlQwPRtccohS8Z4hjPAU5xVGcSW+Szpgo1E//dV O7iFlTpyP7JRCB3h/G9ZogunFQzE1iUBpWzpsRCH1fz//aPG0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNR0IzSgVHr6baTa99f0JyczcEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmE3NDE5OTEtMzNjYi0z YzU4LTlmOGQtNjNhODNhYjRiMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzpfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyfHmD+n35dS/y023mgNGriVsNrbdoFRMC0QzN+2/rP76QF2+0WZo+0 byIslbLlOHE7wQvTYZ+qtn3egcHllfo3dgOWkuJGm/f3a2uHV3Ry0GrVA1AtxmoC Vdvv2p8Se9JuY61pUZedBAu3zTy4q2dkWxnPNJC1Csaj3lBk6Wzf1tA5fkFb6mi5 G0+91RwbXzzbBJuPDf5jq2IUnLUzk/DorIFpjJrih6XXyp4hip6oafXlXfTaMmLP WRe85HW/Oni4kl+waKxL6OPgkW98WII0rHH94Oj3Iz/aMi8bZ0LOyhQwPljITvJQ o/ylzKb8mlHu3yUO1VcdAuGtOSs80NY= -----END CERTIFICATE-----Generated at Tue Jul 1 05:45:08 2025 by rpki-client