$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa File: e4ed5f04-d7cb-364e-8090-9a0f23158775.roa (raw, json) Hash identifier: w/cXCzIbbq1HSK7Z6aC/Vx3EVe2tT0BzfVaZpIvBURA= Subject key identifier: 9E:B1:1E:DE:21:A7:69:55:7B:1B:62:AA:FD:F4:00:B5:AA:1F:5F:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849CBCF91904F64C8CEC743B780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 21342 IP address blocks: 23.59.248.0/24 maxlen: 24 23.59.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:91:90:4f:64:c8:ce:c7:43:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=a8410dc5-1c41-4c46-8f09-e6978cacbde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:38:cc:84:8d:66:ae:3e:74:65:85:b0:ce: 5a:1b:3a:3b:0e:9e:54:53:40:ee:55:c1:a6:ad:22: 21:7a:be:67:b4:b4:74:a3:6c:2d:4e:bb:8b:ff:6e: 8b:fe:bd:27:8d:fc:90:86:9f:a0:cd:8d:2f:9e:10: f3:7e:73:03:30:b9:0f:64:5a:bb:0c:04:39:9c:e8: 99:99:d0:e9:a4:8b:5b:1a:d3:bf:5f:3e:54:7d:4a: 6b:71:a9:33:09:c2:dc:2d:e8:3a:da:a3:ad:40:eb: 6b:34:15:2a:ea:cf:0b:e7:24:f9:5a:45:8c:48:7a: b6:34:dd:3a:75:44:45:50:70:1b:28:6c:49:34:c9: 0e:fc:96:93:7f:85:6f:6f:01:68:bb:6d:ef:63:9d: 53:f7:66:6c:6b:08:df:33:9f:b3:3e:9e:3a:6a:a4: 45:96:00:fe:6d:f9:86:39:ad:81:07:c0:29:b7:70: b7:2e:f9:8c:51:e5:69:c5:53:ca:1e:b2:8c:05:a5: d2:bf:49:af:4c:74:53:3d:37:56:44:4e:02:9f:25: 7a:2d:3c:0d:e5:81:66:05:0c:ab:dd:60:cc:c3:25: 91:7b:30:65:ee:82:b1:7f:a5:55:2f:0a:6b:76:6a: 48:9f:33:c7:1d:45:08:51:94:8d:99:db:36:26:7d: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B1:1E:DE:21:A7:69:55:7B:1B:62:AA:FD:F4:00:B5:AA:1F:5F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ed:65:dc:55:58:df:25:ba:8f:b9:e4:ab:92:84:73:76:11: b9:39:72:ec:b7:a7:1f:63:5d:9d:8e:19:10:51:5e:e0:95:87: 61:76:38:1f:ee:3f:7a:31:c4:e2:f0:45:fb:8e:25:90:70:e3: 63:22:8d:ea:55:40:55:5c:10:3d:49:34:45:8d:35:de:a6:65: 3f:d6:2a:93:31:03:c7:f9:21:28:9b:56:8b:d5:50:55:16:e0: 7b:90:0f:2f:f0:ad:62:fe:fd:f8:b5:05:24:81:94:f3:98:44: 2a:60:49:f0:3b:ea:4b:b2:a3:2e:89:f2:0c:27:76:92:ae:73: cd:da:14:b7:8a:6f:b3:53:b0:a8:52:36:eb:3f:af:a2:c9:79: 30:62:40:01:35:08:8b:ec:39:20:a7:03:b4:be:d8:5b:f1:b3: b6:2e:fe:ba:26:2d:10:e7:70:ab:c1:6b:3c:b3:3f:ef:45:e0: 03:76:e3:a8:4c:4e:65:58:22:4d:c4:55:f1:5e:a4:73:77:a0: 87:f6:28:f3:5d:08:0e:8c:c8:1d:1f:1b:0d:d6:cf:b0:56:40: 63:73:27:74:bc:9f:85:50:f8:90:79:5d:f0:97:01:22:aa:4b: 42:e7:47:a9:18:d3:a7:33:ee:58:4d:3e:0d:d7:1b:a2:bf:84: 64:f5:3e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5GQT2TIzsdDt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YTg0MTBkYzUtMWM0MS00YzQ2LThmMDktZTY5NzhjYWNiZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfQ4zISNZq4+dGWFsM5aGzo7Dp5UU0DuVcGm rSIher5ntLR0o2wtTruL/26L/r0njfyQhp+gzY0vnhDzfnMDMLkPZFq7DAQ5nOiZ mdDppItbGtO/Xz5UfUprcakzCcLcLeg62qOtQOtrNBUq6s8L5yT5WkWMSHq2NN06 dURFUHAbKGxJNMkO/JaTf4VvbwFou23vY51T92ZsawjfM5+zPp46aqRFlgD+bfmG Oa2BB8Apt3C3LvmMUeVpxVPKHrKMBaXSv0mvTHRTPTdWRE4CnyV6LTwN5YFmBQyr 3WDMwyWRezBl7oKxf6VVLwprdmpInzPHHUUIUZSNmds2Jn11SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6xHt4hp2lVextiqv30ALWqH180MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTRlZDVmMDQtZDdjYi0z NjRlLTgwOTAtOWEwZjIzMTU4Nzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHtZdxVWN8luo+55KuShHN2Ebk5cuy3px9jXZ2OGRBRXuCVh2F2OB/u P3oxxOLwRfuOJZBw42MijepVQFVcED1JNEWNNd6mZT/WKpMxA8f5ISibVovVUFUW 4HuQDy/wrWL+/fi1BSSBlPOYRCpgSfA76kuyoy6J8gwndpKuc83aFLeKb7NTsKhS Nus/r6LJeTBiQAE1CIvsOSCnA7S+2Fvxs7Yu/romLRDncKvBazyzP+9F4AN246hM TmVYIk3EVfFepHN3oIf2KPNdCA6MyB0fGw3Wz7BWQGNzJ3S8n4VQ+JB5XfCXASKq S0LnR6kY06cz7lhNPg3XG6K/hGT1Pn8= -----END CERTIFICATE-----Generated at Sat Jun 7 14:33:12 2025 by rpki-client