$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ac9f2a-8512-38dd-aa64-96507c557ba0.roa File: 59ac9f2a-8512-38dd-aa64-96507c557ba0.roa (raw, json) Hash identifier: KDrkYxdOOSQPNNbV77bqOzCt/sJyxH4+diK/4v+cA0I= Subject key identifier: AF:A2:9D:97:BD:BC:DC:DC:84:9C:7A:40:59:96:76:6C:16:DC:20:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FE100301934AFD4955BD8280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ac9f2a-8512-38dd-aa64-96507c557ba0.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 23.76.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:10:03:01:93:4a:fd:49:55:bd:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=20a4bc59-be5e-446e-a584-e2851803ac2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:ed:e5:b7:0f:26:3e:4c:e6:b7:08:0b:87: 8c:d8:0e:6a:3d:b1:8c:f4:37:a8:10:26:d7:f7:56: c8:8a:d5:d0:2e:de:21:38:ee:db:92:ef:d2:26:97: d0:4a:34:ce:c8:eb:41:87:18:28:50:4c:73:6b:ec: 11:2f:97:80:b7:2a:47:99:98:a7:3c:48:29:53:c3: 73:59:2c:02:ed:57:45:60:a1:b4:98:1c:38:42:e4: 6d:07:91:b5:11:da:a0:df:d9:4d:e5:3b:be:65:41: 87:7d:71:8b:c4:9d:fa:c0:9a:8f:14:11:e3:7f:b7: d0:42:d0:5b:67:10:9e:b7:8e:20:5b:e3:31:a0:3b: bb:d7:9b:73:65:42:3a:50:ce:31:cd:be:db:66:5c: 70:e0:80:36:a0:0c:a6:e3:e9:ee:66:fe:31:b5:ba: 5a:d0:25:c2:0f:71:d8:66:9b:9c:b6:1e:5d:58:1e: da:89:e2:63:6f:72:e4:3f:43:0d:c5:d8:a1:ca:d4: 57:ad:96:ef:61:ab:63:5e:f8:3c:0a:e1:d1:fd:64: cf:b8:9e:9a:a1:84:44:79:ac:c0:de:cf:9e:1c:2c: fc:a3:e0:55:e4:3a:ad:e0:a9:58:f1:f5:ca:16:ce: fc:9a:08:83:7a:05:72:17:31:0a:33:49:f7:c5:c9: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A2:9D:97:BD:BC:DC:DC:84:9C:7A:40:59:96:76:6C:16:DC:20:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ac9f2a-8512-38dd-aa64-96507c557ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.76.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:be:d8:86:3d:af:ad:16:2e:27:3e:51:15:14:2c:ca:9d:27: 80:3d:95:29:0e:40:86:83:bd:37:50:28:f6:aa:49:2b:02:f6: 1f:8f:fd:f6:8f:0c:cc:8d:9a:01:85:36:f8:0a:6a:7c:e7:20: 02:00:8b:a4:03:2c:91:56:4b:91:a8:24:d4:ff:a3:f3:83:14: ff:44:0b:b9:d2:07:04:6d:3e:b5:69:fa:77:28:ee:67:4b:34: e2:64:53:9c:c1:70:07:98:2a:85:82:6a:61:15:b0:55:97:d7: 7b:57:6b:ca:64:dc:c1:01:d9:4c:f8:98:a4:1e:6e:60:74:fb: ea:a5:f4:8e:19:b8:3a:73:8d:b8:62:39:bb:18:9f:87:21:41: 9b:cd:30:47:7e:8e:ac:01:36:77:b2:86:f8:8c:41:14:a5:e0: 6a:d3:fa:af:25:3b:66:ff:5f:27:a7:b9:cc:c5:ec:a6:5d:8c: d0:ab:74:ee:66:bf:3d:ea:55:55:97:e6:85:0d:0b:53:ca:68: d9:00:ff:a4:0e:f1:dd:16:68:5a:93:fa:22:7b:61:4a:77:8a: 94:a5:5e:be:81:28:3b:0b:ee:05:0b:75:c3:b9:16:12:75:bf: 3b:a9:ba:74:d1:91:15:e7:7f:c1:bd:a1:3b:45:f8:ce:8e:9b: 97:22:03:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+EAMBk0r9SVW9goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk MjBhNGJjNTktYmU1ZS00NDZlLWE1ODQtZTI4NTE4MDNhYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLt5bcPJj5M5rcIC4eM2A5qPbGM9DeoECbX 91bIitXQLt4hOO7bku/SJpfQSjTOyOtBhxgoUExza+wRL5eAtypHmZinPEgpU8Nz WSwC7VdFYKG0mBw4QuRtB5G1Edqg39lN5Tu+ZUGHfXGLxJ36wJqPFBHjf7fQQtBb ZxCet44gW+MxoDu715tzZUI6UM4xzb7bZlxw4IA2oAym4+nuZv4xtbpa0CXCD3HY Zpucth5dWB7aieJjb3LkP0MNxdihytRXrZbvYatjXvg8CuHR/WTPuJ6aoYREeazA 3s+eHCz8o+BV5Dqt4KlY8fXKFs78mgiDegVyFzEKM0n3xclVuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+inZe9vNzchJx6QFmWdmwW3CCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTlhYzlmMmEtODUxMi0z OGRkLWFhNjQtOTY1MDdjNTU3YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0yeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq+2IY9r60WLic+URUULMqdJ4A9lSkOQIaDvTdQKPaqSSsC9h+P/faP DMyNmgGFNvgKanznIAIAi6QDLJFWS5GoJNT/o/ODFP9EC7nSBwRtPrVp+nco7mdL NOJkU5zBcAeYKoWCamEVsFWX13tXa8pk3MEB2Uz4mKQebmB0++ql9I4ZuDpzjbhi ObsYn4chQZvNMEd+jqwBNneyhviMQRSl4GrT+q8lO2b/XyenuczF7KZdjNCrdO5m vz3qVVWX5oUNC1PKaNkA/6QO8d0WaFqT+iJ7YUp3ipSlXr6BKDsL7gULdcO5FhJ1 vzupunTRkRXnf8G9oTtF+M6Om5ciA2Q= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:19 2025 by rpki-client