$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd17ed2c-b7ad-3097-b647-d386c7e6bd5e.roa File: bd17ed2c-b7ad-3097-b647-d386c7e6bd5e.roa (raw, json) Hash identifier: /wrfY4HN7M9Rdjndve1C19VMzUh7Wrgd+TfIeYixR/o= Subject key identifier: 87:D9:05:F9:5D:31:23:A7:4B:C0:EF:65:CF:D4:28:72:50:98:49:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DCDC5C43D739915C5F5DBB180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd17ed2c-b7ad-3097-b647-d386c7e6bd5e.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.59.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:c4:3d:73:99:15:c5:f5:db:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=79ba47cc-70c9-45ff-b14c-62a97a86f679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:00:d7:aa:7d:62:7e:e6:4a:e4:a6:59:0d: bb:33:d0:ed:30:33:61:f9:f5:22:85:74:0f:5d:d1: 37:9a:64:b7:b4:10:40:8d:1b:3c:52:1f:3d:12:0a: 5b:f4:49:3c:fe:f6:ac:9b:12:ff:83:c4:ce:46:47: f4:c6:e5:6f:73:d7:93:c0:0b:52:17:41:cc:7b:4c: f2:c3:99:ad:26:59:ce:c0:b8:95:08:b8:0f:96:6b: 9d:14:e0:be:21:e9:70:ba:0f:48:28:b2:85:8b:2f: dc:bb:49:ac:23:4f:33:7b:9e:14:85:59:dc:bc:33: 6e:f9:f8:90:ae:0e:fc:5f:28:69:ca:42:a0:d0:6a: 95:0b:79:82:34:f9:b7:5f:cf:cb:64:99:10:e4:c7: 9a:7e:eb:b2:df:c3:77:54:21:ee:5f:52:b1:59:70: fa:d3:9a:1f:6c:b0:86:3c:5a:16:e2:99:2a:6a:4d: fc:85:2e:e5:45:7d:8c:dc:69:e6:a6:f6:01:c6:e6: a2:90:1d:e2:5a:62:14:5f:55:f9:db:4a:71:d5:f8: 2e:dd:6c:0a:19:b1:ab:cb:02:8b:d9:7a:24:b3:54: c8:77:4a:52:23:7b:70:40:03:6e:1b:d6:84:f2:15: 0b:3c:4d:ad:2c:c1:07:8b:ee:db:91:19:ad:10:f1: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D9:05:F9:5D:31:23:A7:4B:C0:EF:65:CF:D4:28:72:50:98:49:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd17ed2c-b7ad-3097-b647-d386c7e6bd5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:68:cc:ec:1d:46:0c:f4:0e:69:c3:0e:d2:a0:3a:c6:d9:c9: bd:e0:37:81:14:48:2b:57:4b:c0:ac:7e:6b:fc:07:77:5f:59: 2b:64:10:9a:df:44:f3:ca:d5:24:46:fb:d4:ec:b0:85:f1:42: 86:d4:74:9b:b7:1e:aa:9e:6d:26:d1:7f:3c:71:46:57:cc:cf: 39:c8:90:90:0e:bf:df:43:25:40:93:2b:d7:65:73:2e:e1:f9: e9:bf:65:73:1b:e9:81:44:39:75:3e:af:e9:64:51:cc:e4:e7: b2:68:bb:2d:59:45:99:e8:5f:02:1c:55:6e:0e:92:aa:ab:38: 03:d1:50:50:a4:43:77:02:ef:64:cc:1f:9b:76:3c:b7:75:43: f2:e3:95:de:a2:ce:b5:a8:a3:8a:83:9d:13:d6:e1:75:55:ea: c1:60:82:6f:ff:e1:3a:4d:7a:5c:89:cf:3e:2a:95:1a:4c:7c: 14:ee:e9:5a:21:c8:e7:d2:d7:2c:2e:62:3b:16:1d:c2:49:05: 4f:aa:fb:b4:57:70:3c:4e:60:c2:e3:80:22:a3:af:ae:ff:4f: 8d:54:c5:52:ac:1c:9a:3a:2d:63:2c:a6:b5:4f:59:09:6e:9e: 4a:46:33:bc:83:40:74:41:60:5e:3d:bf:13:57:6f:0a:df:fa: ed:43:c1:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxcQ9c5kVxfXbsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk NzliYTQ3Y2MtNzBjOS00NWZmLWIxNGMtNjJhOTdhODZmNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR0A16p9Yn7mSuSmWQ27M9DtMDNh+fUihXQP XdE3mmS3tBBAjRs8Uh89Egpb9Ek8/vasmxL/g8TORkf0xuVvc9eTwAtSF0HMe0zy w5mtJlnOwLiVCLgPlmudFOC+Ielwug9IKLKFiy/cu0msI08ze54UhVncvDNu+fiQ rg78XyhpykKg0GqVC3mCNPm3X8/LZJkQ5Meafuuy38N3VCHuX1KxWXD605ofbLCG PFoW4pkqak38hS7lRX2M3GnmpvYBxuaikB3iWmIUX1X520px1fgu3WwKGbGrywKL 2Xoks1TId0pSI3twQANuG9aE8hULPE2tLMEHi+7bkRmtEPGD3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfZBfldMSOnS8DvZc/UKHJQmEkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQxN2VkMmMtYjdhZC0z MDk3LWI2NDctZDM4NmM3ZTZiZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzujMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZozOwdRgz0DmnDDtKgOsbZyb3gN4EUSCtXS8Csfmv8B3dfWStkEJrf RPPK1SRG+9TssIXxQobUdJu3HqqebSbRfzxxRlfMzznIkJAOv99DJUCTK9dlcy7h +em/ZXMb6YFEOXU+r+lkUczk57Jouy1ZRZnoXwIcVW4OkqqrOAPRUFCkQ3cC72TM H5t2PLd1Q/Ljld6izrWoo4qDnRPW4XVV6sFggm//4TpNelyJzz4qlRpMfBTu6Voh yOfS1ywuYjsWHcJJBU+q+7RXcDxOYMLjgCKjr67/T41UxVKsHJo6LWMsprVPWQlu nkpGM7yDQHRBYF49vxNXbwrf+u1DwcI= -----END CERTIFICATE-----Generated at Wed May 13 08:48:00 2026 by rpki-client