$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f712885e-ab58-36d0-9685-7cfd9d4c0956.roa File: f712885e-ab58-36d0-9685-7cfd9d4c0956.roa (raw, json) Hash identifier: YL67DJnj3H1HLxprGa8C8OiKTJvrmrAq70qFL4XnG+w= Subject key identifier: 01:FC:20:B7:FA:30:95:82:94:14:E1:7C:07:71:C0:E8:17:CA:C9:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE4673D641D586FE8A44240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f712885e-ab58-36d0-9685-7cfd9d4c0956.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 3786 IP address blocks: 23.58.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:67:3d:64:1d:58:6f:e8:a4:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=b6af1766-8e64-4c39-9ac9-1f62a3548a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:12:5e:98:e5:af:19:21:a4:55:b8:27:1c: e6:ae:02:0e:85:25:73:96:cf:52:81:db:86:04:d9: 71:83:ae:9c:62:83:95:92:31:f5:84:79:10:59:0a: 07:38:03:1b:cc:6e:1b:c3:38:ca:b8:3f:a4:cd:fc: 6f:0a:8b:2a:06:7f:13:25:d4:31:9c:ae:0d:71:35: 6b:0a:9c:b7:7a:92:34:c0:5a:97:b9:52:34:bb:5a: 6f:ff:0b:76:ac:57:1d:34:5c:af:0a:0f:8a:92:b3: 3d:df:f3:c6:31:38:99:5a:de:c1:af:e7:16:65:08: 43:47:1c:00:9f:5f:23:b4:30:1a:49:07:52:d7:21: e4:83:61:3b:3c:6f:f6:de:13:6c:16:fd:38:f7:ae: 76:b9:14:b2:77:21:fb:0d:5b:b0:73:ee:3b:f6:46: ac:06:a2:e0:df:c9:4b:c1:4a:ac:6d:1e:0e:ff:e8: 8e:7f:6a:13:d3:b5:43:0d:fd:5e:bf:35:2e:65:69: f7:39:6e:56:00:5b:39:53:f1:f2:e5:e7:f1:1f:70: 30:6a:7f:5f:d4:b7:8e:79:38:64:e0:43:49:a6:bd: 8c:0f:97:10:ea:44:7a:9d:e3:27:99:e6:2c:10:b4: 55:88:65:ea:ad:6a:90:c9:e6:b4:0c:18:2b:15:30: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FC:20:B7:FA:30:95:82:94:14:E1:7C:07:71:C0:E8:17:CA:C9:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f712885e-ab58-36d0-9685-7cfd9d4c0956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e9:b5:ae:db:99:53:c3:c5:56:97:3f:a9:23:0f:eb:52:a6: 0e:b7:dc:a9:b0:e5:92:05:0a:87:6b:ea:1f:f7:8b:02:34:8c: c3:da:29:f2:f7:3f:89:2b:81:ab:89:78:d7:9b:dd:0a:3e:3a: 7c:75:14:24:b5:21:df:ed:cd:88:f1:d5:6b:f6:3e:ed:8e:2c: 3e:c5:c1:97:83:8e:e3:2a:82:17:87:f4:39:d2:5a:98:40:38: 0d:eb:cb:bd:ab:4d:d8:02:ff:f9:ac:9d:07:19:2c:15:2f:e9: 62:c2:c2:39:45:35:0f:64:d9:f9:41:89:fb:86:26:5f:e3:ac: a4:31:9e:8e:80:15:bc:4a:84:d3:46:a5:82:14:4b:18:49:4d: 46:1c:c1:af:0e:a3:76:71:29:79:dc:82:2c:46:cc:9b:55:28: de:fc:db:1f:89:f8:6a:08:f0:7e:8a:10:54:26:6a:c4:72:99: 08:34:8c:13:bd:d5:18:e1:19:7a:ed:56:bb:df:07:56:e8:fe: a0:a4:36:b2:22:3f:f2:ff:9e:9b:d9:65:c1:91:c8:4f:4b:b4: e6:b3:ae:44:26:01:d8:3b:97:49:4f:ef:0a:f9:2d:2e:cd:be: 8d:3f:28:4e:65:84:aa:25:08:3b:03:ef:37:f9:43:61:18:75: 0e:27:f2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Gc9ZB1Yb+ikQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk YjZhZjE3NjYtOGU2NC00YzM5LTlhYzktMWY2MmEzNTQ4YTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+kSXpjlrxkhpFW4JxzmrgIOhSVzls9SgduG BNlxg66cYoOVkjH1hHkQWQoHOAMbzG4bwzjKuD+kzfxvCosqBn8TJdQxnK4NcTVr Cpy3epI0wFqXuVI0u1pv/wt2rFcdNFyvCg+KkrM93/PGMTiZWt7Br+cWZQhDRxwA n18jtDAaSQdS1yHkg2E7PG/23hNsFv049652uRSydyH7DVuwc+479kasBqLg38lL wUqsbR4O/+iOf2oT07VDDf1evzUuZWn3OW5WAFs5U/Hy5efxH3Awan9f1LeOeThk 4ENJpr2MD5cQ6kR6neMnmeYsELRViGXqrWqQyea0DBgrFTB+EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH8ILf6MJWClBThfAdxwOgXysl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjcxMjg4NWUtYWI1OC0z NmQwLTk2ODUtN2NmZDlkNGMwOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPpta7bmVPDxVaXP6kjD+tSpg633Kmw5ZIFCodr6h/3iwI0jMPaKfL3 P4krgauJeNeb3Qo+Onx1FCS1Id/tzYjx1Wv2Pu2OLD7FwZeDjuMqgheH9DnSWphA OA3ry72rTdgC//msnQcZLBUv6WLCwjlFNQ9k2flBifuGJl/jrKQxno6AFbxKhNNG pYIUSxhJTUYcwa8Oo3ZxKXncgixGzJtVKN782x+J+GoI8H6KEFQmasRymQg0jBO9 1RjhGXrtVrvfB1bo/qCkNrIiP/L/npvZZcGRyE9LtOazrkQmAdg7l0lP7wr5LS7N vo0/KE5lhKolCDsD7zf5Q2EYdQ4n8ow= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:35 2025 by rpki-client