$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa File: 2add9fe1-48d4-3387-8e97-eee33e138e28.roa (raw, json) Hash identifier: 87JTkzzVtLifFvaBLVAOG0t6L/+aJF+tqre4b00685s= Subject key identifier: A8:88:23:2A:34:39:7D:6E:7A:9C:DD:6A:AC:A6:C6:65:DB:34:CB:40 Certificate issuer: /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Certificate serial: 010D0C9F4328584B8EACDF704F07682F0A7FD0E0 Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7794 IP address blocks: 23.248.0.0/17 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:df:70:4f:07:68:2f:0a:7f:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=901f8a0f-efb9-4eab-b9b1-657eeea10f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3f:91:17:10:6c:4f:d8:5b:81:09:e1:03:44: 78:40:71:ba:8e:c1:9f:ec:1a:34:24:d7:74:d0:14: ac:5a:f3:57:de:df:9d:c5:b2:4d:55:91:a2:df:93: 5a:47:e2:fd:72:44:35:cf:a9:ce:b2:ae:82:23:23: 1d:01:34:15:e4:8b:0d:fb:7d:37:e8:2c:d3:d0:d3: 42:e1:2a:18:09:13:91:99:f5:bd:c7:a3:fc:52:65: f6:56:b5:07:09:b8:15:8d:77:ef:45:04:40:f3:04: b1:9f:c9:78:79:80:0b:8a:9d:b1:6c:2d:e8:0d:18: f3:1e:d7:c4:43:29:1c:30:24:fb:11:fd:5f:06:86: 26:59:27:0b:40:ff:d8:dc:9d:d6:05:8c:0b:07:ad: fe:d8:dd:04:1a:ca:83:67:de:63:4e:cd:c0:df:a7: fa:05:77:4d:3e:d7:28:49:f2:e2:73:07:31:84:52: 20:41:97:8b:f2:f6:78:04:67:9a:38:e1:ab:2c:45: a4:8b:f7:a8:00:8f:e6:84:a8:72:da:66:c9:f5:14: 3a:85:e7:1d:31:e7:5a:b1:a4:3a:b0:80:4f:d4:a3: 54:7c:69:90:62:40:2f:99:15:33:b9:76:f0:f2:62: 09:23:5f:2f:eb:30:81:82:0d:ff:7a:a6:31:5e:84: 4f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:88:23:2A:34:39:7D:6E:7A:9C:DD:6A:AC:A6:C6:65:DB:34:CB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl X509v3 Authority Key Identifier: keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer sbgp-ipAddrBlock: critical IPv4: 23.248.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d5:59:e2:a1:f9:83:f4:33:bf:14:01:b1:55:69:24:be:49: 04:11:31:43:a1:e7:72:2c:22:2e:59:cd:5a:55:97:c9:19:73: 4d:5b:92:eb:2e:49:c2:b4:81:74:74:e8:b5:d3:4c:06:f8:46: 4b:f6:4b:90:2b:d3:90:98:0d:3c:30:c4:ac:9e:d8:b5:4d:c3: 93:56:53:59:49:e5:5d:2e:c7:86:ce:bc:6e:42:cf:2a:fd:c1: bc:6b:ee:bb:e6:09:a8:24:01:be:3a:85:55:9f:1e:c9:2f:9d: 24:4a:9c:39:4d:d1:2f:63:19:22:9e:2e:99:20:de:bd:0a:b4: 9e:25:3a:0a:7f:60:6d:23:35:c9:05:b5:8e:f3:96:b4:65:b9: 50:63:d2:69:30:7d:ca:2d:71:b9:98:b7:2f:f5:80:a2:82:4e: b4:a2:3e:2f:ba:fe:1d:ce:b2:da:b3:54:c9:20:0d:94:fb:cf: 1b:68:e9:24:ba:83:fd:7e:6d:a3:60:cc:da:71:0c:3b:95:23: 1b:8e:3d:c2:06:be:fe:ca:6b:b9:2d:8d:ce:be:8c:42:73:ba: e9:67:bb:3a:41:9a:8a:e4:27:16:10:48:09:b7:72:f7:c1:97: 60:05:8d:6d:68:8b:4b:9a:c5:2a:e5:e1:b6:29:9a:ed:32:fc: af:b2:28:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrN9wTwdoLwp/0OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx NzZlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTAxZjhhMGYtZWZiOS00ZWFiLWI5YjEtNjU3ZWVlYTEwZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD+RFxBsT9hbgQnhA0R4QHG6jsGf7Bo0JNd0 0BSsWvNX3t+dxbJNVZGi35NaR+L9ckQ1z6nOsq6CIyMdATQV5IsN+3036CzT0NNC 4SoYCRORmfW9x6P8UmX2VrUHCbgVjXfvRQRA8wSxn8l4eYALip2xbC3oDRjzHtfE QykcMCT7Ef1fBoYmWScLQP/Y3J3WBYwLB63+2N0EGsqDZ95jTs3A36f6BXdNPtco SfLicwcxhFIgQZeL8vZ4BGeaOOGrLEWki/eoAI/mhKhy2mbJ9RQ6hecdMedasaQ6 sIBP1KNUfGmQYkAvmRUzuXbw8mIJI18v6zCBgg3/eqYxXoRPwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiIIyo0OX1uepzdaqymxmXbNMtAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvMmFkZDlmZTEtNDhkNC0z Mzg3LThlOTctZWVlMzNlMTM4ZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1 ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF/gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7VWeKh+YP0M78UAbFVaSS+SQQRMUOh53IsIi5ZzVpVl8kZc01bkusu ScK0gXR06LXTTAb4Rkv2S5Ar05CYDTwwxKye2LVNw5NWU1lJ5V0ux4bOvG5Czyr9 wbxr7rvmCagkAb46hVWfHskvnSRKnDlN0S9jGSKeLpkg3r0KtJ4lOgp/YG0jNckF tY7zlrRluVBj0mkwfcotcbmYty/1gKKCTrSiPi+6/h3OstqzVMkgDZT7zxto6SS6 g/1+baNgzNpxDDuVIxuOPcIGvv7Ka7ktjc6+jEJzuulnuzpBmorkJxYQSAm3cvfB l2AFjW1oi0uaxSrl4bYpmu0y/K+yKBs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:20 2025 by rpki-client