$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8aff9905-6a04-3e5e-9cc8-c09d7945de2b.roa File: 8aff9905-6a04-3e5e-9cc8-c09d7945de2b.roa (raw, json) Hash identifier: ef1s5db9C7DqMga9bpOBJth5TtPJ6uQGBLBYd5MeNds= Subject key identifier: 7C:46:8B:A0:47:67:6E:A5:1A:EA:07:AB:F2:D7:A3:4E:3D:16:DC:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A1F90288BFF0E85456AD248C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8aff9905-6a04-3e5e-9cc8-c09d7945de2b.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 20940 IP address blocks: 23.59.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:28:8b:ff:0e:85:45:6a:d2:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=92a9041a-3d58-4fdb-8459-e6ebc7bcc87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:fe:e7:4a:43:c5:36:f7:1c:4a:48:4f:d1: 38:49:e0:2e:7c:e2:00:12:ef:1c:76:10:d9:d3:ed: bf:9c:21:c3:4e:30:aa:09:27:ba:50:62:57:8f:ea: 8f:fa:c3:46:9c:ee:c6:2f:4d:c0:d7:f1:78:2c:32: e9:ca:4c:a4:54:ca:06:03:27:4b:60:83:5c:4c:2e: fb:f6:09:b8:a2:ab:ad:3f:8c:37:6a:05:76:35:93: 4e:2f:be:9a:15:91:77:b0:aa:4d:ee:7b:27:3a:33: 45:2c:3e:44:a9:90:53:f0:0b:e2:10:10:ba:1d:be: 6e:80:18:89:c4:1c:f2:9f:e8:ba:0e:f1:7b:2d:00: 96:bb:14:8c:d7:fc:3c:9b:5d:2b:79:96:0f:78:37: a6:b9:8f:d0:6f:56:c9:24:1b:f2:21:66:b8:fa:ad: 5c:d0:f9:04:da:7e:0a:59:88:fc:72:16:f6:a2:bb: cd:53:ff:64:03:85:ba:a9:fb:15:d2:a5:6e:96:4d: e9:f5:a2:10:9a:68:24:22:97:e9:a8:fc:26:b1:1d: c9:af:c6:2c:80:dc:9d:87:b1:09:c0:53:a2:f8:46: 0e:5b:5c:59:ae:3e:fb:24:c8:10:2c:a0:8c:ec:52: f9:ba:a7:6e:0a:85:e6:5e:98:da:02:44:c0:d3:6d: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:46:8B:A0:47:67:6E:A5:1A:EA:07:AB:F2:D7:A3:4E:3D:16:DC:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8aff9905-6a04-3e5e-9cc8-c09d7945de2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:86:f6:0f:33:69:97:5e:b5:58:90:dd:8f:88:c4:26:08:26: e2:fc:5b:3a:52:5a:38:d4:dd:3c:88:15:4d:0b:27:ab:c2:69: 2b:aa:96:b4:1d:67:9e:a6:ec:6a:95:63:af:d6:9c:dc:b2:88: c6:88:a4:f0:0c:b2:8f:80:df:c6:8d:ae:5e:d4:81:01:28:3b: 3d:24:73:96:98:67:28:81:3f:5a:3d:6a:43:fd:5f:b0:ba:c3: be:fe:88:48:4a:10:ee:10:e9:d5:20:d9:e1:19:94:ee:0e:73: 94:ac:2c:8a:84:61:b2:ca:1d:0d:e1:c8:8b:55:72:f9:a7:08: 91:fd:72:33:9f:56:27:b8:cd:fd:72:9a:7f:43:a6:5d:c8:55: 1a:69:e9:1d:a9:6a:e5:4d:3e:e9:80:f3:77:6f:2d:27:12:3c: ac:18:2b:fb:4e:b3:c0:21:05:be:f0:bf:6b:76:b8:56:b9:fd: aa:8c:10:dc:2d:bd:0b:75:16:12:83:f4:08:cd:3c:9f:e4:1f: f3:4c:00:5d:af:a6:08:85:b1:4b:26:ed:05:bd:83:65:77:5a: 62:38:8c:b1:d8:da:6f:00:d5:1b:7c:22:b3:d0:41:e1:0f:50: 42:b0:df:fa:58:e8:3c:6a:2c:01:7b:85:0d:2d:50:a5:70:fb: 91:97:71:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCiL/w6FRWrSSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk OTJhOTA0MWEtM2Q1OC00ZmRiLTg0NTktZTZlYmM3YmNjODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6v+50pDxTb3HEpIT9E4SeAufOIAEu8cdhDZ 0+2/nCHDTjCqCSe6UGJXj+qP+sNGnO7GL03A1/F4LDLpykykVMoGAydLYINcTC77 9gm4oqutP4w3agV2NZNOL76aFZF3sKpN7nsnOjNFLD5EqZBT8AviEBC6Hb5ugBiJ xBzyn+i6DvF7LQCWuxSM1/w8m10reZYPeDemuY/Qb1bJJBvyIWa4+q1c0PkE2n4K WYj8chb2orvNU/9kA4W6qfsV0qVulk3p9aIQmmgkIpfpqPwmsR3Jr8YsgNydh7EJ wFOi+EYOW1xZrj77JMgQLKCM7FL5uqduCoXmXpjaAkTA02367wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxGi6BHZ26lGuoHq/LXo049FtyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGFmZjk5MDUtNmEwNC0z ZTVlLTljYzgtYzA5ZDc5NDVkZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyG9g8zaZdetViQ3Y+IxCYIJuL8WzpSWjjU3TyIFU0LJ6vCaSuqlrQd Z56m7GqVY6/WnNyyiMaIpPAMso+A38aNrl7UgQEoOz0kc5aYZyiBP1o9akP9X7C6 w77+iEhKEO4Q6dUg2eEZlO4Oc5SsLIqEYbLKHQ3hyItVcvmnCJH9cjOfVie4zf1y mn9Dpl3IVRpp6R2pauVNPumA83dvLScSPKwYK/tOs8AhBb7wv2t2uFa5/aqMENwt vQt1FhKD9AjNPJ/kH/NMAF2vpgiFsUsm7QW9g2V3WmI4jLHY2m8A1Rt8IrPQQeEP UEKw3/pY6DxqLAF7hQ0tUKVw+5GXcYk= -----END CERTIFICATE-----Generated at Sun Jun 29 12:43:48 2025 by rpki-client