$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cac4c7dc-31d7-3ffa-8ee8-d3015ec83b2e.roa File: cac4c7dc-31d7-3ffa-8ee8-d3015ec83b2e.roa (raw, json) Hash identifier: wnLLnhjtLfqhlOLkToHMYfpILzlEz6HotmXW3E90U78= Subject key identifier: 26:9B:0D:18:2D:1B:AE:CC:D2:AA:2B:77:A3:F0:FD:04:29:00:00:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF70C30198C296306324980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cac4c7dc-31d7-3ffa-8ee8-d3015ec83b2e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.59.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:0c:30:19:8c:29:63:06:32:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=56e3d6e6-21ee-46e1-ae04-de89f4807575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:cb:15:41:01:98:40:a2:d6:52:2d:81:3d: e7:e3:0b:73:dc:9c:dc:a7:09:e0:47:44:41:cb:01: ba:35:1a:55:7d:7d:96:30:09:f1:62:38:20:26:c0: 81:ca:c3:ee:d0:d9:a4:77:67:de:fe:03:1a:a9:09: 2d:68:5c:f9:ba:d6:8a:c4:44:a6:5d:fe:1c:f9:54: 7a:2a:95:b5:df:dd:23:ee:a7:fe:2a:e1:8a:e6:ce: 21:ae:45:f7:6a:37:71:34:54:fa:1e:95:6b:80:c8: 76:4c:ff:c6:06:9c:2c:5c:ed:1f:c9:f0:78:85:f5: bd:10:2e:0b:a7:90:0c:e9:86:65:a8:88:d4:ff:4f: d1:03:0e:0f:3b:b7:a5:ac:b8:c8:39:2e:c2:bd:32: 52:da:f8:99:ed:1a:b6:81:4c:b8:9f:99:53:79:3e: e7:70:41:49:89:5f:fb:5f:9d:51:fe:03:e5:01:46: 90:1c:5d:0d:5b:9f:f9:9a:11:e5:ab:18:33:42:86: e8:14:0d:1d:06:d1:12:56:a6:ee:28:8f:02:48:42: 78:2d:6d:c5:8d:7a:31:95:f5:95:00:20:61:ab:45: 30:a5:d9:ab:74:ee:a9:2f:c1:ba:e3:0e:c4:95:b2: d3:a5:d6:66:71:41:50:1f:0b:b6:62:a7:4b:5d:cf: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9B:0D:18:2D:1B:AE:CC:D2:AA:2B:77:A3:F0:FD:04:29:00:00:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cac4c7dc-31d7-3ffa-8ee8-d3015ec83b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b4:be:26:e0:3c:9a:9a:cb:f1:05:b9:8a:e5:ed:44:25:69: 73:4a:20:1d:e5:58:71:90:6f:cf:b9:ec:c6:df:7d:3d:b9:9a: 03:e5:ce:bb:b0:63:12:a5:6d:67:f0:58:27:3c:7f:21:22:d2: 8e:f1:5f:57:5d:c8:89:21:b8:48:5d:fd:b1:9c:93:b3:f5:b1: 88:9f:9e:61:d1:f8:71:8a:01:a5:d3:49:08:a6:f9:1d:8c:b2: 25:91:19:d5:e8:00:81:d6:18:e5:7c:bc:31:0c:ac:b4:f2:0e: 59:48:f7:27:d5:f0:94:12:e6:29:a9:0a:77:cf:95:ae:5a:64: 70:31:be:af:38:d5:d3:41:d1:fc:75:f4:64:8c:5d:ad:f1:39: e7:6b:63:24:f3:e6:8d:e5:6d:07:04:33:e9:6b:58:b1:85:30: 63:ee:cf:48:53:d6:9a:b2:df:70:62:1e:95:5e:23:ab:b1:a7: a0:73:46:1b:db:e1:d9:0a:40:c8:b3:23:db:e5:9f:83:59:86: c7:dc:bf:c9:07:b6:64:9f:63:d3:87:fa:8f:52:03:af:cd:ec: a7:20:b8:6a:b6:bc:a1:0b:ad:e3:27:ea:db:01:36:c5:e1:7d: 23:ed:85:fc:95:dc:ad:4e:6a:60:97:ee:26:61:d3:cc:4d:b2: 74:b8:ca:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9wwwGYwpYwYySYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NTZlM2Q2ZTYtMjFlZS00NmUxLWFlMDQtZGU4OWY0ODA3NTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsffLFUEBmECi1lItgT3n4wtz3JzcpwngR0RB ywG6NRpVfX2WMAnxYjggJsCBysPu0Nmkd2fe/gMaqQktaFz5utaKxESmXf4c+VR6 KpW1390j7qf+KuGK5s4hrkX3ajdxNFT6HpVrgMh2TP/GBpwsXO0fyfB4hfW9EC4L p5AM6YZlqIjU/0/RAw4PO7elrLjIOS7CvTJS2viZ7Rq2gUy4n5lTeT7ncEFJiV/7 X51R/gPlAUaQHF0NW5/5mhHlqxgzQoboFA0dBtESVqbuKI8CSEJ4LW3FjXoxlfWV ACBhq0UwpdmrdO6pL8G64w7ElbLTpdZmcUFQHwu2YqdLXc+PuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCabDRgtG67M0qord6Pw/QQpAABAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FjNGM3ZGMtMzFkNy0z ZmZhLThlZTgtZDMwMTVlYzgzYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS0vibgPJqay/EFuYrl7UQlaXNKIB3lWHGQb8+57MbffT25mgPlzruw YxKlbWfwWCc8fyEi0o7xX1ddyIkhuEhd/bGck7P1sYifnmHR+HGKAaXTSQim+R2M siWRGdXoAIHWGOV8vDEMrLTyDllI9yfV8JQS5impCnfPla5aZHAxvq841dNB0fx1 9GSMXa3xOedrYyTz5o3lbQcEM+lrWLGFMGPuz0hT1pqy33BiHpVeI6uxp6BzRhvb 4dkKQMizI9vln4NZhsfcv8kHtmSfY9OH+o9SA6/N7KcguGq2vKELreMn6tsBNsXh fSPthfyV3K1OamCX7iZh08xNsnS4yjk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:45 2025 by rpki-client