$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43cbbb0c-b000-3ed0-b6cc-974d54de9b25.roa File: 43cbbb0c-b000-3ed0-b6cc-974d54de9b25.roa (raw, json) Hash identifier: XaO4O1e+jTJ4zp0kjp24zprpzYAvEzyoeDDb+Mgd1BM= Subject key identifier: 9E:EE:11:58:DC:F7:24:A5:0A:A2:6B:A8:76:31:4B:EB:C7:38:B1:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A268AC7DCC76DA93D61DFCD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43cbbb0c-b000-3ed0-b6cc-974d54de9b25.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 16625 IP address blocks: 23.58.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c7:dc:c7:6d:a9:3d:61:df:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=924d0344-949b-480b-aad5-f66ff63a7a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:ab:d9:fa:67:03:1f:c5:58:c1:4b:f0:0a: cf:db:a0:26:83:68:e4:cf:f4:47:14:86:ad:61:54: 6a:e4:f6:db:9e:ec:80:57:84:e8:bf:ca:15:cf:9e: 9d:2a:d5:4c:ae:27:d5:08:c3:ca:93:71:29:a2:e5: 09:d5:f2:94:6e:1d:03:09:06:38:35:25:b1:f3:f3: 0f:09:a1:b1:41:44:20:af:e5:93:a5:f0:70:7b:d7: da:4c:ee:72:6a:29:29:30:27:a4:ba:2f:c9:41:66: 44:40:51:07:77:a8:bc:4a:13:79:cf:2a:93:a3:42: 33:45:90:55:7f:72:e7:42:f5:b5:3d:cc:c8:44:d9: d6:de:42:9b:f5:1c:16:1b:fc:c0:bb:07:39:16:c5: 7b:ac:17:fb:0a:8f:5d:f4:e9:41:53:c1:00:51:c8: fb:20:28:b4:54:c9:7b:78:ba:5c:24:dc:af:cc:b8: 63:40:57:92:77:ca:62:71:32:6d:ee:14:80:a4:7d: 52:2f:53:ec:a8:15:dc:9b:8d:7a:8a:e9:dc:f2:97: 47:5c:07:8c:6c:c2:9c:ae:d4:cd:72:1e:d3:66:0f: fa:65:0e:c0:cc:8a:4c:a6:10:8d:dd:24:2d:d1:63: ed:f6:77:4d:5c:e0:5f:f5:7c:37:07:cf:37:65:01: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EE:11:58:DC:F7:24:A5:0A:A2:6B:A8:76:31:4B:EB:C7:38:B1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43cbbb0c-b000-3ed0-b6cc-974d54de9b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:18:f3:86:41:13:d9:5d:d6:4f:04:f9:0a:46:d6:7b:55:cc: 4a:7e:a5:50:72:7b:7c:9d:b7:0d:26:90:c3:93:32:42:b4:1c: 9a:6f:f1:df:28:00:da:58:95:6e:af:47:19:62:83:ef:61:ed: 17:47:b6:b6:43:e4:5c:da:ba:df:cb:f4:1d:cf:66:4a:a0:ce: 9d:ab:11:bc:54:fa:46:49:07:43:11:87:c9:90:57:af:25:c5: 08:8d:76:18:7b:09:84:0c:da:32:15:40:6c:65:6f:1d:03:1f: d5:fa:bd:86:8f:ea:b2:d4:09:f0:b0:fe:fc:41:d9:aa:eb:6f: c0:a2:2a:61:03:45:0b:6d:0d:68:fd:02:1f:12:75:df:1e:11: a5:df:32:41:c2:03:fe:c8:02:3e:35:bb:61:d5:01:f2:92:8e: 6d:8e:73:e4:b8:80:b7:26:d5:db:ca:21:da:83:e1:ff:d7:11: 80:f8:9c:dd:34:cb:27:71:37:31:a0:9b:93:ac:21:e4:73:50: ae:c7:bd:3f:fb:f1:af:7e:e0:9c:ab:f5:fe:73:9d:4b:1d:f4: 44:f5:b5:c4:6b:c3:ef:c9:17:8e:3b:de:b9:7a:6a:7d:04:91: 03:69:aa:be:06:fd:c4:56:a0:0a:c5:b5:1b:6e:46:4c:7d:79: 0e:4b:1d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisfcx22pPWHfzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk OTI0ZDAzNDQtOTQ5Yi00ODBiLWFhZDUtZjY2ZmY2M2E3YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcqr2fpnAx/FWMFL8ArP26Amg2jkz/RHFIat YVRq5PbbnuyAV4Tov8oVz56dKtVMrifVCMPKk3EpouUJ1fKUbh0DCQY4NSWx8/MP CaGxQUQgr+WTpfBwe9faTO5yaikpMCekui/JQWZEQFEHd6i8ShN5zyqTo0IzRZBV f3LnQvW1PczIRNnW3kKb9RwWG/zAuwc5FsV7rBf7Co9d9OlBU8EAUcj7ICi0VMl7 eLpcJNyvzLhjQFeSd8picTJt7hSApH1SL1PsqBXcm416iunc8pdHXAeMbMKcrtTN ch7TZg/6ZQ7AzIpMphCN3SQt0WPt9ndNXOBf9Xw3B883ZQH62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7uEVjc9ySlCqJrqHYxS+vHOLFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNjYmJiMGMtYjAwMC0z ZWQwLWI2Y2MtOTc0ZDU0ZGU5YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwY84ZBE9ld1k8E+QpG1ntVzEp+pVBye3ydtw0mkMOTMkK0HJpv8d8o ANpYlW6vRxlig+9h7RdHtrZD5Fzaut/L9B3PZkqgzp2rEbxU+kZJB0MRh8mQV68l xQiNdhh7CYQM2jIVQGxlbx0DH9X6vYaP6rLUCfCw/vxB2arrb8CiKmEDRQttDWj9 Ah8Sdd8eEaXfMkHCA/7IAj41u2HVAfKSjm2Oc+S4gLcm1dvKIdqD4f/XEYD4nN00 yydxNzGgm5OsIeRzUK7HvT/78a9+4Jyr9f5znUsd9ET1tcRrw+/JF4473rl6an0E kQNpqr4G/cRWoArFtRtuRkx9eQ5LHSM= -----END CERTIFICATE-----Generated at Sun Jun 15 18:58:45 2025 by rpki-client