$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c8df239-2628-3d7f-8a16-e6e84a8ad2a6.roa File: 8c8df239-2628-3d7f-8a16-e6e84a8ad2a6.roa (raw, json) Hash identifier: t/Qzr+lcg+6Q/D3GbcK3OsCE/mCNqjno8JTDA7CKsiA= Subject key identifier: 20:65:8A:39:0D:0D:CF:E1:7D:0E:C5:4A:48:65:E6:13:70:B6:4C:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715CEA6045F3CA74A266BEA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c8df239-2628-3d7f-8a16-e6e84a8ad2a6.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 23.59.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ea:60:45:f3:ca:74:a2:66:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=60389421-bcb3-403b-9190-74f300aa9101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:1a:79:a3:4e:a4:42:c2:01:4b:f6:3a:05: 92:ed:77:e6:75:ca:4b:50:a1:2b:75:fb:a1:52:ac: 7d:38:fe:33:2c:f2:48:98:ba:f6:fc:44:11:ea:f1: ab:6b:5f:f0:b0:f0:d9:fa:75:63:fc:d3:8d:9d:16: 6a:70:7a:8f:7d:49:cc:3a:c9:bb:9d:80:77:ee:ac: 3b:62:17:c4:78:c1:de:1c:0f:7d:f0:48:da:8d:fb: 18:e5:7d:51:8b:01:05:bf:62:a9:1f:66:29:30:a7: ed:76:37:b2:2c:fb:56:cb:56:9e:45:68:a9:ac:cf: 22:3d:de:9c:99:44:ef:64:28:83:1e:03:e1:18:1c: b4:e5:64:ce:76:38:46:e9:eb:11:d5:c4:bb:71:06: 32:c2:10:53:1c:75:3b:59:7c:bf:f4:70:a8:56:61: b7:b4:14:ef:fc:95:9b:7a:bd:41:8d:d0:00:d6:79: 44:0f:b1:e5:d1:d4:62:95:5a:66:53:23:f1:29:9c: 00:10:2a:c7:54:77:b9:ff:c9:49:82:c6:b0:71:ae: de:8e:b5:2c:f7:90:bc:be:d0:71:d3:15:ec:77:3f: 34:10:ea:a4:3f:fa:a2:9c:82:c3:3a:c6:c5:e5:63: 57:b4:97:7a:be:cf:35:78:8a:4d:cd:d2:2f:97:2f: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:65:8A:39:0D:0D:CF:E1:7D:0E:C5:4A:48:65:E6:13:70:B6:4C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c8df239-2628-3d7f-8a16-e6e84a8ad2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:30:f9:65:e9:eb:d8:cf:e9:06:61:a7:e5:46:bd:67:3f:92: 4a:df:88:60:05:2a:6d:1e:de:27:ae:c4:f2:12:26:12:ec:f2: 34:6a:af:56:b4:26:33:53:66:51:3c:c2:ec:aa:8e:ca:10:dd: 2d:80:f7:4f:f0:e4:5e:8c:47:9b:86:25:9b:4d:20:57:86:5c: 64:8f:a6:51:8a:0f:e7:16:4d:99:c8:fb:01:f0:63:53:93:44: c2:d5:3e:81:5c:f8:42:7b:22:18:ce:c6:71:15:92:8c:0a:fc: 98:28:79:fb:fe:b9:19:92:a1:a6:65:4d:5c:f8:e7:8c:58:4b: 8d:d8:4f:ba:0a:e6:14:1e:3b:e9:28:6c:55:91:34:0c:dd:94: f5:21:70:f9:e9:d9:96:59:4f:21:ce:d2:27:71:cd:5f:08:3a: 5b:e7:4d:66:a3:6c:47:fe:62:d5:2d:03:4d:ed:34:8b:fd:4f: 27:bb:0e:0e:64:2f:91:26:d2:c6:3f:e0:b8:a5:c2:ef:f3:ef: 8e:7b:f5:6c:f3:4d:42:ee:4a:c7:05:ee:6d:b3:5c:2c:db:84: cb:28:da:3c:54:65:c7:7a:8e:7c:fe:7e:30:69:83:15:4b:49: 3b:0b:86:d5:49:f2:8e:70:a4:a8:5a:54:87:55:e3:f9:68:5e: 78:fe:0c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXOpgRfPKdKJmvqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjAzODk0MjEtYmNiMy00MDNiLTkxOTAtNzRmMzAwYWE5MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqoaeaNOpELCAUv2OgWS7XfmdcpLUKErdfuh Uqx9OP4zLPJImLr2/EQR6vGra1/wsPDZ+nVj/NONnRZqcHqPfUnMOsm7nYB37qw7 YhfEeMHeHA998EjajfsY5X1RiwEFv2KpH2YpMKftdjeyLPtWy1aeRWiprM8iPd6c mUTvZCiDHgPhGBy05WTOdjhG6esR1cS7cQYywhBTHHU7WXy/9HCoVmG3tBTv/JWb er1BjdAA1nlED7Hl0dRilVpmUyPxKZwAECrHVHe5/8lJgsawca7ejrUs95C8vtBx 0xXsdz80EOqkP/qinILDOsbF5WNXtJd6vs81eIpNzdIvly+MzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBlijkNDc/hfQ7FSkhl5hNwtkzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM4ZGYyMzktMjYyOC0z ZDdmLThhMTYtZTZlODRhOGFkMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEw+WXp69jP6QZhp+VGvWc/kkrfiGAFKm0e3ieuxPISJhLs8jRqr1a0 JjNTZlE8wuyqjsoQ3S2A90/w5F6MR5uGJZtNIFeGXGSPplGKD+cWTZnI+wHwY1OT RMLVPoFc+EJ7IhjOxnEVkowK/Jgoefv+uRmSoaZlTVz454xYS43YT7oK5hQeO+ko bFWRNAzdlPUhcPnp2ZZZTyHO0idxzV8IOlvnTWajbEf+YtUtA03tNIv9Tye7Dg5k L5Em0sY/4Lilwu/z74579WzzTULuSscF7m2zXCzbhMso2jxUZcd6jnz+fjBpgxVL STsLhtVJ8o5wpKhaVIdV4/loXnj+DBQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:07 2025 by rpki-client