$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3eb4298f-285b-3ca3-8b57-93822803c39a.roa File: 3eb4298f-285b-3ca3-8b57-93822803c39a.roa (raw, json) Hash identifier: moQygpSTvrsdiQTrPs8iM1PBem6L8L23LkG0Xp2CmDg= Subject key identifier: 58:1F:40:09:CB:62:71:8E:19:C7:84:FC:31:B4:93:55:E1:65:D2:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B37DD27854F714F545580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3eb4298f-285b-3ca3-8b57-93822803c39a.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.59.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:37:dd:27:85:4f:71:4f:54:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=2dfc274f-c9e0-47ea-a3c8-f0a5472bee1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:25:30:85:82:11:b0:bf:ee:64:e1:52:0d:3b: 62:55:d7:3b:4d:41:96:22:13:b6:27:85:08:a1:0e: cc:e2:86:9e:0a:a7:ad:6c:35:c6:30:b5:61:20:a7: a4:47:84:44:8a:55:a9:74:24:7a:31:12:23:70:b0: 81:9d:8e:c3:6c:14:75:7e:0f:7f:a7:20:80:42:af: 74:95:74:4a:ce:95:30:20:56:ac:2f:0c:40:3a:68: 30:2d:9b:3a:31:db:ec:84:26:45:cb:67:f3:2d:56: 9d:39:db:96:0b:94:0f:af:9d:bb:f2:42:8d:2d:cc: e1:af:b5:3f:21:76:af:b5:d0:09:3c:93:c3:c9:d0: 42:80:de:e7:cd:fb:8c:0f:3f:56:e2:38:5c:75:f5: bd:de:cd:a4:7c:56:17:06:8e:99:2d:f6:ed:d7:56: 6a:26:66:8f:a2:b4:67:19:67:38:f3:37:72:3c:f7: f1:7d:1b:78:3f:fa:ea:4d:70:bb:7a:d1:56:ff:dc: c8:8c:44:2d:dd:99:ad:9d:a7:46:77:d2:d1:8f:98: 52:f0:1a:26:e4:fb:20:a6:92:5a:f3:22:97:e0:3d: 5b:33:58:90:60:08:a8:1a:51:09:bd:0e:4a:c6:ce: d8:b5:9f:0b:b5:9c:b1:d0:55:15:7e:43:15:51:9e: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1F:40:09:CB:62:71:8E:19:C7:84:FC:31:B4:93:55:E1:65:D2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3eb4298f-285b-3ca3-8b57-93822803c39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:74:84:87:f9:77:89:7a:56:65:4e:bb:f8:ad:66:b8:78:fe: f7:72:e1:70:d6:54:60:44:04:7e:ca:14:36:c1:61:8c:61:13: 68:6e:6b:d0:7f:fc:6e:54:3b:74:30:98:0b:d3:e9:5b:d0:98: 4f:34:47:63:3c:04:39:df:75:33:cb:36:e0:50:ac:ca:af:90: 84:c2:0c:15:6c:f9:7e:85:fd:ab:11:9f:a2:ec:57:fc:8b:5f: 02:0f:0e:0a:80:f7:61:92:11:2e:fd:27:ef:82:b3:cf:d8:d3: 53:02:cf:e3:fc:ab:05:c5:90:8f:83:fe:02:bc:6d:93:1c:ae: 65:3d:1b:45:02:56:3f:0a:7c:ae:de:d7:69:53:3b:23:ea:b2: bb:d8:20:b4:f3:c0:21:e5:ef:4e:85:12:4d:1c:a3:9b:6d:0a: 71:76:ce:a4:4c:18:c3:75:f1:bb:fb:de:e7:5e:69:ea:e9:8a: 6d:43:14:44:20:0e:1c:1d:d1:5f:63:f4:f2:b1:9c:9a:e8:00: 29:65:58:4b:99:d7:12:7c:1f:fc:c8:d1:b0:e7:a6:10:3b:f1: fb:e6:c0:7a:67:6c:6a:83:0f:be:ef:44:c5:d8:00:82:1b:68: a1:e5:b6:20:f0:73:46:ad:19:1d:30:62:07:e2:d1:7e:8c:79: 7a:dd:55:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOzfdJ4VPcU9UVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MmRmYzI3NGYtYzllMC00N2VhLWEzYzgtZjBhNTQ3MmJlZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CUwhYIRsL/uZOFSDTtiVdc7TUGWIhO2J4UI oQ7M4oaeCqetbDXGMLVhIKekR4REilWpdCR6MRIjcLCBnY7DbBR1fg9/pyCAQq90 lXRKzpUwIFasLwxAOmgwLZs6MdvshCZFy2fzLVadOduWC5QPr5278kKNLczhr7U/ IXavtdAJPJPDydBCgN7nzfuMDz9W4jhcdfW93s2kfFYXBo6ZLfbt11ZqJmaPorRn GWc48zdyPPfxfRt4P/rqTXC7etFW/9zIjEQt3ZmtnadGd9LRj5hS8Bom5PsgppJa 8yKX4D1bM1iQYAioGlEJvQ5Kxs7YtZ8LtZyx0FUVfkMVUZ7dHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgfQAnLYnGOGceE/DG0k1XhZdIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ViNDI5OGYtMjg1Yi0z Y2EzLThiNTctOTM4MjI4MDNjMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA50hIf5d4l6VmVOu/itZrh4/vdy4XDWVGBEBH7KFDbBYYxhE2hua9B/ /G5UO3QwmAvT6VvQmE80R2M8BDnfdTPLNuBQrMqvkITCDBVs+X6F/asRn6LsV/yL XwIPDgqA92GSES79J++Cs8/Y01MCz+P8qwXFkI+D/gK8bZMcrmU9G0UCVj8KfK7e 12lTOyPqsrvYILTzwCHl706FEk0co5ttCnF2zqRMGMN18bv73udeaerpim1DFEQg Dhwd0V9j9PKxnJroACllWEuZ1xJ8H/zI0bDnphA78fvmwHpnbGqDD77vRMXYAIIb aKHltiDwc0atGR0wYgfi0X6MeXrdVWI= -----END CERTIFICATE-----Generated at Sun Jun 29 17:44:46 2025 by rpki-client