$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/835eb06b-f097-3d12-90a4-362a30c25ad0.roa File: 835eb06b-f097-3d12-90a4-362a30c25ad0.roa (raw, json) Hash identifier: Udy6w2bMXKYg1LFFxXj167C5Tbmgz1/op4jfwFoTCE0= Subject key identifier: 26:B7:1E:F3:5A:E0:B5:9D:B9:FA:E6:0B:CA:B3:F1:9F:BF:78:92:6B Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F4328584BC10AD68D38EDC3CE16A6F840 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/835eb06b-f097-3d12-90a4-362a30c25ad0.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 812 IP address blocks: 23.155.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:d6:8d:38:ed:c3:ce:16:a6:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=e0637ccc-f760-467d-b5e0-a46992cfdd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:98:83:09:87:0a:82:09:0b:61:25:8e:d4:d3: 2d:52:16:20:5a:ac:1f:66:22:c5:da:1b:85:39:93: e6:70:d7:55:ea:ca:b0:db:46:60:88:a3:1f:f9:43: ee:aa:b6:8f:54:43:de:24:8a:16:c6:85:b7:ba:69: 53:8b:23:de:5f:79:f2:c1:7f:51:f6:5f:c5:06:15: 92:63:14:75:78:bb:d0:40:6e:cf:c2:ac:3e:21:37: 4e:fd:ae:f0:9c:c3:e6:40:f0:f6:4a:45:de:67:21: 21:64:d5:5e:50:67:be:92:00:1c:1d:4f:dc:7c:73: 72:75:ea:35:b4:85:23:a1:0c:3f:2c:0c:82:7e:5e: 5c:83:cc:6c:bb:76:c3:4a:56:f2:f5:96:25:32:e4: 9b:8e:72:78:bb:30:9e:bd:1e:f5:dc:f0:4d:b5:d3: 2d:fb:41:2c:a3:17:7c:eb:f8:22:c5:2e:95:cb:c1: 89:c0:bc:51:6e:8c:9e:d8:4d:0c:33:e5:38:97:b3: 49:ea:2f:17:81:b7:85:28:11:09:f1:bb:02:3f:72: aa:b0:8f:f3:5b:c0:73:f5:e0:0c:7f:02:65:79:92: 57:18:55:74:6b:dd:c5:04:2a:f7:fd:21:fe:4a:55: f1:e3:d3:0e:ce:e4:a7:5d:42:b7:7d:04:9b:37:79: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B7:1E:F3:5A:E0:B5:9D:B9:FA:E6:0B:CA:B3:F1:9F:BF:78:92:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/835eb06b-f097-3d12-90a4-362a30c25ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 23.155.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:10:d9:33:c1:4d:8a:45:12:68:01:c5:ba:24:8f:d9:95:4e: 83:05:33:3d:3c:51:22:47:88:bd:92:6f:7f:16:33:53:b0:6c: e5:0e:27:df:04:6b:45:97:a0:b9:d7:00:e0:9d:aa:ed:ad:24: 9b:e1:0f:c2:75:a8:22:85:9c:2b:ae:a6:7b:e5:02:88:d7:c5: b0:1f:35:39:c6:96:41:ff:89:61:30:e3:cd:ed:c0:03:65:7e: e9:aa:d9:4a:ff:98:6a:92:4c:1f:e8:f0:d2:f0:e2:aa:6f:25: 12:f7:88:5b:bb:4e:e1:e9:1e:16:a1:43:60:59:3f:f6:84:46: dc:60:b7:cb:f1:d6:d6:45:3a:b5:52:d5:41:e6:98:c8:ca:0a: e5:1b:1a:ba:34:9d:eb:e2:e2:40:d2:4d:ca:fa:8c:e1:ec:46: b2:4c:68:f2:b2:9e:61:06:cf:40:df:2f:3e:5c:53:0e:00:97: f0:73:c1:1e:4c:04:13:f5:5e:29:89:6b:2f:56:3d:9a:71:70: 30:66:15:f0:fb:f7:a3:43:0c:c1:3b:83:a7:78:40:6b:9f:eb: 28:92:f0:ad:81:b5:c0:a7:48:ca:54:b9:99:a3:9f:de:0b:ea: 56:5f:0e:27:47:a9:1b:e0:4f:2b:5e:e1:20:d7:db:2e:4c:65: d3:9b:ec:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCtaNOO3Dzham+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZTA2MzdjY2MtZjc2MC00NjdkLWI1ZTAtYTQ2OTkyY2ZkZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JiDCYcKggkLYSWO1NMtUhYgWqwfZiLF2huF OZPmcNdV6sqw20ZgiKMf+UPuqraPVEPeJIoWxoW3umlTiyPeX3nywX9R9l/FBhWS YxR1eLvQQG7Pwqw+ITdO/a7wnMPmQPD2SkXeZyEhZNVeUGe+kgAcHU/cfHNydeo1 tIUjoQw/LAyCfl5cg8xsu3bDSlby9ZYlMuSbjnJ4uzCevR713PBNtdMt+0Esoxd8 6/gixS6Vy8GJwLxRboye2E0MM+U4l7NJ6i8XgbeFKBEJ8bsCP3KqsI/zW8Bz9eAM fwJleZJXGFV0a93FBCr3/SH+SlXx49MOzuSnXUK3fQSbN3k40QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCa3HvNa4LWdufrmC8qz8Z+/eJJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvODM1ZWIwNmItZjA5Ny0z ZDEyLTkwYTQtMzYyYTMwYzI1YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsQ2TPBTYpFEmgBxbokj9mVToMFMz08USJHiL2Sb38WM1OwbOUOJ98E a0WXoLnXAOCdqu2tJJvhD8J1qCKFnCuupnvlAojXxbAfNTnGlkH/iWEw483twANl fumq2Ur/mGqSTB/o8NLw4qpvJRL3iFu7TuHpHhahQ2BZP/aERtxgt8vx1tZFOrVS 1UHmmMjKCuUbGro0nevi4kDSTcr6jOHsRrJMaPKynmEGz0DfLz5cUw4Al/BzwR5M BBP1XimJay9WPZpxcDBmFfD796NDDME7g6d4QGuf6yiS8K2BtcCnSMpUuZmjn94L 6lZfDidHqRvgTyte4SDX2y5MZdOb7DA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:15 2025 by rpki-client