$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74f6b60c-747a-3dfb-a6c4-ba32c66cfa6b.roa File: 74f6b60c-747a-3dfb-a6c4-ba32c66cfa6b.roa (raw, json) Hash identifier: 1yY29C2gxkXO50kol1854TkYaizEgXSdkSvmxTqmwFQ= Subject key identifier: 7E:5B:52:9C:78:65:BE:F2:54:EB:D1:22:4E:12:87:2E:47:5F:1F:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B295D6732D52716695280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74f6b60c-747a-3dfb-a6c4-ba32c66cfa6b.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 24319 IP address blocks: 23.59.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:29:5d:67:32:d5:27:16:69:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=8eeba824-8a91-4501-b5a7-282701bcbad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a5:97:2c:04:a9:c4:10:57:3c:49:6f:d5:a4: 1d:52:9b:be:7d:a3:c9:f4:d5:6e:22:1a:a9:6a:7f: c6:26:e4:9d:11:61:d2:66:43:97:e4:6e:4f:46:cf: 6d:8c:31:ed:94:3e:fc:a7:85:3e:f1:b2:97:a2:e0: b6:e4:11:8a:86:f8:58:2c:83:26:0d:63:d8:b6:c6: 09:af:59:17:bf:56:28:c4:77:62:4e:46:59:75:8a: c1:b3:61:ef:83:e9:31:d7:ee:63:c8:cf:49:1b:f9: 57:35:bf:e4:67:f7:73:06:76:aa:d2:68:a3:a5:41: 38:12:91:4c:6e:4c:64:54:ce:64:51:66:93:83:c1: 78:9b:a1:7c:77:eb:1d:b6:08:12:70:01:67:13:a0: 53:c6:95:5b:88:c9:4a:59:59:ae:a2:cd:e2:c0:24: 00:e9:fc:10:53:8a:a1:f3:57:76:99:83:cd:75:ea: 9a:3b:ce:bd:e5:11:b8:9c:61:8d:f6:0c:c7:dc:2b: 02:9b:a6:11:a8:fa:0c:f1:73:78:7b:f7:73:45:5b: 7c:7c:67:b3:ec:b1:1c:fb:56:e4:cc:f1:b5:4e:f7: a4:8e:f4:cd:a4:8e:37:04:fd:80:97:0c:3d:66:31: 2e:80:f1:d6:33:23:44:d4:1d:81:d9:7b:3b:97:3d: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5B:52:9C:78:65:BE:F2:54:EB:D1:22:4E:12:87:2E:47:5F:1F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74f6b60c-747a-3dfb-a6c4-ba32c66cfa6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2f:31:c0:00:6a:c9:e6:2c:ad:1c:74:a0:8f:6f:91:d0:70: 9e:2d:46:6a:03:91:09:cc:ae:55:da:00:b0:2c:c5:95:01:35: 37:94:e5:cd:d5:23:11:06:fd:57:4e:83:3e:f3:02:87:6a:90: 85:4b:37:f5:5d:ef:ec:6f:3e:43:cb:9c:df:7b:04:2f:85:8f: 69:aa:05:57:18:83:f7:3b:02:8d:c6:49:ca:6f:b5:76:7b:52: 24:21:18:48:ca:bc:72:e4:96:3a:e0:cb:3f:84:56:41:95:ce: 12:ed:2c:9d:61:47:a7:ac:4d:ee:61:ab:bc:3c:6e:35:c5:38: 37:0b:7c:54:15:47:d8:2e:11:b1:1b:eb:c8:d8:71:da:48:54: c4:ca:e0:2d:56:82:3b:9e:1f:75:71:1c:a6:dd:5a:3c:35:1e: b4:6d:ac:3a:88:02:2d:a3:71:83:17:88:28:6f:5c:2b:36:0c: 8d:a6:00:8d:7b:98:a6:00:6a:46:33:b2:2f:86:6b:df:92:5b: 1c:b6:df:d7:5d:e5:d7:37:70:90:ef:5a:34:62:02:43:5d:55: e9:34:51:c3:e9:d6:43:47:7e:76:1e:e0:ac:67:e0:96:4c:a5: 9d:6f:da:dd:e4:0a:cb:d4:8b:34:a2:3a:11:9b:ad:e7:18:b7: 59:d0:73:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOyldZzLVJxZpUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk OGVlYmE4MjQtOGE5MS00NTAxLWI1YTctMjgyNzAxYmNiYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6WXLASpxBBXPElv1aQdUpu+faPJ9NVuIhqp an/GJuSdEWHSZkOX5G5PRs9tjDHtlD78p4U+8bKXouC25BGKhvhYLIMmDWPYtsYJ r1kXv1YoxHdiTkZZdYrBs2Hvg+kx1+5jyM9JG/lXNb/kZ/dzBnaq0mijpUE4EpFM bkxkVM5kUWaTg8F4m6F8d+sdtggScAFnE6BTxpVbiMlKWVmuos3iwCQA6fwQU4qh 81d2mYPNdeqaO8695RG4nGGN9gzH3CsCm6YRqPoM8XN4e/dzRVt8fGez7LEc+1bk zPG1TvekjvTNpI43BP2Alww9ZjEugPHWMyNE1B2B2Xs7lz2SfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5bUpx4Zb7yVOvRIk4Shy5HXx+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRmNmI2MGMtNzQ3YS0z ZGZiLWE2YzQtYmEzMmM2NmNmYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzuhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0vMcAAasnmLK0cdKCPb5HQcJ4tRmoDkQnMrlXaALAsxZUBNTeU5c3V IxEG/VdOgz7zAodqkIVLN/Vd7+xvPkPLnN97BC+Fj2mqBVcYg/c7Ao3GScpvtXZ7 UiQhGEjKvHLkljrgyz+EVkGVzhLtLJ1hR6esTe5hq7w8bjXFODcLfFQVR9guEbEb 68jYcdpIVMTK4C1WgjueH3VxHKbdWjw1HrRtrDqIAi2jcYMXiChvXCs2DI2mAI17 mKYAakYzsi+Ga9+SWxy239dd5dc3cJDvWjRiAkNdVek0UcPp1kNHfnYe4Kxn4JZM pZ1v2t3kCsvUizSiOhGbrecYt1nQc50= -----END CERTIFICATE-----Generated at Sun Jun 29 19:07:27 2025 by rpki-client