$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa File: a4f9f1e8-30bc-3b04-a50f-256889a98473.roa (raw, json) Hash identifier: zgcWYiZDg64BvO7zLH+cAVOmIVEtn1C34fZtEHFftDg= Subject key identifier: DD:7D:D0:C1:9D:45:FF:7F:B4:23:55:D0:03:2A:5A:A0:CF:D2:09:29 Certificate issuer: /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98 Certificate serial: 010D0C9F4328584B1C36C79BDE87FA112B69FA80 Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 32826 IP address blocks: 23.159.24.0/24 maxlen: 24 2602:fa53::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c7:9b:de:87:fa:11:2b:69:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=e729ca48-8ea1-47f7-9322-d50b6a00aa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:10:c7:3a:e6:b0:35:b8:91:31:fd:4c:80: 0f:61:e2:75:00:36:e5:20:e6:24:41:88:6c:94:a1: c2:8e:be:5e:44:fa:da:5a:c2:5c:e0:06:0c:c7:c7: 1a:5b:0b:09:df:fa:54:d1:54:c0:d4:02:65:f1:53: 24:0c:e9:c3:f6:55:97:34:ad:e1:86:88:53:d3:f7: 62:c9:81:70:e6:8d:0c:2c:90:11:2e:24:db:43:10: ba:cd:17:b0:cd:7d:94:5e:d0:cc:cb:cd:96:99:bd: 25:e7:81:13:e6:ad:0b:69:50:f2:e2:60:e7:b9:83: 38:b9:41:25:53:5d:be:40:c0:06:95:fb:8c:5a:73: bb:17:40:bf:9d:78:47:e1:3c:48:8e:29:14:06:88: cc:31:12:73:9d:ba:23:52:99:e2:46:35:e5:a6:f0: 22:0a:df:d0:1c:ac:55:75:46:c5:94:7e:9a:81:c7: 4f:1c:2b:03:f2:bf:85:8b:18:dd:7e:a2:f0:73:12: 31:16:be:e3:88:c0:49:63:4d:65:09:ac:6e:a1:e2: a9:35:74:95:ec:bb:57:b6:d8:f5:a9:c6:c9:9a:a9: 5f:7f:2b:24:a6:a5:58:ce:4c:8d:4e:a0:e5:6f:ff: 51:27:88:ca:b5:94:e6:a2:d1:4b:15:4a:ed:d8:83: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7D:D0:C1:9D:45:FF:7F:B4:23:55:D0:03:2A:5A:A0:CF:D2:09:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl X509v3 Authority Key Identifier: keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer sbgp-ipAddrBlock: critical IPv4: 23.159.24.0/24 IPv6: 2602:fa53::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:47:47:58:44:38:c5:46:c6:1d:27:e3:09:46:6d:c7:fa:a6: 26:85:95:29:6b:0c:47:86:0f:4c:e7:a2:b3:ab:b5:ea:1e:8b: 21:7d:6c:1a:b8:6a:d1:fc:46:6f:b9:1b:3d:aa:a0:67:99:46: 2c:a6:54:f7:55:a4:e7:db:9e:56:70:e7:d5:0d:df:a8:fa:00: ca:db:45:cb:40:b6:69:52:1c:07:fa:a5:aa:46:4c:66:a4:1e: b9:9a:15:1d:b8:1f:22:df:c5:49:6d:f3:21:8b:8e:70:e3:fd: 38:f9:58:5f:80:fd:b4:3b:06:85:40:1c:cb:80:cf:30:c2:32: ad:e9:d3:28:bf:fa:4a:e6:4a:6f:49:1e:6b:e4:38:fb:e3:63: 5b:40:a5:77:12:ab:91:7c:60:cf:5f:a5:fc:d4:45:52:ca:89: bb:54:fb:7d:74:5f:1d:61:f6:11:5a:8e:ab:92:1c:e7:1e:3d: 0e:15:d3:79:c4:ca:b8:c4:82:c8:21:6c:da:98:28:f5:8f:42: f5:7f:7b:86:42:4d:e2:39:8d:a7:1c:b8:8c:b7:2d:ac:61:99: d1:d3:15:e7:ff:83:36:e4:a0:27:99:68:ff:1a:ad:8a:ef:a8: 2a:1e:57:d0:2a:bf:98:c2:ea:b0:6a:34:3e:f4:15:d2:07:64: 09:4e:bf:04 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEscNseb3of6EStp+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1OWUwNTAtM2UyOS00MjkzLWJkZjQtY2ZiNWZlMTU0 Yzk4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTcyOWNhNDgtOGVhMS00N2Y3LTkzMjItZDUwYjZhMDBhYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziAQxzrmsDW4kTH9TIAPYeJ1ADblIOYkQYhs lKHCjr5eRPraWsJc4AYMx8caWwsJ3/pU0VTA1AJl8VMkDOnD9lWXNK3hhohT0/di yYFw5o0MLJARLiTbQxC6zRewzX2UXtDMy82Wmb0l54ET5q0LaVDy4mDnuYM4uUEl U12+QMAGlfuMWnO7F0C/nXhH4TxIjikUBojMMRJznbojUpniRjXlpvAiCt/QHKxV dUbFlH6agcdPHCsD8r+FixjdfqLwcxIxFr7jiMBJY01lCaxuoeKpNXSV7LtXttj1 qcbJmqlffyskpqVYzkyNTqDlb/9RJ4jKtZTmotFLFUrt2IMM8QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFN190MGdRf9/tCNV0AMqWqDP0gkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5 ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1ZmUxNTRjOTgvYTRmOWYxZTgtMzBiYy0z YjA0LWE1MGYtMjU2ODg5YTk4NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWY1OWUwNTAtM2UyOS00MjkzLWJk ZjQtY2ZiNWZlMTU0Yzk4L2VmNTllMDUwLTNlMjktNDI5My1iZGY0LWNmYjVmZTE1 NGM5OC5jcmwwHwYDVR0jBBgwFoAU8Ma+OtC0tMwv/U99IeNuMpHeqvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1 ZmUxNTRjOTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF58YMA4E AgACMAgDBgAmAvpTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGR0dYRDjFRsYdJ+MJRm3H+qYmhZUpawxH hg9M56Kzq7XqHoshfWwauGrR/EZvuRs9qqBnmUYsplT3VaTn255WcOfVDd+o+gDK 20XLQLZpUhwH+qWqRkxmpB65mhUduB8i38VJbfMhi45w4/04+VhfgP20OwaFQBzL gM8wwjKt6dMov/pK5kpvSR5r5Dj742NbQKV3EquRfGDPX6X81EVSyom7VPt9dF8d YfYRWo6rkhznHj0OFdN5xMq4xILIIWzamCj1j0L1f3uGQk3iOY2nHLiMty2sYZnR 0xXn/4M25KAnmWj/Gq2K76gqHlfQKr+YwuqwajQ+9BXSB2QJTr8E -----END CERTIFICATE-----Generated at Sat Oct 11 11:42:51 2025 by rpki-client