$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52660d2-4fb4-39fd-afd7-4fa5d9e67249.roa File: e52660d2-4fb4-39fd-afd7-4fa5d9e67249.roa (raw, json) Hash identifier: qsajmNZGyp8BRBgTqSu3sfHRJWTi73fpi2Bzp7Dgzj8= Subject key identifier: 66:AD:9D:C2:10:7A:9B:9C:92:30:F1:29:C5:5A:88:70:5D:90:30:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A90A10E485F3462A7E4960EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52660d2-4fb4-39fd-afd7-4fa5d9e67249.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 20940 IP address blocks: 23.59.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:0e:48:5f:34:62:a7:e4:96:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=37cf7f46-0dc6-43d2-86c0-39c77dd46f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:9e:05:6b:3d:45:d3:c3:4b:12:12:0c:15: d8:0c:33:18:07:ef:ad:14:56:64:93:7e:40:73:32: 3e:32:31:89:4f:b2:fd:d1:50:e9:1f:9d:27:98:db: 5b:03:42:e5:4b:b4:cb:6d:7c:f1:8b:f1:ad:e9:19: e2:02:cf:fd:77:eb:87:74:d6:47:1b:9e:f4:08:e5: d1:3a:f9:ed:06:68:ac:63:f7:12:35:11:b2:b1:e9: 61:65:f1:b9:27:4b:e2:cc:72:71:c3:54:ef:27:9e: f1:40:e3:83:2a:b5:57:42:ce:a6:0c:48:11:e4:b2: 2e:d6:32:45:30:c8:28:c6:c9:9f:28:c7:9d:18:60: 59:99:d7:e4:00:07:dd:b7:67:92:5a:a7:d1:9e:a3: 2c:1d:76:8c:21:3c:e7:c0:d0:61:ff:c9:1f:9f:9b: 38:63:44:90:7d:8e:2f:ae:50:b2:c2:fb:3b:4d:93: 1d:f0:1a:5b:f9:7c:1e:c3:b3:10:ee:c2:22:72:d0: ff:a0:ec:3f:c3:cf:1e:0b:cb:6b:28:b4:b2:9b:95: dd:f8:ee:7b:0f:8f:3b:60:cb:e4:11:1e:c1:3e:19: 1c:3e:9b:ba:57:79:94:5d:66:cf:0a:9e:2f:29:76: c2:e1:3d:82:61:9e:46:c0:28:61:42:58:9d:83:46: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AD:9D:C2:10:7A:9B:9C:92:30:F1:29:C5:5A:88:70:5D:90:30:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52660d2-4fb4-39fd-afd7-4fa5d9e67249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:18:1a:76:5d:25:c5:c3:bc:b0:77:3b:32:7f:c3:ca:f7:36: c3:6e:0a:4c:d2:4f:5a:f8:e8:f4:89:3a:a2:ad:ac:f0:c7:c2: ce:ff:6d:61:07:da:bc:57:63:cd:20:7c:33:20:96:c1:08:82: 1a:0a:61:9b:41:01:c3:a4:fe:57:6d:55:0c:34:57:60:7d:28: 97:8a:48:38:a9:dd:7e:24:7f:42:52:07:d1:f5:35:d0:c0:af: c4:b9:f9:91:0e:64:bd:dc:36:2e:9a:26:af:38:c2:89:0b:98: 24:8d:9c:a0:91:8d:3d:e8:66:96:a2:51:b1:d7:55:64:78:72: 0b:ab:c3:9c:e8:f9:d6:bd:8d:69:f4:04:66:96:66:55:d2:a6: 2b:7b:25:a9:61:f7:c5:9d:96:ec:2c:49:26:58:b3:07:6c:22: a3:bc:d7:12:8c:06:45:0b:c4:34:3d:14:6a:62:9b:dc:d6:10: d5:04:fc:66:a0:d2:a0:bc:c0:a9:0e:06:58:a4:00:b0:2e:b5: d5:e2:5e:e4:1b:b7:56:7d:5b:99:d6:95:c1:c3:d8:8a:2a:c6: e7:38:7d:e1:08:71:dd:cc:4f:0d:dc:cf:34:61:e9:50:52:80: 53:b8:c8:15:d1:78:96:74:b8:64:29:28:7c:1e:90:91:a7:ea: c6:45:bb:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQ5IXzRip+SWDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzdjZjdmNDYtMGRjNi00M2QyLTg2YzAtMzljNzdkZDQ2ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fKeBWs9RdPDSxISDBXYDDMYB++tFFZkk35A czI+MjGJT7L90VDpH50nmNtbA0LlS7TLbXzxi/Gt6RniAs/9d+uHdNZHG570COXR OvntBmisY/cSNRGyselhZfG5J0vizHJxw1TvJ57xQOODKrVXQs6mDEgR5LIu1jJF MMgoxsmfKMedGGBZmdfkAAfdt2eSWqfRnqMsHXaMITznwNBh/8kfn5s4Y0SQfY4v rlCywvs7TZMd8Bpb+Xwew7MQ7sIictD/oOw/w88eC8trKLSym5Xd+O57D487YMvk ER7BPhkcPpu6V3mUXWbPCp4vKXbC4T2CYZ5GwChhQlidg0bQ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGatncIQepuckjDxKcVaiHBdkDCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUyNjYwZDItNGZiNC0z OWZkLWFmZDctNGZhNWQ5ZTY3MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQYGnZdJcXDvLB3OzJ/w8r3NsNuCkzST1r46PSJOqKtrPDHws7/bWEH 2rxXY80gfDMglsEIghoKYZtBAcOk/ldtVQw0V2B9KJeKSDip3X4kf0JSB9H1NdDA r8S5+ZEOZL3cNi6aJq84wokLmCSNnKCRjT3oZpaiUbHXVWR4cgurw5zo+da9jWn0 BGaWZlXSpit7Jalh98WdluwsSSZYswdsIqO81xKMBkULxDQ9FGpim9zWENUE/Gag 0qC8wKkOBlikALAutdXiXuQbt1Z9W5nWlcHD2Ioqxuc4feEIcd3MTw3czzRh6VBS gFO4yBXReJZ0uGQpKHwekJGn6sZFu/o= -----END CERTIFICATE-----Generated at Wed Jul 23 01:30:58 2025 by rpki-client