$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa File: 3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa (raw, json) Hash identifier: 6hlX+twD8R6QIrzFaVwCjrf9nQV5GdLwUEexCjcoz4M= Subject key identifier: 1F:94:11:62:73:CD:75:DB:40:A4:07:B1:9B:96:94:F2:A3:32:C0:96 Certificate issuer: /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98 Certificate serial: 010D0C9F4328584B1C36C77A3D2C6E63AA8027C0 Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 53610 IP address blocks: 23.159.24.0/24 maxlen: 24 2602:fa53::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c7:7a:3d:2c:6e:63:aa:80:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=1f3a7329-f27a-450d-b161-4f640d69ef3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:e9:bd:4a:20:ef:71:35:16:26:7c:34:d5: 4f:61:a7:08:a8:2b:98:cf:34:88:59:20:6c:9e:f4: ac:dd:de:04:09:3e:7f:17:c8:44:dd:05:1d:2f:20: 59:5d:bf:e7:4c:b8:43:29:fb:99:79:93:42:5c:a6: c7:82:2f:41:77:12:ec:58:a7:2d:d4:93:f6:74:61: 41:4c:10:e3:0c:75:c4:c8:5c:1b:68:11:e6:76:8b: 2d:0c:ae:7e:35:dc:19:ec:de:71:82:a1:be:c9:68: b0:38:e0:bc:c5:52:ff:dd:08:38:35:7c:7f:55:2c: 53:ad:70:7a:d7:ef:0a:c9:6a:85:4c:fc:cb:b1:d4: 70:fb:f7:f0:a8:f1:c6:1e:de:a7:d1:75:0a:2a:67: e5:ed:8f:9d:a5:9b:30:4c:5c:1a:e2:e2:c5:e6:43: 81:8a:9c:a5:37:e0:63:f9:f0:24:5f:bd:b0:42:a2: 38:67:2f:fb:12:3b:36:a0:f0:29:1f:42:7e:c0:3c: ed:a7:0b:41:28:9d:f1:85:e7:e0:01:84:51:bb:94: 57:d5:78:89:b5:67:33:34:fc:8f:10:a5:a2:1c:ff: 10:48:fd:2c:8b:bf:79:bf:2c:25:e4:05:ec:d3:0d: a7:0d:9f:83:6e:47:c7:04:c6:08:f3:01:8b:e9:1d: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:94:11:62:73:CD:75:DB:40:A4:07:B1:9B:96:94:F2:A3:32:C0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl X509v3 Authority Key Identifier: keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer sbgp-ipAddrBlock: critical IPv4: 23.159.24.0/24 IPv6: 2602:fa53::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9c:00:1a:50:08:8f:9c:0d:bc:4d:b3:1c:06:2b:02:22:47: b1:fa:8d:e0:f2:68:87:dd:77:96:31:5f:88:82:e6:81:85:03: ed:d1:80:d6:2b:0c:e5:51:11:f3:2b:92:68:e3:85:04:67:6f: 72:58:24:81:e6:b2:c5:77:c9:0d:25:b9:41:b5:76:70:6c:d3: 6f:b1:68:f6:7b:81:6f:ce:9f:c8:67:a6:76:e7:f8:cc:02:3e: f2:e3:7d:86:2b:27:89:dc:6c:49:68:46:2d:e2:18:80:2f:3c: a6:5f:0b:77:bf:20:d1:03:49:59:76:3f:d7:90:72:de:aa:00: fb:5a:5c:11:8b:6c:b9:40:8d:92:4c:ae:64:78:41:19:77:4c: 5b:57:5c:23:ef:ae:bb:c8:45:e7:2c:35:14:a0:2d:c9:c5:d3: bc:4f:60:9c:75:30:89:65:80:9e:4a:1f:c2:cb:f9:87:d3:9a: c6:67:21:d3:be:89:8b:26:ca:4a:22:9c:8d:db:80:f0:aa:ff: 9b:9e:94:b7:ac:a1:4f:e6:03:e5:30:c7:d1:90:3b:08:f0:07: 80:42:79:a5:57:4c:f8:aa:12:f0:d8:ca:f4:bd:aa:b0:6e:d6: 09:97:e2:de:a3:c9:b1:ce:d9:2e:33:62:34:1f:e4:57:3b:24: a2:37:54:f7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEscNsd6PSxuY6qAJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1OWUwNTAtM2UyOS00MjkzLWJkZjQtY2ZiNWZlMTU0 Yzk4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MWYzYTczMjktZjI3YS00NTBkLWIxNjEtNGY2NDBkNjllZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE3pvUog73E1FiZ8NNVPYacIqCuYzzSIWSBs nvSs3d4ECT5/F8hE3QUdLyBZXb/nTLhDKfuZeZNCXKbHgi9BdxLsWKct1JP2dGFB TBDjDHXEyFwbaBHmdostDK5+NdwZ7N5xgqG+yWiwOOC8xVL/3Qg4NXx/VSxTrXB6 1+8KyWqFTPzLsdRw+/fwqPHGHt6n0XUKKmfl7Y+dpZswTFwa4uLF5kOBipylN+Bj +fAkX72wQqI4Zy/7Ejs2oPApH0J+wDztpwtBKJ3xhefgAYRRu5RX1XiJtWczNPyP EKWiHP8QSP0si795vywl5AXs0w2nDZ+DbkfHBMYI8wGL6R3QPQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFB+UEWJzzXXbQKQHsZuWlPKjMsCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5 ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1ZmUxNTRjOTgvM2E5ZGIxYTAtNjcyMS0z ZDhkLTg1ZDQtNjQ3N2M5YmU2ZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWY1OWUwNTAtM2UyOS00MjkzLWJk ZjQtY2ZiNWZlMTU0Yzk4L2VmNTllMDUwLTNlMjktNDI5My1iZGY0LWNmYjVmZTE1 NGM5OC5jcmwwHwYDVR0jBBgwFoAU8Ma+OtC0tMwv/U99IeNuMpHeqvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1 ZmUxNTRjOTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF58YMA4E AgACMAgDBgAmAvpTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBinAAaUAiPnA28TbMcBisCIkex+o3g8miH 3XeWMV+IguaBhQPt0YDWKwzlURHzK5Jo44UEZ29yWCSB5rLFd8kNJblBtXZwbNNv sWj2e4Fvzp/IZ6Z25/jMAj7y432GKyeJ3GxJaEYt4hiALzymXwt3vyDRA0lZdj/X kHLeqgD7WlwRi2y5QI2STK5keEEZd0xbV1wj7667yEXnLDUUoC3JxdO8T2CcdTCJ ZYCeSh/Cy/mH05rGZyHTvomLJspKIpyN24Dwqv+bnpS3rKFP5gPlMMfRkDsI8AeA QnmlV0z4qhLw2Mr0vaqwbtYJl+Leo8mxztkuM2I0H+RXOySiN1T3 -----END CERTIFICATE-----Generated at Wed Nov 5 14:59:09 2025 by rpki-client