$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b890d13e-6ca3-390a-893e-e56a7572e6de.roa File: b890d13e-6ca3-390a-893e-e56a7572e6de.roa (raw, json) Hash identifier: o6wTE5LI+7y6kce8FgHFGgopZFZb8fGuHiAJeRTSLFM= Subject key identifier: C2:19:0B:A9:D0:E8:AC:1E:40:01:26:BB:32:5F:BF:48:DC:B2:40:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A23C02126842A4F0376C83580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b890d13e-6ca3-390a-893e-e56a7572e6de.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.58.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:21:26:84:2a:4f:03:76:c8:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=8fdbf30d-ab55-4f7d-bd73-add725a049c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:4a:ae:e9:b0:aa:df:e1:6d:e0:00:90:5e: e1:8f:e3:50:e5:df:79:ef:53:4c:69:ef:58:71:de: d2:c2:07:a9:52:bf:a5:2a:74:b8:ab:c9:ae:97:4c: 30:76:2e:38:73:89:11:20:88:c8:b4:8b:a5:cd:eb: de:da:ec:55:05:93:28:87:d9:3c:55:5b:4a:a7:04: b0:fe:4d:9a:8f:83:ea:57:7b:57:0a:ee:cc:b0:0d: 6c:09:89:97:c7:f6:3a:59:6d:21:1f:36:0b:d1:4d: 1c:2b:c6:b7:2c:ec:76:90:25:6a:95:6b:07:d3:44: 51:a9:99:36:9a:fb:0b:8d:df:5a:57:ae:2e:c2:bb: 13:1b:09:6f:3e:ca:40:ac:5c:d2:94:cf:f2:76:0a: 5a:c6:7c:b9:c8:04:9b:fa:6f:57:40:8b:f8:17:51: e3:8f:0d:29:04:ff:d6:2f:94:a9:77:47:7d:95:aa: c8:70:50:88:28:1a:88:b5:24:a8:07:35:58:9e:7d: f6:4f:11:46:20:1e:09:55:c4:02:71:97:50:06:ce: 76:b9:7f:16:96:85:a5:b7:c2:cc:61:45:b3:a7:6c: dd:18:ed:b8:c1:72:2e:e5:23:e6:57:f6:c6:82:43: de:aa:68:a3:ee:9d:2a:58:d8:a9:85:cc:a5:c6:6b: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:19:0B:A9:D0:E8:AC:1E:40:01:26:BB:32:5F:BF:48:DC:B2:40:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b890d13e-6ca3-390a-893e-e56a7572e6de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ab:34:92:8e:8d:26:78:98:0b:f2:ba:7a:b6:81:d1:2b:b9: 45:aa:8f:2a:96:52:cc:57:2c:d8:cd:08:53:a4:f2:ed:92:01: 25:ed:12:b3:a5:5c:1f:e8:10:cd:5b:b7:42:04:dc:fd:04:c8: 3c:f1:8c:ed:7e:d5:29:09:8e:18:a2:db:21:8d:65:1c:48:5b: 52:26:7d:a6:e7:a0:d1:2c:5c:c0:4b:e9:72:25:59:38:19:c1: 7b:d5:d7:53:5c:57:94:3e:67:28:4e:9a:ef:be:22:d6:03:15: 97:d9:94:a0:8d:91:8d:6b:ca:fa:a2:25:3e:3f:80:d4:0d:df: d7:93:f3:41:f6:fd:20:27:fd:23:5d:29:8a:5f:ed:6e:7f:e5: fe:37:2b:b1:5d:62:a8:d5:49:a9:b1:56:2b:d1:96:fa:84:70: ad:6b:8e:ba:6c:4b:41:83:ec:35:45:33:99:74:f5:87:85:97: db:56:ef:ce:2d:df:0c:d2:77:76:77:e7:bd:90:c5:08:51:c7: 56:00:1a:99:af:f6:d5:9c:be:6f:a4:ef:a6:b4:cd:ab:52:90: 50:bb:49:be:9f:fb:e1:b2:10:fb:54:3e:18:8c:ad:37:86:7f: a9:f6:26:fe:c7:74:fc:ca:0c:9a:40:37:1c:7f:7f:02:b1:c2: ad:5e:ac:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwCEmhCpPA3bINYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk OGZkYmYzMGQtYWI1NS00ZjdkLWJkNzMtYWRkNzI1YTA0OWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLRKrumwqt/hbeAAkF7hj+NQ5d9571NMae9Y cd7SwgepUr+lKnS4q8mul0wwdi44c4kRIIjItIulzeve2uxVBZMoh9k8VVtKpwSw /k2aj4PqV3tXCu7MsA1sCYmXx/Y6WW0hHzYL0U0cK8a3LOx2kCVqlWsH00RRqZk2 mvsLjd9aV64uwrsTGwlvPspArFzSlM/ydgpaxny5yASb+m9XQIv4F1Hjjw0pBP/W L5Spd0d9larIcFCIKBqItSSoBzVYnn32TxFGIB4JVcQCcZdQBs52uX8WloWlt8LM YUWzp2zdGO24wXIu5SPmV/bGgkPeqmij7p0qWNiphcylxmts8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIZC6nQ6KweQAEmuzJfv0jcskDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjg5MGQxM2UtNmNhMy0z OTBhLTg5M2UtZTU2YTc1NzJlNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHirNJKOjSZ4mAvyunq2gdEruUWqjyqWUsxXLNjNCFOk8u2SASXtErOl XB/oEM1bt0IE3P0EyDzxjO1+1SkJjhii2yGNZRxIW1ImfabnoNEsXMBL6XIlWTgZ wXvV11NcV5Q+ZyhOmu++ItYDFZfZlKCNkY1ryvqiJT4/gNQN39eT80H2/SAn/SNd KYpf7W5/5f43K7FdYqjVSamxVivRlvqEcK1rjrpsS0GD7DVFM5l09YeFl9tW784t 3wzSd3Z3572QxQhRx1YAGpmv9tWcvm+k76a0zatSkFC7Sb6f++GyEPtUPhiMrTeG f6n2Jv7HdPzKDJpANxx/fwKxwq1erJ0= -----END CERTIFICATE-----Generated at Sun Jun 15 18:49:23 2025 by rpki-client