$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa File: f2d6896d-681b-32c5-9502-74c90202e12a.roa (raw, json) Hash identifier: TjuXaRkzG92fxLl49LCsgyFk0LPakbIRZTieDZl+CGY= Subject key identifier: 75:3D:4E:94:B6:BB:02:CC:3A:70:46:2C:E4:FF:6F:F7:EA:12:4E:D1 Certificate issuer: /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Certificate serial: 010D0C9F4328584B8EACDF822FFE1E1908A030C0 Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7794 IP address blocks: 23.248.128.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:df:82:2f:fe:1e:19:08:a0:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=a4d24cde-a661-4c41-aa3f-ba70097b2f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:68:08:63:71:bc:40:61:ca:94:99:6c:71: 43:58:60:58:22:df:20:e5:97:ce:d9:e1:8c:ed:3b: 38:3b:0b:b5:8f:19:57:fb:a6:9c:b1:87:c6:7f:d2: 7a:36:24:45:82:f0:a5:b5:08:d1:5b:f8:6f:06:b1: e2:47:12:13:64:aa:64:d7:6b:58:43:e1:4f:b5:1f: a5:da:07:d3:90:b5:15:f2:47:69:ff:20:39:12:14: b6:81:51:d5:da:85:ba:5f:1f:c1:9a:ab:19:f1:9b: a4:5b:79:2b:76:25:24:df:94:41:e2:7f:a8:2d:bd: 59:91:73:e9:7f:1b:ee:30:f0:50:94:6b:46:11:69: 57:6f:7f:f5:f7:37:60:c8:1b:c8:41:d8:20:80:c9: b7:fe:6d:ba:85:9e:20:12:73:9e:58:e4:06:fb:38: 75:e5:4a:81:42:f5:a8:97:2a:fc:a9:18:36:33:09: 5d:df:e0:6e:f7:06:cd:38:a5:b0:98:08:a6:ca:49: 3c:df:e4:f1:d4:e3:5b:e9:0c:00:df:6e:de:8b:c6: c2:f4:dd:4e:e3:49:1b:d1:20:74:08:70:d8:77:f7: 50:84:60:64:a4:7d:7a:4c:bd:1f:b1:79:1c:49:8b: 21:f8:d9:9b:77:1a:5f:76:4b:e0:24:9c:5e:56:f5: 66:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3D:4E:94:B6:BB:02:CC:3A:70:46:2C:E4:FF:6F:F7:EA:12:4E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl X509v3 Authority Key Identifier: keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer sbgp-ipAddrBlock: critical IPv4: 23.248.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:fd:c0:a4:e1:fa:f1:40:25:51:71:47:23:b4:04:14:90:ba: c2:07:5d:74:2c:cf:8b:42:9a:78:3c:ce:f0:30:4b:25:00:23: 22:74:98:52:76:9d:eb:95:f9:55:44:6a:e0:bf:39:6c:4b:53: 7f:91:52:67:19:52:18:5c:14:1e:9a:7c:f4:bb:56:e7:73:54: 6c:da:23:11:72:2e:aa:3c:4b:cb:7f:bb:c3:52:e9:50:dd:f1: 08:f5:5b:dc:ee:f6:f5:ae:cc:a5:0c:90:20:c2:39:b1:26:d5: c6:58:9f:2e:2f:88:a3:9a:37:fe:ed:ed:47:16:1e:54:97:19: 6e:be:cd:00:5d:c4:21:c1:5c:46:be:be:8d:c0:e2:8d:a5:0f: 8c:a8:7e:ce:d9:8b:46:5a:d8:9f:90:d9:a2:18:71:51:ae:3c: 10:b9:ee:b8:c8:03:e9:2f:67:60:e8:28:52:46:91:cb:77:aa: 40:9a:f4:c5:22:88:d9:19:ea:20:c5:04:2f:40:1c:d5:07:b9: 15:a2:10:96:01:41:c4:39:4d:db:86:af:e1:a8:03:49:42:e8: 42:37:e6:04:5e:1a:f2:42:e7:2e:33:fc:92:51:70:e4:20:a4: dc:31:1e:ca:cd:bc:58:6a:db:98:1f:3a:4a:98:53:03:3c:ef: 93:55:b3:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrN+CL/4eGQigMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx NzZlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YTRkMjRjZGUtYTY2MS00YzQxLWFhM2YtYmE3MDA5N2IyZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NBoCGNxvEBhypSZbHFDWGBYIt8g5ZfO2eGM 7Ts4Owu1jxlX+6acsYfGf9J6NiRFgvCltQjRW/hvBrHiRxITZKpk12tYQ+FPtR+l 2gfTkLUV8kdp/yA5EhS2gVHV2oW6Xx/BmqsZ8ZukW3krdiUk35RB4n+oLb1ZkXPp fxvuMPBQlGtGEWlXb3/19zdgyBvIQdgggMm3/m26hZ4gEnOeWOQG+zh15UqBQvWo lyr8qRg2Mwld3+Bu9wbNOKWwmAimykk83+Tx1ONb6QwA327ei8bC9N1O40kb0SB0 CHDYd/dQhGBkpH16TL0fsXkcSYsh+NmbdxpfdkvgJJxeVvVmvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHU9TpS2uwLMOnBGLOT/b/fqEk7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvZjJkNjg5NmQtNjgxYi0z MmM1LTk1MDItNzRjOTAyMDJlMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1 ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr9wKTh+vFAJVFxRyO0BBSQusIHXXQsz4tCmng8zvAwSyUAIyJ0mFJ2 neuV+VVEauC/OWxLU3+RUmcZUhhcFB6afPS7VudzVGzaIxFyLqo8S8t/u8NS6VDd 8Qj1W9zu9vWuzKUMkCDCObEm1cZYny4viKOaN/7t7UcWHlSXGW6+zQBdxCHBXEa+ vo3A4o2lD4yofs7Zi0Za2J+Q2aIYcVGuPBC57rjIA+kvZ2DoKFJGkct3qkCa9MUi iNkZ6iDFBC9AHNUHuRWiEJYBQcQ5TduGr+GoA0lC6EI35gReGvJC5y4z/JJRcOQg pNwxHsrNvFhq25gfOkqYUwM875NVs5M= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:56 2025 by rpki-client