$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa File: b252baa0-5024-3a19-9a9b-c86ed4790812.roa (raw, json) Hash identifier: xEBu33wyDwpYAnL7dnSH0iaWx/vr6AFMLUFvgP/iODY= Subject key identifier: 31:B5:0E:C1:AD:45:44:4A:1F:0A:F5:6F:F9:86:8B:EB:42:B3:C4:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A90A0EF86E88FB4182B273D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 16625 IP address blocks: 23.58.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ef:86:e8:8f:b4:18:2b:27:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=4df69c73-79d9-4ea8-9e5c-e495f7bad869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:90:cc:01:62:9e:4b:6c:a6:82:2d:86:4d: 2f:b1:54:f1:74:4f:6b:74:70:39:09:16:8a:32:99: cf:9c:6e:c0:be:7f:ca:10:1f:e7:24:d4:a3:62:c7: cd:4c:19:a2:07:56:1c:c9:45:2f:ba:42:18:13:69: b6:80:98:b6:2b:ef:be:bc:ad:b0:c0:31:a4:77:8a: 5a:8b:84:26:57:e7:a7:3b:8b:1b:b1:12:b6:26:66: 90:45:e0:44:82:ec:16:58:f8:a4:78:be:5b:78:7e: 89:a7:f2:11:97:79:22:57:0b:06:b4:90:92:91:6a: d5:9d:46:da:28:92:8c:ff:99:66:22:71:f0:5d:37: 03:aa:88:1d:df:fb:8b:0c:8b:32:fc:e0:cb:38:d4: 01:2d:3c:2d:e1:bd:57:5d:d8:3f:e7:33:fa:f6:d5: 12:5d:2c:92:5c:ae:7e:b8:9d:0c:fe:40:80:c2:82: 4b:3b:31:29:15:fd:1c:aa:f4:af:5d:17:ed:13:06: 19:2f:87:43:b8:5a:b4:14:2c:43:63:30:39:b4:54: 51:04:f7:f9:08:c6:67:9e:41:2e:ff:23:bd:b9:84: 07:cd:6f:3b:28:60:88:a6:28:46:09:74:98:f7:9a: 46:29:7a:e7:6e:29:ad:da:67:61:69:03:d7:b4:0a: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B5:0E:C1:AD:45:44:4A:1F:0A:F5:6F:F9:86:8B:EB:42:B3:C4:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:fe:dd:19:f2:9f:56:3c:44:e2:77:7d:c4:4d:1d:2d:37:ae: cc:cf:b4:e5:f8:a5:99:28:5f:b5:23:02:e2:6a:ba:2f:7c:89: 87:56:61:ab:e2:aa:c5:0e:52:87:65:55:ea:5a:09:c4:33:50: 04:61:e4:49:85:93:10:a7:a1:bb:ef:2f:bc:6a:d7:95:bd:85: 28:49:78:b0:22:02:26:38:63:37:93:d6:76:26:0a:09:63:f0: a2:f0:a9:9a:fe:53:0d:9e:df:82:b5:3c:57:13:a1:75:aa:d7: 3b:ae:ce:33:29:14:49:d8:d9:5a:21:73:83:15:78:9b:68:df: ad:5f:86:e0:34:ad:4a:48:e4:13:22:2c:9d:8a:c3:de:38:2f: 25:15:f2:30:67:a8:f9:8e:32:83:c2:29:ef:4a:53:6b:71:5a: cf:f1:5b:9d:ef:6f:a2:8a:b3:ca:28:b1:8f:7b:cf:e2:6a:0b: 45:e4:ef:42:ae:4f:52:17:d4:a4:7e:d3:aa:4f:a3:5c:2d:55: a0:d5:44:8f:43:4c:3e:b7:5f:dd:3b:d2:85:3d:fa:eb:50:d3: ac:81:73:47:9a:27:5d:49:e6:55:c1:21:4b:3b:70:37:d7:e5: b3:50:8a:dc:da:56:0d:12:41:0e:48:a5:fc:c3:dc:cb:81:1e: 01:eb:6b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoO+G6I+0GCsnPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NGRmNjljNzMtNzlkOS00ZWE4LTllNWMtZTQ5NWY3YmFkODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9OQzAFinktspoIthk0vsVTxdE9rdHA5CRaK MpnPnG7Avn/KEB/nJNSjYsfNTBmiB1YcyUUvukIYE2m2gJi2K+++vK2wwDGkd4pa i4QmV+enO4sbsRK2JmaQReBEguwWWPikeL5beH6Jp/IRl3kiVwsGtJCSkWrVnUba KJKM/5lmInHwXTcDqogd3/uLDIsy/ODLONQBLTwt4b1XXdg/5zP69tUSXSySXK5+ uJ0M/kCAwoJLOzEpFf0cqvSvXRftEwYZL4dDuFq0FCxDYzA5tFRRBPf5CMZnnkEu /yO9uYQHzW87KGCIpihGCXSY95pGKXrnbimt2mdhaQPXtAoBOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG1DsGtRURKHwr1b/mGi+tCs8TBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI1MmJhYTAtNTAyNC0z YTE5LTlhOWItYzg2ZWQ0NzkwODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr+3Rnyn1Y8ROJ3fcRNHS03rszPtOX4pZkoX7UjAuJqui98iYdWYavi qsUOUodlVepaCcQzUARh5EmFkxCnobvvL7xq15W9hShJeLAiAiY4YzeT1nYmCglj 8KLwqZr+Uw2e34K1PFcToXWq1zuuzjMpFEnY2Vohc4MVeJto361fhuA0rUpI5BMi LJ2Kw944LyUV8jBnqPmOMoPCKe9KU2txWs/xW53vb6KKs8oosY97z+JqC0Xk70Ku T1IX1KR+06pPo1wtVaDVRI9DTD63X9070oU9+utQ06yBc0eaJ11J5lXBIUs7cDfX 5bNQitzaVg0SQQ5IpfzD3MuBHgHra8s= -----END CERTIFICATE-----Generated at Tue Aug 5 16:47:28 2025 by rpki-client