$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/ee53c556-765e-35c9-8966-5082a9f224c3.roa File: ee53c556-765e-35c9-8966-5082a9f224c3.roa (raw, json) Hash identifier: ni1d5osVhpIFkP2xK8hSztqO7wwePXLP5y3FP7xhyns= Subject key identifier: 61:A3:C8:35:E8:3E:03:13:27:63:E7:51:B7:36:B3:6C:B5:75:79:A3 Certificate issuer: /CN=59155035-b41f-4dae-a0c7-c24cb714c214 Certificate serial: 010D0C9F4328584B87B222051130B0393302C180 Authority key identifier: AA:B1:0E:2F:23:C7:08:ED:61:85:36:9E:78:0A:4C:F8:A1:C7:A1:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/ee53c556-765e-35c9-8966-5082a9f224c3.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 23.187.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/59155035-b41f-4dae-a0c7-c24cb714c214.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/59155035-b41f-4dae-a0c7-c24cb714c214.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:22:05:11:30:b0:39:33:02:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59155035-b41f-4dae-a0c7-c24cb714c214 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=52f8dbd8-dc67-48cb-9358-fab4eeb69831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:ff:a8:91:40:00:3c:fe:2b:5b:5e:19:28: 39:8d:21:18:2e:bb:11:64:d9:f4:a5:e8:27:f3:ed: 15:f7:e9:30:40:93:9e:f5:98:c8:22:ce:a5:e8:ca: a9:1d:28:f8:e8:d4:f7:1f:60:63:b6:c0:0f:ee:46: 31:0b:d2:1c:d8:7e:fc:8c:3c:c6:28:2f:a4:a3:5e: 54:b2:5e:45:1c:4f:29:b7:9f:4c:07:5c:1f:51:d3: 47:15:ae:4d:11:a8:81:72:c5:87:3e:14:b5:c4:f8: c3:e5:a2:ab:5b:f0:d5:1b:10:8a:09:84:aa:de:7e: 8c:63:c2:d3:f1:f3:4a:4c:08:3b:db:74:87:d4:96: da:54:1c:b0:03:cb:85:84:86:7e:03:a0:12:4c:6a: 2b:82:2e:29:1b:29:4c:ea:8b:b6:6f:cf:4d:72:2b: 09:bb:88:f4:ce:99:2e:59:89:ee:4c:56:4f:78:75: f9:64:fb:3a:bf:0d:50:52:d9:8b:53:e5:3e:4a:1f: 81:d4:7a:ea:76:65:db:31:a0:b9:fc:39:56:76:d8: 5a:85:61:64:66:33:b9:44:9e:d9:7a:ff:12:29:6a: ed:cc:42:61:6c:d1:ec:3e:5e:c4:7c:c1:78:7e:83: 36:9b:0a:b4:7b:14:8d:14:6e:56:44:73:f3:67:0e: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A3:C8:35:E8:3E:03:13:27:63:E7:51:B7:36:B3:6C:B5:75:79:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/ee53c556-765e-35c9-8966-5082a9f224c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214/59155035-b41f-4dae-a0c7-c24cb714c214.crl X509v3 Authority Key Identifier: keyid:AA:B1:0E:2F:23:C7:08:ED:61:85:36:9E:78:0A:4C:F8:A1:C7:A1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/59155035-b41f-4dae-a0c7-c24cb714c214.cer sbgp-ipAddrBlock: critical IPv4: 23.187.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f9:82:c3:6a:1d:43:34:3f:7c:98:c4:fd:5f:89:aa:fb:3e: 04:bb:30:d4:4e:d1:f4:24:6e:83:9f:40:c3:b5:5f:44:f0:5d: 46:c1:c8:fb:fb:25:61:01:2f:15:90:e4:2c:db:a8:a6:de:4e: ca:72:13:4c:61:74:00:63:a2:fd:ca:ef:7d:06:c7:aa:91:26: 67:ba:1f:ac:10:fc:66:43:bc:1b:1d:3c:f0:60:61:6f:d9:44: 5e:56:a3:f3:71:f9:0f:04:aa:84:66:80:98:a4:6d:a4:de:6b: 1e:c0:c5:cd:65:66:fb:e5:b0:72:a4:82:72:c8:c0:f4:38:5e: 1c:bb:8f:60:21:5d:20:33:23:83:61:74:fb:6d:9a:d7:ff:5f: 57:c6:7a:31:86:ef:e3:bb:4a:9d:8d:a5:bf:17:67:8e:2e:84: b8:97:bd:e9:97:9d:29:f3:67:5a:af:87:c1:da:0c:52:9e:b9: b9:26:65:f9:20:99:ca:6d:b1:96:d4:73:be:e2:f4:c6:a7:2b: a1:8a:23:de:a6:d7:27:f0:f1:21:1e:05:70:2a:08:d8:96:69: 5b:a8:24:bc:63:4c:83:ef:13:89:07:a1:8b:d2:3a:b7:73:63: 12:c1:18:ca:60:9e:78:e9:be:84:b5:4c:47:02:f3:bf:58:46: 2d:78:59:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiIFETCwOTMCwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkxNTUwMzUtYjQxZi00ZGFlLWEwYzctYzI0Y2I3MTRj MjE0MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NTJmOGRiZDgtZGM2Ny00OGNiLTkzNTgtZmFiNGVlYjY5ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtij/qJFAADz+K1teGSg5jSEYLrsRZNn0pegn 8+0V9+kwQJOe9ZjIIs6l6MqpHSj46NT3H2BjtsAP7kYxC9Ic2H78jDzGKC+ko15U sl5FHE8pt59MB1wfUdNHFa5NEaiBcsWHPhS1xPjD5aKrW/DVGxCKCYSq3n6MY8LT 8fNKTAg723SH1JbaVBywA8uFhIZ+A6ASTGorgi4pGylM6ou2b89NcisJu4j0zpku WYnuTFZPeHX5ZPs6vw1QUtmLU+U+Sh+B1HrqdmXbMaC5/DlWdthahWFkZjO5RJ7Z ev8SKWrtzEJhbNHsPl7EfMF4foM2mwq0exSNFG5WRHPzZw5fqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGjyDXoPgMTJ2PnUbc2s2y1dXmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81OTE1 NTAzNS1iNDFmLTRkYWUtYTBjNy1jMjRjYjcxNGMyMTQvZWU1M2M1NTYtNzY1ZS0z NWM5LTg5NjYtNTA4MmE5ZjIyNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTkxNTUwMzUtYjQxZi00ZGFlLWEw YzctYzI0Y2I3MTRjMjE0LzU5MTU1MDM1LWI0MWYtNGRhZS1hMGM3LWMyNGNiNzE0 YzIxNC5jcmwwHwYDVR0jBBgwFoAUqrEOLyPHCO1hhTaeeApM+KHHoQwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81OTE1NTAzNS1iNDFmLTRkYWUtYTBjNy1jMjRj YjcxNGMyMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG75gsNqHUM0P3yYxP1fiar7PgS7MNRO0fQkboOfQMO1X0TwXUbByPv7 JWEBLxWQ5CzbqKbeTspyE0xhdABjov3K730Gx6qRJme6H6wQ/GZDvBsdPPBgYW/Z RF5Wo/Nx+Q8EqoRmgJikbaTeax7Axc1lZvvlsHKkgnLIwPQ4Xhy7j2AhXSAzI4Nh dPttmtf/X1fGejGG7+O7Sp2Npb8XZ44uhLiXvemXnSnzZ1qvh8HaDFKeubkmZfkg mcptsZbUc77i9ManK6GKI96m1yfw8SEeBXAqCNiWaVuoJLxjTIPvE4kHoYvSOrdz YxLBGMpgnnjpvoS1TEcC879YRi14Weg= -----END CERTIFICATE-----Generated at Sun Oct 19 18:40:25 2025 by rpki-client