$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7973a3-6ebf-36fc-acb9-daa1499ebb96.roa File: 4e7973a3-6ebf-36fc-acb9-daa1499ebb96.roa (raw, json) Hash identifier: wkGhW8lo1nS9OQUwKcONGn6W7HHvsQzDklPySA9stuQ= Subject key identifier: 3B:AC:50:E8:0F:EA:6C:08:97:B4:E5:E8:4D:6D:14:C7:D7:1D:8A:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858496CE475E4B5BE5145F4C3F260 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7973a3-6ebf-36fc-acb9-daa1499ebb96.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 16625 IP address blocks: 23.58.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:75:e4:b5:be:51:45:f4:c3:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=299790de-d7a6-4674-9b81-207d3b706135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:74:f5:0b:fb:9b:ad:4c:90:e1:23:ba:a7:80: 97:ff:03:5e:69:b6:25:32:c9:bf:05:b4:51:4a:72: 17:02:a0:73:82:2a:8f:65:dd:d8:c8:02:40:8e:4d: 43:2c:1e:47:b0:f9:c9:a9:ad:1e:1d:ba:c0:66:80: a9:1c:74:d1:cd:c5:82:da:14:27:8d:8f:8c:0a:9b: db:f7:49:bf:15:c2:ad:89:06:ab:53:10:97:42:d2: df:b7:ea:9a:ef:c2:5b:a3:b1:eb:02:cf:5b:da:37: c5:c3:16:f5:4e:6d:fb:6d:4d:21:b0:79:94:50:a6: da:b8:26:e0:a0:0c:50:f4:fb:94:13:7e:da:aa:5e: f7:b6:e9:0a:7b:f0:ec:2f:a0:28:b5:71:c0:8b:5d: 43:3f:9d:36:be:9a:ec:a6:13:a6:72:08:41:23:f4: 4e:6a:53:22:6f:ee:5d:cb:c8:c1:72:42:ee:aa:89: d8:7e:80:49:74:4e:b4:76:f6:f1:98:5d:d4:97:f7: 1d:10:4e:c0:51:08:29:ad:cf:3e:34:7b:9c:ea:59: 5d:64:7f:22:76:56:06:e4:29:66:42:d0:fc:4a:41: 35:7f:e5:0c:48:ae:f7:b5:7b:64:46:de:65:8e:e0: 59:96:f7:4f:78:b9:8c:b6:96:04:c9:c4:52:76:5b: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AC:50:E8:0F:EA:6C:08:97:B4:E5:E8:4D:6D:14:C7:D7:1D:8A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7973a3-6ebf-36fc-acb9-daa1499ebb96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a7:db:e4:2b:df:84:99:73:a4:e7:c4:d8:5a:0d:e3:77:54: 7f:fb:09:c6:5f:57:34:13:1d:37:ae:84:b2:fd:41:2e:3d:9a: be:a6:7f:9b:54:44:8b:cd:d9:e5:60:87:fa:d2:06:95:e6:ec: a5:d1:f5:fc:be:a3:d0:ca:f5:f3:1d:2c:79:fd:e8:4b:4d:54: 29:b1:3e:1d:e5:8c:d1:2d:e9:f2:9f:2c:22:f4:8f:72:ed:d4: 7e:a5:78:66:70:96:35:42:f6:5d:6a:c5:da:61:b8:e2:d7:78: 19:6f:91:da:1f:f0:e3:49:a0:e9:4b:26:b2:6f:2d:d5:47:e5: 11:1b:8e:bd:93:c9:7b:a7:a3:01:6f:b2:af:b7:cd:08:43:46: 96:9d:ed:62:27:55:bd:97:ed:dc:1e:14:36:65:91:cc:a7:ea: fe:e5:e1:3c:01:93:4b:72:4d:6a:6e:22:2f:8d:4d:ef:b0:90: e3:b9:b3:56:97:77:0a:80:90:1c:69:ba:21:6b:95:8c:72:7d: e2:60:18:2d:78:e2:6c:f1:fc:c9:df:fe:05:91:60:dd:77:90: ea:c6:3c:46:38:ec:b4:dc:20:50:70:9d:e6:6a:e7:57:58:65: ef:90:a7:c4:c5:d8:53:d4:3c:d0:2d:04:0c:5b:68:94:5a:db: d9:e4:69:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5HXktb5RRfTD8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk Mjk5NzkwZGUtZDdhNi00Njc0LTliODEtMjA3ZDNiNzA2MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHT1C/ubrUyQ4SO6p4CX/wNeabYlMsm/BbRR SnIXAqBzgiqPZd3YyAJAjk1DLB5HsPnJqa0eHbrAZoCpHHTRzcWC2hQnjY+MCpvb 90m/FcKtiQarUxCXQtLft+qa78Jbo7HrAs9b2jfFwxb1Tm37bU0hsHmUUKbauCbg oAxQ9PuUE37aql73tukKe/DsL6AotXHAi11DP502vprsphOmcghBI/ROalMib+5d y8jBckLuqonYfoBJdE60dvbxmF3Ul/cdEE7AUQgprc8+NHuc6lldZH8idlYG5Clm QtD8SkE1f+UMSK73tXtkRt5ljuBZlvdPeLmMtpYEycRSdlvqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDusUOgP6mwIl7Tl6E1tFMfXHYo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU3OTczYTMtNmViZi0z NmZjLWFjYjktZGFhMTQ5OWViYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJan2+Qr34SZc6TnxNhaDeN3VH/7CcZfVzQTHTeuhLL9QS49mr6mf5tU RIvN2eVgh/rSBpXm7KXR9fy+o9DK9fMdLHn96EtNVCmxPh3ljNEt6fKfLCL0j3Lt 1H6leGZwljVC9l1qxdphuOLXeBlvkdof8ONJoOlLJrJvLdVH5REbjr2TyXunowFv sq+3zQhDRpad7WInVb2X7dweFDZlkcyn6v7l4TwBk0tyTWpuIi+NTe+wkOO5s1aX dwqAkBxpuiFrlYxyfeJgGC144mzx/Mnf/gWRYN13kOrGPEY47LTcIFBwneZq51dY Ze+Qp8TF2FPUPNAtBAxbaJRa29nkafc= -----END CERTIFICATE-----Generated at Sat Jun 7 22:53:32 2025 by rpki-client