$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba6bc0e-7a99-3d5f-9dd7-4380e7447be7.roa File: fba6bc0e-7a99-3d5f-9dd7-4380e7447be7.roa (raw, json) Hash identifier: RJ3tilHe9gysdCjUjkNG6xFdZLIrMdOkl4emMpg70NA= Subject key identifier: 88:0F:28:B8:BC:2C:E3:DF:13:70:FF:FF:11:C0:18:8E:E6:C7:53:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A62908B019ED90E7BF8E83100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba6bc0e-7a99-3d5f-9dd7-4380e7447be7.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 20940 IP address blocks: 23.58.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:8b:01:9e:d9:0e:7b:f8:e8:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=30ca9deb-48ff-4570-827a-17a20197dae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:12:7a:68:6b:da:48:90:c1:78:75:52:b1:84: 02:07:e6:a4:45:49:16:48:dd:d6:56:3f:a5:09:64: f0:bf:21:6f:e5:41:e2:bc:df:af:78:b3:d7:ae:50: 3e:77:4f:43:0b:78:35:50:e9:9d:08:fb:e9:77:cb: d6:31:20:06:d8:45:89:bf:6a:ab:3e:48:fe:fe:73: 6e:a2:06:6a:c6:ea:71:0a:7a:a8:25:ec:a6:5f:23: fc:65:be:ab:86:95:53:3f:5d:07:7f:ec:a5:72:c0: 8d:f6:76:8b:34:9e:45:b0:2e:93:32:79:6b:da:43: 95:1f:7a:8d:6d:20:fa:91:35:df:4c:84:a8:ee:72: 1b:7f:09:7f:a1:3c:02:c6:a0:e2:9a:a1:18:5e:46: de:2e:2f:69:92:18:b3:6b:65:e1:4d:a2:62:8b:f4: 92:d7:d3:d8:0a:f1:41:e0:90:44:7a:85:57:c5:5b: 93:a9:5d:75:53:35:05:26:e0:aa:a1:2c:63:b0:0c: 80:40:ee:7f:ad:4e:a1:6b:08:3f:03:df:c6:2e:ca: 3e:6c:47:64:8d:31:09:c1:9b:e6:ed:fc:42:eb:64: 1a:08:bd:b3:ff:c5:19:e6:49:b0:fa:05:38:93:e4: 94:2f:2e:ae:45:2b:1f:a3:13:6f:ff:80:ae:89:9c: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0F:28:B8:BC:2C:E3:DF:13:70:FF:FF:11:C0:18:8E:E6:C7:53:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba6bc0e-7a99-3d5f-9dd7-4380e7447be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:be:08:a6:a1:9e:11:46:4b:72:3a:c8:d5:bf:72:7d:d0:d5: a1:cc:b3:8a:cf:ec:bf:d0:25:66:9c:1a:1d:b0:18:cb:33:60: ba:26:f7:98:2e:25:c5:29:4a:62:85:24:e2:52:b1:1c:4f:59: c6:e6:66:da:b8:72:96:ca:14:89:0a:3e:2f:12:e0:5c:a4:31: ce:55:69:2e:2b:9d:f6:fc:c8:a6:a1:d8:6b:6c:d1:52:4a:5a: 6a:1d:da:90:3a:a7:6d:f1:b9:8c:17:4f:75:70:ca:46:98:6c: af:ca:e8:73:d7:1e:e5:e2:d6:17:39:d7:c4:cb:e7:96:75:f0: ca:cc:07:93:b9:ca:89:92:0b:20:f5:76:0e:9e:17:09:83:a2: b9:1f:93:f9:21:e1:bb:6d:31:0c:c0:ca:ae:35:3d:27:9c:c1: d2:0a:0c:48:01:00:d6:94:15:5c:d9:31:9c:51:9f:a0:a7:54: 32:7f:71:02:5d:d1:87:b6:3a:e4:3a:5d:bf:81:a1:2d:41:69: 99:c4:f3:21:d5:fb:67:0d:09:29:4c:33:a0:49:c3:37:be:ce: b0:a2:c1:05:bd:4e:da:b8:f3:b8:a4:e5:fa:f1:57:5a:e0:b1: 29:cd:0f:52:47:80:cf:1c:a0:5b:13:1a:d5:27:c3:3f:fd:4c: d0:e8:a7:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikIsBntkOe/joMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MzBjYTlkZWItNDhmZi00NTcwLTgyN2EtMTdhMjAxOTdkYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihJ6aGvaSJDBeHVSsYQCB+akRUkWSN3WVj+l CWTwvyFv5UHivN+veLPXrlA+d09DC3g1UOmdCPvpd8vWMSAG2EWJv2qrPkj+/nNu ogZqxupxCnqoJeymXyP8Zb6rhpVTP10Hf+ylcsCN9naLNJ5FsC6TMnlr2kOVH3qN bSD6kTXfTISo7nIbfwl/oTwCxqDimqEYXkbeLi9pkhiza2XhTaJii/SS19PYCvFB 4JBEeoVXxVuTqV11UzUFJuCqoSxjsAyAQO5/rU6hawg/A9/GLso+bEdkjTEJwZvm 7fxC62QaCL2z/8UZ5kmw+gU4k+SULy6uRSsfoxNv/4CuiZz+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgPKLi8LOPfE3D//xHAGI7mx1PwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmJhNmJjMGUtN2E5OS0z ZDVmLTlkZDctNDM4MGU3NDQ3YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzpUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm+CKahnhFGS3I6yNW/cn3Q1aHMs4rP7L/QJWacGh2wGMszYLom95gu JcUpSmKFJOJSsRxPWcbmZtq4cpbKFIkKPi8S4FykMc5VaS4rnfb8yKah2Gts0VJK Wmod2pA6p23xuYwXT3VwykaYbK/K6HPXHuXi1hc518TL55Z18MrMB5O5yomSCyD1 dg6eFwmDorkfk/kh4bttMQzAyq41PSecwdIKDEgBANaUFVzZMZxRn6CnVDJ/cQJd 0Ye2OuQ6Xb+BoS1BaZnE8yHV+2cNCSlMM6BJwze+zrCiwQW9Ttq487ik5frxV1rg sSnND1JHgM8coFsTGtUnwz/9TNDop4U= -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:58 2025 by rpki-client