$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa File: 4332eacc-e724-3376-9a5d-fe44540381b1.roa (raw, json) Hash identifier: QG6hNbTed+4svo9GgMaRz7hUp5qlVySIns3bGSqnbVY= Subject key identifier: 8D:A6:95:3A:29:8F:20:C9:26:E3:0F:FA:54:B9:E8:34:3B:F8:A3:C2 Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F4328584B6A61E6E1CA4D2A50B69DA520 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 61112 IP address blocks: 23.158.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e6:e1:ca:4d:2a:50:b6:9d:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=04c7e9bb-a4f2-4e45-9196-8911f6fb5e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:0e:64:2e:ea:38:61:f9:66:83:d1:2a:fe: 42:90:26:7e:0e:67:01:b4:25:ef:11:e8:82:58:85: 95:a9:53:8c:98:a1:bd:ba:5d:ae:f0:11:af:6f:ee: 70:4d:ed:06:2a:3e:cc:ac:c1:67:67:19:6c:88:18: 68:94:c3:5f:35:0d:4e:e3:c8:24:0b:99:11:37:cb: cb:aa:62:83:4a:f7:a9:4b:b9:c5:41:f9:36:cd:63: 4b:a8:73:33:ec:cd:1a:67:4a:47:30:49:76:a9:02: a0:61:b0:36:1d:80:5b:07:8d:59:f6:f5:c1:2e:17: 65:1b:fa:ac:1f:5e:7b:91:fd:64:a4:3e:cb:ab:f5: 2c:ff:a8:39:86:e1:23:4f:ec:89:19:16:27:4a:74: 3f:00:9f:86:b8:d0:2b:69:30:2b:85:27:9d:a7:36: 4b:8f:1b:bb:0f:29:6e:b2:87:35:0e:e5:6c:6b:a3: 3c:46:c6:86:c5:98:ec:5b:d9:f5:e4:18:61:d4:50: 48:90:50:ff:4e:49:55:82:1b:62:05:92:7c:01:18: bb:03:8b:45:a6:ba:ad:34:b3:d3:bc:f9:bc:0e:27: c8:45:b9:ef:5e:ec:f3:82:5e:78:6b:26:7c:0f:e3: 31:f6:8c:35:c2:02:7a:45:5c:e6:c5:ff:67:6e:0a: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A6:95:3A:29:8F:20:C9:26:E3:0F:FA:54:B9:E8:34:3B:F8:A3:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:39:48:3d:3a:2f:9c:66:91:47:ea:a9:e8:eb:79:33:14:3f: 76:66:1d:f1:b6:17:c8:4f:e8:74:ca:c0:f8:e9:94:bc:b7:07: ce:2c:bf:b1:fc:41:df:1d:d0:6c:58:a8:77:9f:a5:1b:3b:54: 45:86:4c:30:ef:f9:54:2d:6a:fb:13:f6:1f:7f:ea:c3:0c:fd: 03:a3:db:21:f1:61:a1:2d:81:99:a3:cc:ae:24:1b:69:e4:5c: f9:c5:d1:62:56:72:31:b2:c1:08:61:c1:c3:30:6b:d7:42:fd: 96:8f:dc:91:64:95:1e:0a:10:b2:ad:73:33:bb:e4:ac:96:ac: 77:d6:33:83:61:41:c5:a5:72:40:91:41:68:f1:64:fa:d7:1e: 70:cc:f7:1f:b1:7f:a8:c1:0a:bd:ea:40:ca:8b:11:1a:bf:90: a1:6f:3d:c9:f4:be:8b:cc:2a:0c:8b:91:ce:22:48:77:6b:95: de:d4:4f:8c:47:b6:61:e0:21:8b:29:cd:0a:6b:34:db:0e:d2: f4:d8:bf:fa:97:f2:6b:50:31:bc:87:85:66:67:01:1e:92:6b: f5:0b:e1:78:f7:fa:cf:42:eb:30:83:69:f2:50:20:8f:4e:1f: 3e:0b:e4:bc:76:4e:2f:8d:7e:a8:63:a0:54:a6:60:58:ea:4c: e4:ad:0d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYebhyk0qULadpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MDRjN2U5YmItYTRmMi00ZTQ1LTkxOTYtODkxMWY2ZmI1ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVAOZC7qOGH5ZoPRKv5CkCZ+DmcBtCXvEeiC WIWVqVOMmKG9ul2u8BGvb+5wTe0GKj7MrMFnZxlsiBholMNfNQ1O48gkC5kRN8vL qmKDSvepS7nFQfk2zWNLqHMz7M0aZ0pHMEl2qQKgYbA2HYBbB41Z9vXBLhdlG/qs H157kf1kpD7Lq/Us/6g5huEjT+yJGRYnSnQ/AJ+GuNAraTArhSedpzZLjxu7Dylu soc1DuVsa6M8RsaGxZjsW9n15Bhh1FBIkFD/TklVghtiBZJ8ARi7A4tFprqtNLPT vPm8DifIRbnvXuzzgl54ayZ8D+Mx9ow1wgJ6RVzmxf9nbgpoKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2mlTopjyDJJuMP+lS56DQ7+KPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvNDMzMmVhY2MtZTcyNC0z Mzc2LTlhNWQtZmU0NDU0MDM4MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF56IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw5SD06L5xmkUfqqejreTMUP3ZmHfG2F8hP6HTKwPjplLy3B84sv7H8 Qd8d0GxYqHefpRs7VEWGTDDv+VQtavsT9h9/6sMM/QOj2yHxYaEtgZmjzK4kG2nk XPnF0WJWcjGywQhhwcMwa9dC/ZaP3JFklR4KELKtczO75KyWrHfWM4NhQcWlckCR QWjxZPrXHnDM9x+xf6jBCr3qQMqLERq/kKFvPcn0vovMKgyLkc4iSHdrld7UT4xH tmHgIYspzQprNNsO0vTYv/qX8mtQMbyHhWZnAR6Sa/UL4Xj3+s9C6zCDafJQII9O Hz4L5Lx2Ti+NfqhjoFSmYFjqTOStDTE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:51:11 2025 by rpki-client