$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0607f831-3579-3acf-aaec-8946dccfa0e5.roa File: 0607f831-3579-3acf-aaec-8946dccfa0e5.roa (raw, json) Hash identifier: ozmk+oHHAKyokTNPkhXY8MX/tO62b1gPVEJ+E1fEsJM= Subject key identifier: 39:C9:A6:79:B1:D1:EA:AA:67:DA:34:73:A7:5B:DD:BB:0F:3E:0B:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6FB7AF26A7DE9D75ECD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0607f831-3579-3acf-aaec-8946dccfa0e5.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.59.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:fb:7a:f2:6a:7d:e9:d7:5e:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=88e33b95-c7e0-496b-91d3-c1acb824149b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:83:fd:f4:48:d5:1a:5d:ad:ba:e3:0e:44:15: db:6a:1e:0c:78:92:ed:77:79:d1:45:41:3f:14:e3: 18:a3:7b:c8:22:78:1e:96:10:7e:1c:73:97:4e:46: a6:44:5f:b5:ff:e0:b1:29:c2:b8:04:de:a3:fd:7c: cc:17:6d:c6:54:72:11:ca:6d:a4:49:dd:0c:01:15: 26:37:91:c7:2e:2d:76:ac:7f:33:6c:03:c0:83:0f: e6:bc:d6:e6:47:31:58:60:d5:fe:98:ce:94:1e:e4: 59:da:9e:ea:8d:c2:ef:3d:df:e0:4f:66:f8:90:50: d5:77:6c:29:94:4a:e5:b7:55:d5:3a:c0:6d:b2:48: df:75:04:c4:c7:ff:b4:a7:63:cf:ef:ed:a8:f5:70: 13:b8:26:ca:ed:55:43:f7:ea:d9:22:2d:d1:27:28: 6a:41:d3:55:a4:f7:71:9d:4e:c1:34:62:fa:95:95: 99:e0:e4:c4:f0:1d:70:23:55:c5:24:73:d2:74:95: 29:40:12:24:95:6f:79:13:13:22:8a:c1:74:38:88: 82:c4:aa:95:9b:ce:34:0e:a0:47:46:b1:a6:b5:b6: e1:22:fe:4c:86:7c:17:cb:c6:b6:c0:14:cf:33:ff: be:e1:c4:11:e9:cc:86:1b:ca:5c:eb:dc:cf:cd:8d: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C9:A6:79:B1:D1:EA:AA:67:DA:34:73:A7:5B:DD:BB:0F:3E:0B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0607f831-3579-3acf-aaec-8946dccfa0e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6d:27:9e:f6:18:2d:0e:59:47:51:f3:ee:9d:73:38:5a:62: f5:63:0d:56:5a:20:a2:53:bc:bc:1f:56:9a:17:bb:10:6a:9c: b2:c0:a8:97:f8:28:f6:5e:ca:50:12:7e:c2:f9:26:b8:1d:1c: 12:e2:da:07:4a:32:44:99:09:09:07:ee:14:44:74:18:4b:1f: 3c:c5:f1:46:92:cd:1a:11:95:ee:6b:e6:44:07:05:83:72:5b: a7:cd:8c:cc:9a:16:d0:83:b3:a0:55:b0:f3:22:f7:28:60:7c: e5:b9:7a:28:ad:4a:f2:e3:62:e6:f2:90:15:18:1a:da:06:62: 15:ea:0e:4b:c6:fe:85:a1:27:1f:d0:cb:90:92:56:7a:49:ee: 13:f8:00:5d:a8:4b:3d:7c:07:eb:ca:57:09:ae:47:ae:0f:26: 70:02:29:71:ae:fb:dc:5f:47:f8:f4:8c:a9:f5:16:a5:f1:28: 87:28:75:eb:f9:e5:31:c7:44:09:cc:be:95:5b:9a:f8:e6:ae: 56:73:e3:cd:4c:99:5f:21:71:29:db:48:95:b9:44:25:c6:22: 20:ce:7a:aa:81:e8:bb:d9:45:ef:39:88:21:8a:88:d9:e0:ef: a3:58:ec:c4:05:dd:75:39:57:f9:00:f2:0b:2d:9e:95:cd:30: 45:ed:d7:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vt68mp96ddezYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ODhlMzNiOTUtYzdlMC00OTZiLTkxZDMtYzFhY2I4MjQxNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloP99EjVGl2tuuMORBXbah4MeJLtd3nRRUE/ FOMYo3vIIngelhB+HHOXTkamRF+1/+CxKcK4BN6j/XzMF23GVHIRym2kSd0MARUm N5HHLi12rH8zbAPAgw/mvNbmRzFYYNX+mM6UHuRZ2p7qjcLvPd/gT2b4kFDVd2wp lErlt1XVOsBtskjfdQTEx/+0p2PP7+2o9XATuCbK7VVD9+rZIi3RJyhqQdNVpPdx nU7BNGL6lZWZ4OTE8B1wI1XFJHPSdJUpQBIklW95ExMiisF0OIiCxKqVm840DqBH RrGmtbbhIv5MhnwXy8a2wBTPM/++4cQR6cyGG8pc69zPzY2+1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnJpnmx0eqqZ9o0c6db3bsPPgsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDYwN2Y4MzEtMzU3OS0z YWNmLWFhZWMtODk0NmRjY2ZhMGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBtJ572GC0OWUdR8+6dczhaYvVjDVZaIKJTvLwfVpoXuxBqnLLAqJf4 KPZeylASfsL5JrgdHBLi2gdKMkSZCQkH7hREdBhLHzzF8UaSzRoRle5r5kQHBYNy W6fNjMyaFtCDs6BVsPMi9yhgfOW5eiitSvLjYubykBUYGtoGYhXqDkvG/oWhJx/Q y5CSVnpJ7hP4AF2oSz18B+vKVwmuR64PJnACKXGu+9xfR/j0jKn1FqXxKIcodev5 5THHRAnMvpVbmvjmrlZz481MmV8hcSnbSJW5RCXGIiDOeqqB6LvZRe85iCGKiNng 76NY7MQF3XU5V/kA8gstnpXNMEXt10w= -----END CERTIFICATE-----Generated at Mon Oct 20 10:27:40 2025 by rpki-client