$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/236a639a-f40e-3fbc-9ea9-ec291a3424ed.roa File: 236a639a-f40e-3fbc-9ea9-ec291a3424ed.roa (raw, json) Hash identifier: 40g5HYVGP34nTbXKvqavNNvIGqWZmTTdqwMr9dzrgf4= Subject key identifier: E2:C9:84:56:82:FC:5C:22:3D:88:6C:8E:73:D1:D1:20:28:05:5B:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A066FEA08B86F88BD37915280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/236a639a-f40e-3fbc-9ea9-ec291a3424ed.roa Signing time: Fri 30 May 2025 13:01:03 +0000 ROA not before: Fri 30 May 2025 13:01:03 +0000 ROA not after: Thu 28 Aug 2025 13:01:03 +0000 asID: 16625 IP address blocks: 23.59.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:6f:ea:08:b8:6f:88:bd:37:91:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 30 13:01:03 2025 GMT Not After : Aug 28 13:01:03 2025 GMT Subject: CN=a02c6b00-d4fc-4d46-a8f5-14b53065e638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:02:2e:82:50:4f:2f:9c:a6:a0:44:5c:b8: b7:12:3e:de:14:5c:19:f4:7d:9b:0d:89:ca:3e:44: 6a:03:9d:08:ff:d6:96:ba:ac:fd:da:fe:6e:16:f0: f7:b7:fe:fd:b2:a1:a1:c2:ea:ee:71:05:55:83:31: 8e:b1:20:b7:d9:87:cc:26:8e:9c:64:b3:4c:30:6c: 9f:39:d5:93:eb:db:c0:29:59:c9:77:b8:39:a5:70: f0:91:6d:35:ad:07:4a:75:6e:21:05:b0:7f:19:7d: 84:fa:ea:c6:d7:ac:12:a6:e0:ee:76:03:12:63:f0: b7:2f:e0:94:60:cb:e0:ae:22:88:dd:0c:49:7d:d3: 78:c4:60:68:cc:d9:af:42:2b:86:8a:be:83:cc:7c: 02:08:c6:7e:53:25:50:41:c3:22:89:df:61:62:f6: 12:e4:8d:09:45:32:d6:87:12:85:ca:c7:06:67:e5: 25:e8:8a:51:b2:65:bc:cc:27:6f:ce:69:fb:41:60: 59:52:ea:af:1a:00:22:44:a7:bc:72:de:0b:ff:07: 30:fd:12:40:e0:99:dd:f6:d5:f6:b7:29:5c:e0:24: 02:43:26:09:d3:e3:79:8f:11:92:c9:18:8e:64:d4: 20:ab:1f:2e:e4:da:9e:22:0e:66:1d:b2:32:a5:b5: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C9:84:56:82:FC:5C:22:3D:88:6C:8E:73:D1:D1:20:28:05:5B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/236a639a-f40e-3fbc-9ea9-ec291a3424ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e9:bf:71:52:c9:e8:b1:01:dd:8e:38:3d:f6:61:b1:b9:0f: d5:69:88:c8:89:c7:20:47:a2:68:96:33:a9:c6:4e:4e:33:8d: ba:a8:0e:d0:08:53:9e:6c:c6:32:a6:0a:89:e3:90:fb:01:cb: 9f:9c:b5:45:84:ac:c3:7f:cd:03:e5:2e:6a:25:66:b1:10:a6: d5:0f:28:8b:df:d7:94:56:33:28:46:e4:3d:03:0a:f5:53:94: 8a:f9:10:61:82:15:6d:21:12:a1:29:91:a0:80:8b:45:00:ab: 4c:f4:55:36:23:fa:c3:78:97:32:48:72:b0:a2:d3:06:ca:d8: 60:53:93:f4:e6:ea:2e:77:bd:7a:7b:37:87:fb:94:b0:f0:3b: 88:5f:b8:aa:1e:00:74:ae:d2:80:f0:99:b3:90:6f:f3:12:c4: 2b:eb:1a:c1:bc:ea:0b:6a:b2:aa:f5:ab:e0:e3:3f:9e:bd:4d: 2c:cb:56:83:53:a8:ec:3e:72:0e:e2:f4:9d:44:45:1f:01:6c: bb:85:40:d4:20:cb:65:af:2c:8f:86:1d:81:c4:a9:65:7d:29: 86:db:5e:c3:fe:ad:9c:b3:72:ae:0b:d8:fb:1b:2b:5a:e3:01: 42:ee:66:4c:22:84:4e:19:7b:b7:73:0f:11:7f:72:47:e6:48: fc:18:80:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGb+oIuG+IvTeRUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUzMDEzMDEwM1oXDTI1MDgyODEzMDEwM1owLzEtMCsGA1UEAxMk YTAyYzZiMDAtZDRmYy00ZDQ2LWE4ZjUtMTRiNTMwNjVlNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM8CLoJQTy+cpqBEXLi3Ej7eFFwZ9H2bDYnK PkRqA50I/9aWuqz92v5uFvD3t/79sqGhwurucQVVgzGOsSC32YfMJo6cZLNMMGyf OdWT69vAKVnJd7g5pXDwkW01rQdKdW4hBbB/GX2E+urG16wSpuDudgMSY/C3L+CU YMvgriKI3QxJfdN4xGBozNmvQiuGir6DzHwCCMZ+UyVQQcMiid9hYvYS5I0JRTLW hxKFyscGZ+Ul6IpRsmW8zCdvzmn7QWBZUuqvGgAiRKe8ct4L/wcw/RJA4Jnd9tX2 tylc4CQCQyYJ0+N5jxGSyRiOZNQgqx8u5NqeIg5mHbIypbW2wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLJhFaC/FwiPYhsjnPR0SAoBVsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM2YTYzOWEtZjQwZS0z ZmJjLTllYTktZWMyOTFhMzQyNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELpv3FSyeixAd2OOD32YbG5D9VpiMiJxyBHomiWM6nGTk4zjbqoDtAI U55sxjKmConjkPsBy5+ctUWErMN/zQPlLmolZrEQptUPKIvf15RWMyhG5D0DCvVT lIr5EGGCFW0hEqEpkaCAi0UAq0z0VTYj+sN4lzJIcrCi0wbK2GBTk/Tm6i53vXp7 N4f7lLDwO4hfuKoeAHSu0oDwmbOQb/MSxCvrGsG86gtqsqr1q+DjP569TSzLVoNT qOw+cg7i9J1ERR8BbLuFQNQgy2WvLI+GHYHEqWV9KYbbXsP+rZyzcq4L2PsbK1rj AULuZkwihE4Ze7dzDxF/ckfmSPwYgCs= -----END CERTIFICATE-----Generated at Sun Jun 15 19:10:03 2025 by rpki-client