$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa File: 4332eacc-e724-3376-9a5d-fe44540381b1.roa (raw, json) Hash identifier: o/OiNW81/4FMVSHo+RCXqg1yNWwsYk+wF4ey3qYfTG8= Subject key identifier: 43:DB:B8:64:09:53:1E:5C:1B:25:B5:53:C0:EA:4E:E5:23:D3:92:B5 Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F4328584A89A6185BB35A3389E4E4EE00 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 61112 IP address blocks: 23.158.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:18:5b:b3:5a:33:89:e4:e4:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=49289b76-42e7-47b0-88af-ebc21d2e90e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:33:a4:20:5c:bb:d6:11:b5:19:48:51:06: 15:08:de:59:1e:9a:7f:9e:51:c7:a7:dc:fb:7c:f6: af:16:65:a5:81:a5:02:63:99:89:8b:52:57:db:e9: 18:ae:99:8f:26:bb:e5:fa:fc:33:f6:17:59:35:c2: 68:23:f1:bf:b3:87:a2:d2:8d:54:77:90:5a:e0:66: b9:a4:98:22:ae:3f:d0:01:7d:a7:28:90:30:6c:ce: 8f:a5:c6:ba:51:28:bb:69:41:09:2c:87:e9:cb:e0: 48:2b:00:aa:91:ac:d7:4a:1f:61:e7:9d:54:ea:8b: 42:aa:d1:57:d6:23:9e:05:7d:5b:aa:76:ec:c4:f8: 54:dd:ed:22:fe:c9:e4:df:8a:02:8f:f2:72:5a:1f: f1:1e:c4:43:42:41:27:ee:b1:e9:5b:91:90:0f:1e: 3e:cd:25:51:57:a8:04:87:6f:36:c0:1a:7c:ef:c4: 9c:47:2a:3a:b4:41:e3:32:1c:81:25:8d:b1:89:ec: 51:73:83:7e:98:84:d4:94:0f:c7:e7:17:7b:5a:52: 1f:33:1d:c1:de:fa:fb:0d:f2:05:5e:e9:c3:ab:77: 45:db:2e:02:d6:ee:a2:19:c4:b6:f2:bc:23:ea:46: 55:9f:ee:ac:7c:8c:05:52:0b:0d:c7:71:0b:e9:b7: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:B8:64:09:53:1E:5C:1B:25:B5:53:C0:EA:4E:E5:23:D3:92:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:00:4c:dc:2a:08:c1:e3:b3:ff:f4:ca:c7:5f:f7:1d:a2:00: 07:52:8f:07:ac:55:72:37:cc:4e:fd:9b:d7:c5:2e:fb:fe:67: 9a:87:e4:31:08:2e:01:45:4b:44:8e:ea:19:c2:43:fd:d7:41: c2:d9:59:ff:39:8a:c5:5e:68:c4:4d:54:c5:92:65:26:af:44: 7e:73:86:75:7d:8e:1a:22:80:a9:e4:c5:f6:c9:7d:d6:bf:f0: 58:8d:9a:b6:fc:a1:ef:30:2c:1e:e1:62:06:bd:ed:5a:6f:9d: e2:04:24:63:fa:0f:15:03:a9:68:a1:26:72:28:87:27:87:6c: b3:3c:a0:63:cc:e6:8d:bc:9c:b1:b5:fb:8f:12:48:52:27:ec: 4d:66:ed:9b:ec:38:85:d4:71:e4:bd:04:e6:47:bd:c0:2f:03: 4c:8f:a6:8b:f9:71:3c:d9:95:b1:b9:73:50:85:9e:26:84:c0: e1:74:3a:a7:2a:2e:bc:71:b3:4c:a5:e5:64:5a:85:75:6e:e0: 56:f5:0d:1f:a7:1d:78:ee:b9:02:6a:14:a9:35:4a:c3:79:ee: a2:e6:04:8b:23:ac:cb:d5:bf:ad:4c:53:3c:45:97:e2:20:21: c4:5e:72:cf:6b:16:82:1e:6f:46:a0:85:dc:54:58:27:2a:d1: a1:eb:d5:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphhbs1ozieTk7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk NDkyODliNzYtNDJlNy00N2IwLTg4YWYtZWJjMjFkMmU5MGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5EzpCBcu9YRtRlIUQYVCN5ZHpp/nlHHp9z7 fPavFmWlgaUCY5mJi1JX2+kYrpmPJrvl+vwz9hdZNcJoI/G/s4ei0o1Ud5Ba4Ga5 pJgirj/QAX2nKJAwbM6Ppca6USi7aUEJLIfpy+BIKwCqkazXSh9h551U6otCqtFX 1iOeBX1bqnbsxPhU3e0i/snk34oCj/JyWh/xHsRDQkEn7rHpW5GQDx4+zSVRV6gE h282wBp878ScRyo6tEHjMhyBJY2xiexRc4N+mITUlA/H5xd7WlIfMx3B3vr7DfIF XunDq3dF2y4C1u6iGcS28rwj6kZVn+6sfIwFUgsNx3EL6bfYIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPbuGQJUx5cGyW1U8DqTuUj05K1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvNDMzMmVhY2MtZTcyNC0z Mzc2LTlhNWQtZmU0NDU0MDM4MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF56IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8ATNwqCMHjs//0ysdf9x2iAAdSjwesVXI3zE79m9fFLvv+Z5qH5DEI LgFFS0SO6hnCQ/3XQcLZWf85isVeaMRNVMWSZSavRH5zhnV9jhoigKnkxfbJfda/ 8FiNmrb8oe8wLB7hYga97VpvneIEJGP6DxUDqWihJnIohyeHbLM8oGPM5o28nLG1 +48SSFIn7E1m7ZvsOIXUceS9BOZHvcAvA0yPpov5cTzZlbG5c1CFniaEwOF0Oqcq Lrxxs0yl5WRahXVu4Fb1DR+nHXjuuQJqFKk1SsN57qLmBIsjrMvVv61MUzxFl+Ig IcRecs9rFoIeb0aghdxUWCcq0aHr1Qc= -----END CERTIFICATE-----Generated at Wed Aug 6 11:02:36 2025 by rpki-client