$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d7e9f-7fd9-3348-a40d-ef83ae088e2b.roa File: c49d7e9f-7fd9-3348-a40d-ef83ae088e2b.roa (raw, json) Hash identifier: QboX74hYC0dT/PwhtsV/zXPdwcLshxoYCNMjPnnSheY= Subject key identifier: C7:25:16:77:C4:05:4D:9A:0F:0F:EA:BB:91:AF:C2:45:03:FF:0C:B4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B2990E0105036F0F59280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d7e9f-7fd9-3348-a40d-ef83ae088e2b.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20940 IP address blocks: 23.59.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:29:90:e0:10:50:36:f0:f5:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=85c355a3-8eab-4860-b091-42995994c2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:3c:48:f8:4d:dc:fd:1f:fa:e6:fb:a3:b2: 8a:35:76:8b:69:f7:4a:32:0a:23:de:68:13:8a:70: af:52:45:f9:cd:75:18:91:51:ef:d0:ad:df:c0:f0: 65:2b:03:c1:f9:92:90:2f:15:0f:92:32:f5:3b:a2: 90:d6:41:07:48:23:32:2d:d0:7e:ee:65:d9:cc:0c: 25:89:b1:91:56:76:c0:dd:f5:8c:a0:55:4f:66:b0: 80:14:a6:60:bb:cd:5a:e4:fd:7d:4b:60:2f:2e:8c: 3c:b2:25:4a:da:ea:08:e1:9b:bc:5d:25:84:d3:6c: 8f:b7:85:63:58:c7:b0:06:ab:86:79:1c:70:55:3f: 9d:30:3f:d7:8c:bc:70:bf:63:dd:5f:0d:39:0f:73: c7:e3:e5:3d:6e:45:cb:91:13:b1:94:d6:cb:1d:00: 0c:01:4c:f0:27:f5:5a:f9:f4:f8:db:6b:31:a0:1d: f0:ed:e9:e0:ff:30:15:57:fe:01:fd:18:58:d2:69: e1:d0:74:d6:4b:1d:55:ef:3e:06:fe:04:b7:62:8c: ff:c0:36:26:4c:15:73:ea:fb:94:4f:d3:bf:86:aa: fe:98:0a:0f:48:ce:30:2e:0e:a8:10:b9:da:ab:95: 15:8a:6d:35:66:a8:3b:bb:f4:ef:87:87:13:a2:0d: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:25:16:77:C4:05:4D:9A:0F:0F:EA:BB:91:AF:C2:45:03:FF:0C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c49d7e9f-7fd9-3348-a40d-ef83ae088e2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:00:ae:3b:41:b8:e8:a5:3a:ee:94:ff:7d:6d:70:16:e8:a9: 4f:d0:6c:b0:e8:00:99:42:38:1f:37:ad:a4:bb:7b:4a:99:b6: 13:67:7f:81:2d:ce:56:6c:55:c1:86:2e:86:94:61:42:09:07: 9a:55:ef:ab:0d:4d:f5:2e:94:b6:b1:f6:d3:44:e5:9a:b9:9f: 47:d7:4f:a5:b3:2a:8a:9f:9b:6b:df:c5:e0:e7:44:5a:a0:b7: c8:2f:ad:f1:63:ac:37:54:eb:dc:90:65:dd:51:8a:e2:08:fa: b0:26:db:3e:af:97:be:e6:9b:4d:5c:59:24:ef:ed:b4:4c:53: 10:05:44:b9:f5:f8:ed:ca:9c:47:67:c0:dc:d8:d4:d5:66:39: 37:67:37:43:35:84:e8:fa:14:c4:06:d4:5e:cd:b9:62:67:cc: 2e:97:88:b5:18:f8:a3:58:5c:43:5b:33:b3:4b:72:ef:29:8f: 33:a7:3b:f7:bd:45:6b:71:de:9d:42:f6:71:79:24:bc:e4:ab: 96:8d:48:4e:2b:c0:3c:4e:a6:71:82:e9:ee:6e:a3:71:82:3f: 4d:29:a7:93:dc:5a:fd:d0:e3:f7:39:1e:f0:25:e6:47:bb:1e: 1f:b9:53:cb:c3:04:6f:c0:6d:2d:e2:62:c0:af:5d:b2:ed:66: fc:a1:7b:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOymQ4BBQNvD1koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ODVjMzU1YTMtOGVhYi00ODYwLWIwOTEtNDI5OTU5OTRjMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO48SPhN3P0f+ub7o7KKNXaLafdKMgoj3mgT inCvUkX5zXUYkVHv0K3fwPBlKwPB+ZKQLxUPkjL1O6KQ1kEHSCMyLdB+7mXZzAwl ibGRVnbA3fWMoFVPZrCAFKZgu81a5P19S2AvLow8siVK2uoI4Zu8XSWE02yPt4Vj WMewBquGeRxwVT+dMD/XjLxwv2PdXw05D3PH4+U9bkXLkROxlNbLHQAMAUzwJ/Va +fT422sxoB3w7eng/zAVV/4B/RhY0mnh0HTWSx1V7z4G/gS3Yoz/wDYmTBVz6vuU T9O/hqr+mAoPSM4wLg6oELnaq5UVim01Zqg7u/Tvh4cTog3lawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMclFnfEBU2aDw/qu5GvwkUD/wy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ5ZDdlOWYtN2ZkOS0z MzQ4LWE0MGQtZWY4M2FlMDg4ZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0ArjtBuOilOu6U/31tcBboqU/QbLDoAJlCOB83raS7e0qZthNnf4Et zlZsVcGGLoaUYUIJB5pV76sNTfUulLax9tNE5Zq5n0fXT6WzKoqfm2vfxeDnRFqg t8gvrfFjrDdU69yQZd1RiuII+rAm2z6vl77mm01cWSTv7bRMUxAFRLn1+O3KnEdn wNzY1NVmOTdnN0M1hOj6FMQG1F7NuWJnzC6XiLUY+KNYXENbM7NLcu8pjzOnO/e9 RWtx3p1C9nF5JLzkq5aNSE4rwDxOpnGC6e5uo3GCP00pp5PcWv3Q4/c5HvAl5ke7 Hh+5U8vDBG/AbS3iYsCvXbLtZvyheyU= -----END CERTIFICATE-----Generated at Sun Jun 29 13:34:17 2025 by rpki-client