$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa File: 29630211-a286-36ba-b410-6bef60ebc95c.roa (raw, json) Hash identifier: 8tcmZK4iyp8r1Bet3V1NTd+AzpoSvqQyY4slM5vVUvw= Subject key identifier: 81:98:D2:89:61:FF:46:38:7C:35:97:D8:CC:F9:8E:8B:9B:16:D9:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B004BFAB5F9EBD883BF399640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.59.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:fa:b5:f9:eb:d8:83:bf:39:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=8fa351fb-3a54-4dfc-9930-b3ecf499146f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:d9:cb:17:9f:32:62:70:44:1c:fc:74:8b: 95:b0:89:77:56:ac:73:a3:b2:c7:29:ea:34:69:d0: 76:67:10:c0:be:88:f1:39:27:fc:8b:ff:89:fc:57: 96:8d:a4:a0:bf:cd:46:72:4a:1e:2a:04:42:df:c5: e7:82:94:4b:d8:0a:ce:92:d5:1e:bf:e8:22:4b:c2: 0c:a1:aa:32:a8:3c:b5:d4:6b:a9:1d:8d:28:a2:31: 59:d7:f5:47:bf:75:cb:39:89:52:b7:89:c5:fe:cb: da:2f:91:25:bd:d7:39:d3:35:64:60:79:ee:f8:9d: cd:7c:94:d5:fb:51:3b:f3:52:36:a3:b9:2f:d1:88: 1c:d6:0f:7b:02:04:9c:2f:1b:bc:21:0c:47:bf:e3: b5:ef:3a:ad:0b:58:b4:8d:af:74:30:bb:56:2f:a0: 7b:c5:9d:10:3d:3a:60:70:a3:ca:af:d3:e5:8c:2a: 0f:d8:63:63:13:f5:a8:eb:f9:00:63:09:ff:41:f1: 05:9f:c8:9e:b4:fe:b7:1e:e5:9d:50:e9:a2:10:10: fa:21:fc:2b:5d:58:97:51:9e:ac:16:6b:32:77:ad: 85:fa:dc:fe:63:e9:e8:5d:98:0c:b9:54:aa:5f:d3: d6:6d:1f:cf:fe:3c:97:55:60:b1:a5:fa:b0:dc:a9: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:98:D2:89:61:FF:46:38:7C:35:97:D8:CC:F9:8E:8B:9B:16:D9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:26:10:4f:da:00:dd:98:13:21:7a:8e:50:db:a4:d9:8c:7f: ac:16:49:e5:a9:77:d5:46:02:d4:f0:01:d8:16:cc:65:4a:19: 40:86:6b:c5:6f:ea:a3:a8:f7:14:4c:d0:85:73:1d:46:18:2a: e9:86:ad:8a:5b:28:6c:6a:7b:af:60:97:f5:25:22:b0:a8:9a: c5:fd:26:cf:a1:3b:54:5c:19:f3:f0:af:c0:91:c9:59:40:91: 90:71:b4:36:e3:67:4e:57:ba:97:36:cc:8f:2e:c6:15:00:e0: b8:a0:61:d7:78:bc:0c:2a:61:67:a7:fb:b3:7f:5d:94:62:41: fe:36:de:fa:eb:04:5f:31:12:53:84:48:d0:22:15:61:b7:19: dc:9e:ce:16:a5:75:5e:6e:ca:50:27:7d:bf:f1:47:21:3f:ee: 3a:f5:be:95:63:0b:b0:ac:20:44:62:bf:5f:c6:4d:00:43:50: aa:e9:e2:26:b0:d0:40:a7:02:ab:fc:01:60:b5:95:19:2b:02: 29:c4:66:31:26:fd:3f:aa:7d:ad:cf:66:cd:26:ef:25:c0:ea: 8c:1b:a5:58:66:73:57:5c:97:cd:e0:ec:e9:7d:2b:e8:6b:62: d9:e0:24:b3:85:6e:d4:ff:a9:fb:02:3c:45:e1:12:6f:38:43: a1:54:a0:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/q1+evYg785lkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk OGZhMzUxZmItM2E1NC00ZGZjLTk5MzAtYjNlY2Y0OTkxNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4LZyxefMmJwRBz8dIuVsIl3Vqxzo7LHKeo0 adB2ZxDAvojxOSf8i/+J/FeWjaSgv81GckoeKgRC38XngpRL2ArOktUev+giS8IM oaoyqDy11GupHY0oojFZ1/VHv3XLOYlSt4nF/svaL5Elvdc50zVkYHnu+J3NfJTV +1E781I2o7kv0Ygc1g97AgScLxu8IQxHv+O17zqtC1i0ja90MLtWL6B7xZ0QPTpg cKPKr9PljCoP2GNjE/Wo6/kAYwn/QfEFn8ietP63HuWdUOmiEBD6IfwrXViXUZ6s Fmsyd62F+tz+Y+noXZgMuVSqX9PWbR/P/jyXVWCxpfqw3Kl4JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGY0olh/0Y4fDWX2Mz5joubFtn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjk2MzAyMTEtYTI4Ni0z NmJhLWI0MTAtNmJlZjYwZWJjOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsmEE/aAN2YEyF6jlDbpNmMf6wWSeWpd9VGAtTwAdgWzGVKGUCGa8Vv 6qOo9xRM0IVzHUYYKumGrYpbKGxqe69gl/UlIrComsX9Js+hO1RcGfPwr8CRyVlA kZBxtDbjZ05Xupc2zI8uxhUA4LigYdd4vAwqYWen+7N/XZRiQf423vrrBF8xElOE SNAiFWG3GdyezhaldV5uylAnfb/xRyE/7jr1vpVjC7CsIERiv1/GTQBDUKrp4iaw 0ECnAqv8AWC1lRkrAinEZjEm/T+qfa3PZs0m7yXA6owbpVhmc1dcl83g7Ol9K+hr YtngJLOFbtT/qfsCPEXhEm84Q6FUoAA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:53 2025 by rpki-client