$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd4fa30a-f6c7-343e-ade3-780a8536a790.roa File: dd4fa30a-f6c7-343e-ade3-780a8536a790.roa (raw, json) Hash identifier: T6vOkBqO+v5szWKOZ/MVKU9Pyga7HAkACimlRpOJRTY= Subject key identifier: B8:D2:B5:2D:16:C4:BD:5A:A0:9C:84:1D:FE:C0:00:E0:A8:68:95:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B291DF7B0139F2BE87CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd4fa30a-f6c7-343e-ade3-780a8536a790.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.59.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:29:1d:f7:b0:13:9f:2b:e8:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=cb6578cc-c448-4aaf-9e34-a2c3c7bd9dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6b:01:b3:00:0a:85:07:d5:72:17:c6:bc:81: fe:85:95:73:7c:aa:46:64:97:f5:1a:1e:13:f3:e3: 60:a8:b3:42:26:00:77:67:27:fe:01:e0:e1:bc:6d: 3e:53:58:a2:92:54:a8:42:31:40:fb:9e:01:cb:ec: 6b:37:21:f2:15:d5:5b:d9:24:b6:eb:99:3a:87:0b: 2e:10:9d:42:21:7d:83:33:b8:5a:37:16:69:31:ee: 00:d4:99:9f:ff:8e:04:7e:2c:8f:24:73:c1:e5:ee: 68:8d:1f:45:71:20:e6:32:f4:d3:90:8e:d9:6a:e6: 70:86:02:ff:67:48:72:8b:6c:08:5c:7c:fe:fb:7a: d6:dc:87:81:b9:15:48:97:84:a6:ad:de:78:ae:24: 2f:fd:80:55:75:b2:57:dd:c7:8d:a8:7a:d6:a7:5c: 43:f6:bb:4b:eb:14:a5:fa:bc:90:31:92:81:d3:3c: 97:6e:7f:70:22:c7:7d:8b:55:2d:ab:f1:64:3d:08: 7a:64:f3:a0:ef:aa:58:dd:06:1f:d7:81:66:31:13: 9c:8e:c1:c6:51:c1:e5:cc:c0:15:79:89:31:4c:b8: 6c:74:b7:00:7c:24:84:3b:4a:bb:7b:45:ae:96:62: 15:33:de:80:77:e8:c4:24:0d:e1:d8:13:08:4b:33: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D2:B5:2D:16:C4:BD:5A:A0:9C:84:1D:FE:C0:00:E0:A8:68:95:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd4fa30a-f6c7-343e-ade3-780a8536a790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:89:a2:7a:4a:a5:14:0a:3d:72:a9:be:56:71:b2:e5:ee:df: 72:1a:0b:fa:b6:8e:72:fb:b4:23:b4:02:03:81:0c:a6:c4:1b: 96:ef:56:23:3b:33:c4:36:6b:91:0a:8f:2f:85:fb:7b:ae:16: 4c:db:43:21:df:1c:c5:78:f1:89:3e:7c:a2:7b:73:67:6f:db: f2:65:f7:a1:38:cc:e2:ba:5b:ef:ff:aa:27:e9:04:58:34:86: 4d:07:fc:51:17:cf:b9:cb:81:5b:e8:f4:ad:6c:1a:ba:ba:36: cb:07:00:01:72:9a:43:2d:fe:7c:8b:aa:25:57:e1:75:8d:5c: 2a:fd:c1:97:67:54:81:9b:5a:32:c1:ac:1d:51:84:c7:51:00: 74:81:93:57:31:50:c3:89:75:54:4a:7c:c9:a3:55:a9:00:71: f2:f8:86:6f:64:f1:7a:e1:83:cf:8e:6b:6f:f3:3a:d5:21:64: d6:ee:98:c5:6b:3d:86:43:8a:57:f6:f0:82:af:dc:6c:c5:e1: e1:ac:c0:17:f3:27:e5:00:e8:c6:96:98:1c:b8:51:80:9a:ab: ba:ca:56:c5:1d:7c:c4:bb:ab:3b:2c:f8:40:74:d2:ec:4a:ae: 1b:3f:07:2e:a5:4f:24:cb:2e:37:c6:8a:83:15:6c:bf:c3:6a: 2e:50:3a:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOykd97ATnyvofMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk Y2I2NTc4Y2MtYzQ0OC00YWFmLTllMzQtYTJjM2M3YmQ5ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2sBswAKhQfVchfGvIH+hZVzfKpGZJf1Gh4T 8+NgqLNCJgB3Zyf+AeDhvG0+U1iiklSoQjFA+54By+xrNyHyFdVb2SS265k6hwsu EJ1CIX2DM7haNxZpMe4A1Jmf/44EfiyPJHPB5e5ojR9FcSDmMvTTkI7ZauZwhgL/ Z0hyi2wIXHz++3rW3IeBuRVIl4Smrd54riQv/YBVdbJX3ceNqHrWp1xD9rtL6xSl +ryQMZKB0zyXbn9wIsd9i1Utq/FkPQh6ZPOg76pY3QYf14FmMROcjsHGUcHlzMAV eYkxTLhsdLcAfCSEO0q7e0WulmIVM96Ad+jEJA3h2BMISzMlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjStS0WxL1aoJyEHf7AAOCoaJUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ0ZmEzMGEtZjZjNy0z NDNlLWFkZTMtNzgwYTg1MzZhNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFztoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISJonpKpRQKPXKpvlZxsuXu33IaC/q2jnL7tCO0AgOBDKbEG5bvViM7 M8Q2a5EKjy+F+3uuFkzbQyHfHMV48Yk+fKJ7c2dv2/Jl96E4zOK6W+//qifpBFg0 hk0H/FEXz7nLgVvo9K1sGrq6NssHAAFymkMt/nyLqiVX4XWNXCr9wZdnVIGbWjLB rB1RhMdRAHSBk1cxUMOJdVRKfMmjVakAcfL4hm9k8Xrhg8+Oa2/zOtUhZNbumMVr PYZDilf28IKv3GzF4eGswBfzJ+UA6MaWmBy4UYCaq7rKVsUdfMS7qzss+EB00uxK rhs/By6lTyTLLjfGioMVbL/Dai5QOgU= -----END CERTIFICATE-----Generated at Sun Jun 29 13:16:15 2025 by rpki-client