$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5026e6a-bc8d-335b-9c5a-08a8c407b059.roa File: e5026e6a-bc8d-335b-9c5a-08a8c407b059.roa (raw, json) Hash identifier: 1NR49irrz5uz8INcHPGAL/bBSlIBSCAxAk3LZpxJbAA= Subject key identifier: 22:3F:64:2A:63:CF:32:72:D4:E7:97:9A:E3:A0:25:BB:99:84:FC:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4C3B28B3AF74C0985F355F9B Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5026e6a-bc8d-335b-9c5a-08a8c407b059.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 9498 IP address blocks: 23.59.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:28:b3:af:74:c0:98:5f:35:5f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=5ad0ff11-a845-49f2-83f2-576a4f542e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:a9:4d:d0:00:ce:3b:f5:6e:5f:fb:33:e5: 5a:75:c4:21:cf:c1:28:3e:c2:0e:63:46:8f:c8:2c: 8d:82:32:32:0f:ac:a7:c6:ec:c8:a6:43:0e:1a:67: 6f:b2:c4:f2:5c:df:3c:8d:75:5f:38:ca:fc:a9:b3: a1:f7:2a:96:22:3b:f3:4d:47:65:ff:79:79:67:ba: e4:ca:cf:97:40:bb:c0:d6:92:89:34:d1:0c:8e:b5: 72:a9:f9:9b:b0:e4:e0:c8:83:fa:98:9d:a0:3f:fc: a4:df:10:e8:6e:fc:76:0f:f9:85:81:00:63:71:79: 97:70:9f:bb:d2:1a:64:53:8c:cc:9a:5a:1e:de:6f: ae:65:37:39:ff:8b:97:c9:61:59:1f:02:cb:56:c2: 85:79:ab:9b:94:f8:61:25:30:e5:e4:4a:c4:2e:99: 36:32:27:da:43:af:9e:72:48:5d:e4:cb:5f:4e:86: e4:c9:ae:ed:39:dc:35:fd:ab:a4:8f:45:9c:6c:fc: 3d:73:e5:7d:b0:5c:ab:45:c2:ab:c9:92:d3:62:ca: 56:f3:09:fb:ad:5f:17:aa:18:4e:06:69:43:9b:d6: 49:d8:b8:cc:72:02:84:9a:e6:06:02:0c:82:1a:08: 48:25:97:91:ce:6e:de:30:93:80:96:54:ab:56:0d: bb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3F:64:2A:63:CF:32:72:D4:E7:97:9A:E3:A0:25:BB:99:84:FC:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5026e6a-bc8d-335b-9c5a-08a8c407b059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:20:f8:d6:e1:b2:5c:58:cd:c3:e0:3b:56:75:78:30:c8:11: ad:5d:60:8a:3d:d7:63:21:37:80:d0:41:96:4b:4a:34:f0:2d: 8a:43:a6:27:48:bc:02:43:7b:a0:73:dd:46:ac:61:15:c2:02: d6:27:1b:39:34:97:07:b2:41:e8:f7:61:32:63:20:b1:aa:27: aa:53:fc:74:9e:55:7e:4d:98:2a:1d:fa:06:f4:d7:02:6c:8d: 6c:64:6a:c1:e2:28:79:39:46:ea:5d:dc:aa:a0:67:93:9e:a5: ba:99:62:4c:ff:e9:d6:26:9a:2f:a6:b8:80:36:3e:dd:bb:16: 01:05:71:05:6b:13:f6:37:fa:e2:0f:ec:e9:08:2b:08:cc:df: f4:26:5f:a1:32:5f:9e:cb:ea:c6:d3:e9:21:ae:9b:a7:d3:29: 54:95:33:de:91:3d:82:b9:67:33:0c:14:35:1b:c7:0d:ce:5a: 86:0c:24:b6:cb:96:a4:0a:d3:40:aa:ba:d5:da:05:45:e7:58: 01:8f:3b:d5:90:d8:6a:f2:ee:39:44:5a:dc:d4:d9:19:be:0c: ae:a5:1d:78:1e:19:cb:73:bc:72:62:c2:29:af:69:38:31:5b: 1e:e2:af:d7:26:e7:8f:73:51:9f:c2:fc:6c:bd:33:51:65:35: d3:0e:c3:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOyizr3TAmF81X5swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NWFkMGZmMTEtYTg0NS00OWYyLTgzZjItNTc2YTRmNTQyZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjKpTdAAzjv1bl/7M+VadcQhz8EoPsIOY0aP yCyNgjIyD6ynxuzIpkMOGmdvssTyXN88jXVfOMr8qbOh9yqWIjvzTUdl/3l5Z7rk ys+XQLvA1pKJNNEMjrVyqfmbsOTgyIP6mJ2gP/yk3xDobvx2D/mFgQBjcXmXcJ+7 0hpkU4zMmloe3m+uZTc5/4uXyWFZHwLLVsKFeaublPhhJTDl5ErELpk2MifaQ6+e ckhd5MtfTobkya7tOdw1/aukj0WcbPw9c+V9sFyrRcKryZLTYspW8wn7rV8XqhhO BmlDm9ZJ2LjMcgKEmuYGAgyCGghIJZeRzm7eMJOAllSrVg27VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI/ZCpjzzJy1OeXmuOgJbuZhPxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUwMjZlNmEtYmM4ZC0z MzViLTljNWEtMDhhOGM0MDdiMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkg+NbhslxYzcPgO1Z1eDDIEa1dYIo912MhN4DQQZZLSjTwLYpDpidI vAJDe6Bz3UasYRXCAtYnGzk0lweyQej3YTJjILGqJ6pT/HSeVX5NmCod+gb01wJs jWxkasHiKHk5Rupd3KqgZ5OepbqZYkz/6dYmmi+muIA2Pt27FgEFcQVrE/Y3+uIP 7OkIKwjM3/QmX6EyX57L6sbT6SGum6fTKVSVM96RPYK5ZzMMFDUbxw3OWoYMJLbL lqQK00CqutXaBUXnWAGPO9WQ2Gry7jlEWtzU2Rm+DK6lHXgeGctzvHJiwimvaTgx Wx7ir9cm549zUZ/C/Gy9M1FlNdMOw7k= -----END CERTIFICATE-----Generated at Sun Jun 29 13:00:19 2025 by rpki-client