$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d7e9f-7fd9-3348-a40d-ef83ae088e2b.roa File: c49d7e9f-7fd9-3348-a40d-ef83ae088e2b.roa (raw, json) Hash identifier: DB05pPDriJZ0UALwn1ZkUPqf60gox6t44lG2F8pMzDQ= Subject key identifier: 25:3D:EB:BC:B3:69:95:D7:B2:BF:AE:51:E3:CD:40:4E:D2:3F:FA:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DCDC5B8B7DAEBD60609579E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d7e9f-7fd9-3348-a40d-ef83ae088e2b.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.59.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:b8:b7:da:eb:d6:06:09:57:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=f061b903-1cfd-4775-a53e-6052a62fbcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2f:f3:47:1c:da:b8:ac:e0:67:6b:72:d0:ee: 26:86:bc:c4:d4:5a:d0:59:95:60:54:91:d9:32:2e: 09:c9:f5:c4:9d:c5:9c:cd:40:bb:10:0a:ae:1d:0c: 72:52:13:ed:ab:ec:3a:3f:8b:fd:50:b9:2a:ea:b8: 78:e9:64:80:db:5a:65:08:3d:0f:b3:fe:7f:92:23: b3:14:e9:aa:de:37:2e:96:41:e7:18:b1:b7:6e:dd: b8:5a:03:83:e6:9a:a4:2c:9a:48:79:d1:c4:aa:82: 43:4c:98:1f:92:18:13:97:4f:ca:0c:45:41:a2:e4: 36:c1:3a:9a:38:27:d9:a5:c8:c7:c9:d3:92:5c:2b: 8e:1d:6d:dd:48:20:ab:17:41:a1:d5:0e:ab:24:38: 66:70:59:3b:69:55:b4:75:77:40:95:1f:48:36:62: 8b:75:e6:03:84:ad:7d:47:a8:48:58:91:06:e2:c8: b2:89:3f:ea:a5:7f:20:a5:35:98:17:1a:74:f2:44: 66:01:71:9f:98:4d:3e:27:c9:57:ee:f4:76:b4:e5: 3b:c3:4c:70:76:70:fe:01:fc:67:df:4a:ef:ec:8d: 2e:0e:e3:10:1c:23:a6:41:3d:1b:ff:eb:65:8a:78: 95:21:98:26:13:25:45:6e:5b:87:a2:6b:a7:63:cc: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3D:EB:BC:B3:69:95:D7:B2:BF:AE:51:E3:CD:40:4E:D2:3F:FA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d7e9f-7fd9-3348-a40d-ef83ae088e2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:df:23:cb:3a:b3:4c:36:93:79:44:fe:72:31:fa:cc:34:02: 9c:4f:b8:dd:71:65:c3:1a:01:0d:7d:a3:8c:ac:f8:3c:90:32: 36:be:cd:17:6b:4b:94:83:cd:f5:59:07:d0:70:da:40:db:e4: 57:59:56:00:6e:e5:bf:6a:97:d8:c5:65:be:91:79:41:11:08: 67:52:cd:f4:80:38:b7:f1:32:7a:98:fb:57:5d:96:b4:58:35: d6:be:44:11:1d:6e:e8:69:9c:2b:72:ee:4a:78:35:9c:da:4d: 52:9c:29:ee:e8:6d:ae:d1:fc:82:df:5a:f5:d0:a0:67:da:39: 90:1c:78:40:28:af:6b:8c:68:23:a5:c1:69:5b:ca:89:20:31: a8:24:6f:55:6b:d7:4a:16:47:34:cb:f2:53:77:f0:1a:10:33: 76:2d:be:19:ef:fc:7d:7c:95:04:67:c5:e4:3e:ba:c7:bb:6d: f0:3c:d6:fe:50:a1:2b:ef:50:70:b3:22:fc:1f:a5:5f:cf:87: e3:91:60:22:d2:17:f7:0c:65:c1:a0:79:5a:72:b8:04:69:80: 05:97:af:44:91:05:d5:c3:a5:ed:6e:ad:29:8b:0a:80:82:89: 38:d8:76:bf:bc:98:d9:81:e5:5d:c1:b8:a6:8e:74:f1:37:1b: 1c:5f:cc:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Nxbi32uvWBglXnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk ZjA2MWI5MDMtMWNmZC00Nzc1LWE1M2UtNjA1MmE2MmZiY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC/zRxzauKzgZ2ty0O4mhrzE1FrQWZVgVJHZ Mi4JyfXEncWczUC7EAquHQxyUhPtq+w6P4v9ULkq6rh46WSA21plCD0Ps/5/kiOz FOmq3jculkHnGLG3bt24WgOD5pqkLJpIedHEqoJDTJgfkhgTl0/KDEVBouQ2wTqa OCfZpcjHydOSXCuOHW3dSCCrF0Gh1Q6rJDhmcFk7aVW0dXdAlR9INmKLdeYDhK19 R6hIWJEG4siyiT/qpX8gpTWYFxp08kRmAXGfmE0+J8lX7vR2tOU7w0xwdnD+Afxn 30rv7I0uDuMQHCOmQT0b/+tliniVIZgmEyVFbluHomunY8wY9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU967yzaZXXsr+uUePNQE7SP/pzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ5ZDdlOWYtN2ZkOS0z MzQ4LWE0MGQtZWY4M2FlMDg4ZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXfI8s6s0w2k3lE/nIx+sw0ApxPuN1xZcMaAQ19o4ys+DyQMja+zRdr S5SDzfVZB9Bw2kDb5FdZVgBu5b9ql9jFZb6ReUERCGdSzfSAOLfxMnqY+1ddlrRY Nda+RBEdbuhpnCty7kp4NZzaTVKcKe7oba7R/ILfWvXQoGfaOZAceEAor2uMaCOl wWlbyokgMagkb1Vr10oWRzTL8lN38BoQM3Ytvhnv/H18lQRnxeQ+use7bfA81v5Q oSvvUHCzIvwfpV/Ph+ORYCLSF/cMZcGgeVpyuARpgAWXr0SRBdXDpe1urSmLCoCC iTjYdr+8mNmB5V3BuKaOdPE3GxxfzNY= -----END CERTIFICATE-----Generated at Wed May 13 05:01:26 2026 by rpki-client