$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa File: f2d6896d-681b-32c5-9502-74c90202e12a.roa (raw, json) Hash identifier: KuiZvfkOG1vwy0MSvWtsVauTm78gLx9de06nUHD7GqQ= Subject key identifier: 56:DB:6C:A4:0B:3A:21:CD:3F:7A:FC:8A:81:21:6B:A5:98:62:22:01 Certificate issuer: /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Certificate serial: 010D0C9F4328584AADF116134481AF11406E7290 Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 7794 IP address blocks: 23.248.128.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:16:13:44:81:af:11:40:6e:72:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=a0d783f7-8320-4da8-bcd9-dfb6dbe321fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:b3:28:5e:d9:96:46:5e:19:b2:3c:27:36: 94:0d:f3:46:e7:ac:8b:71:66:07:b3:eb:1b:56:b8: 98:f0:56:ce:95:ca:1e:31:97:ce:42:07:4d:7c:61: 1e:a5:af:05:0a:8b:6d:d6:83:3e:7d:ee:3e:ff:e8: 72:c2:a0:ab:59:96:1e:e2:2a:5f:f5:39:cf:49:9d: 2a:3a:18:f6:74:ad:04:7d:5b:58:79:85:74:a8:30: c3:08:79:48:72:75:52:91:85:ca:2a:0c:3a:4a:6b: 26:bb:e1:d0:dc:c3:14:27:b9:04:d2:91:1e:b1:b1: 4e:da:69:b8:6a:7e:ed:a5:89:7e:5c:b6:10:0d:4c: fd:2d:f7:c4:4b:14:a6:74:92:76:04:48:27:9f:b0: 1e:eb:61:09:48:a9:d2:01:31:1a:e2:a0:ee:80:ee: 4e:24:f8:a5:43:cb:7a:05:b7:e0:99:9b:bb:46:53: d4:b9:cf:a8:4f:c0:cc:1a:ec:3e:e1:15:27:96:d7: 04:3d:1e:a8:ac:50:c3:4f:15:4e:00:20:44:54:8e: 85:2d:6c:d3:b8:92:9d:b1:66:08:56:80:15:eb:48: f3:61:f7:a2:a8:f5:ec:d8:8d:26:23:ab:b7:52:fe: 33:2b:15:e3:95:11:49:60:2a:ae:d4:a0:ce:ac:7d: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DB:6C:A4:0B:3A:21:CD:3F:7A:FC:8A:81:21:6B:A5:98:62:22:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/f2d6896d-681b-32c5-9502-74c90202e12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl X509v3 Authority Key Identifier: keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer sbgp-ipAddrBlock: critical IPv4: 23.248.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ac:4d:2e:bb:36:36:61:db:76:ef:79:ce:2b:1a:74:73:7b: 10:88:e7:4e:b0:c6:79:08:54:dc:0e:15:0c:60:9e:4a:47:8b: cd:05:11:4a:11:87:2d:6a:b2:54:20:14:b3:6c:c1:f0:5a:15: 9d:aa:6f:9e:1f:69:98:8d:2a:f7:cb:2a:be:8f:0f:79:5a:5d: b3:55:70:6f:02:e3:de:90:49:d2:ee:81:82:25:fa:8e:19:d4: 3b:5b:4c:97:1f:c6:ad:3c:09:c1:51:e8:c7:f5:29:99:b8:b3: 0e:d7:c5:da:17:5c:ef:89:7c:34:77:8a:79:49:8b:1b:b1:8e: 59:3c:ae:58:e5:83:50:ad:66:24:61:a6:56:e9:e1:20:71:3f: 05:42:64:6b:05:1c:0e:af:20:1d:87:13:c5:af:37:85:94:7e: 33:02:ba:5e:39:b7:0b:07:69:0d:01:ca:9e:10:4b:02:48:ed: b7:03:3e:1a:ec:ee:3e:08:e9:b9:19:50:55:87:a3:db:aa:ad: f3:c0:09:8c:d3:5a:6a:04:13:62:4f:a6:80:7a:12:0f:d1:24: 84:5d:5f:1f:40:76:be:84:b6:5f:3b:f4:01:de:d9:61:36:00: 0e:ca:d8:51:8b:92:5f:84:3f:52:5a:40:db:5b:c8:12:03:9b: 28:55:f8:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RYTRIGvEUBucpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx NzZlMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YTBkNzgzZjctODMyMC00ZGE4LWJjZDktZGZiNmRiZTMyMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0azKF7ZlkZeGbI8JzaUDfNG56yLcWYHs+sb VriY8FbOlcoeMZfOQgdNfGEepa8FCott1oM+fe4+/+hywqCrWZYe4ipf9TnPSZ0q Ohj2dK0EfVtYeYV0qDDDCHlIcnVSkYXKKgw6Smsmu+HQ3MMUJ7kE0pEesbFO2mm4 an7tpYl+XLYQDUz9LffESxSmdJJ2BEgnn7Ae62EJSKnSATEa4qDugO5OJPilQ8t6 BbfgmZu7RlPUuc+oT8DMGuw+4RUnltcEPR6orFDDTxVOACBEVI6FLWzTuJKdsWYI VoAV60jzYfeiqPXs2I0mI6u3Uv4zKxXjlRFJYCqu1KDOrH2AMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbbbKQLOiHNP3r8ioEha6WYYiIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvZjJkNjg5NmQtNjgxYi0z MmM1LTk1MDItNzRjOTAyMDJlMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1 ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF/iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqsTS67NjZh23bvec4rGnRzexCI506wxnkIVNwOFQxgnkpHi80FEUoR hy1qslQgFLNswfBaFZ2qb54faZiNKvfLKr6PD3laXbNVcG8C496QSdLugYIl+o4Z 1DtbTJcfxq08CcFR6Mf1KZm4sw7XxdoXXO+JfDR3inlJixuxjlk8rljlg1CtZiRh plbp4SBxPwVCZGsFHA6vIB2HE8WvN4WUfjMCul45twsHaQ0Byp4QSwJI7bcDPhrs 7j4I6bkZUFWHo9uqrfPACYzTWmoEE2JPpoB6Eg/RJIRdXx9Adr6Etl879AHe2WE2 AA7K2FGLkl+EP1JaQNtbyBIDmyhV+L0= -----END CERTIFICATE-----Generated at Fri Aug 8 12:47:54 2025 by rpki-client