$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/00f35a85-6612-37e4-9324-4fba70edc479.roa File: 00f35a85-6612-37e4-9324-4fba70edc479.roa (raw, json) Hash identifier: ws//Hwt68apFUmUxpmckqFrTDuL8nihtKcgxr0MZRWw= Subject key identifier: 55:5D:DB:50:EE:DE:56:90:86:35:B8:6E:F0:98:FA:19:CD:D8:8F:48 Certificate issuer: /CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf Certificate serial: 010D0C9F4328584B0B76AD563C42A1C77AA04200 Authority key identifier: 82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/00f35a85-6612-37e4-9324-4fba70edc479.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 150698 IP address blocks: 23.155.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ad:56:3c:42:a1:c7:7a:a0:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=8f296293-fef5-428f-b7c0-1cc5d61a71c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:89:2e:5e:29:c4:bc:c2:2b:2e:e7:ca:83: 54:26:3e:5a:8f:01:fc:1a:43:8a:f1:57:c5:01:08: 4e:6c:cc:8e:db:1c:c4:d5:78:10:bd:17:ab:8c:70: 1e:01:58:98:d8:1d:ca:2c:48:52:31:42:7a:85:f1: 8c:7d:a1:09:11:ce:74:a9:fc:7e:0d:a1:60:96:59: 19:bc:03:cd:26:53:5e:0f:bf:b7:07:55:40:54:f1: fd:fb:50:ce:71:ac:95:f6:2a:06:b9:c3:7c:e2:ad: 24:90:ab:6c:65:71:2f:c0:85:84:a0:8c:7d:0f:b1: 37:53:14:83:d2:ab:ba:2a:42:9f:6c:ac:ef:8e:81: 72:53:2b:6a:c3:01:7c:06:b8:bf:a9:8d:4d:ba:e2: 69:3e:38:c8:dc:50:ab:14:aa:60:9a:d4:36:3e:c3: 89:d1:3a:fb:48:d6:89:f9:97:4a:d7:fa:81:2e:94: ba:80:61:ec:05:75:8c:76:69:11:60:58:4c:7c:99: 75:eb:c5:74:70:a0:10:ba:b8:be:31:af:6f:d7:68: 42:3a:5b:52:13:2e:5b:61:13:c5:0b:f3:67:0b:6a: 10:8a:cf:bc:3f:62:b2:58:0f:61:6d:9f:65:44:2d: a9:91:de:5b:be:f6:93:e7:5a:4c:91:2c:fb:90:92: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5D:DB:50:EE:DE:56:90:86:35:B8:6E:F0:98:FA:19:CD:D8:8F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/00f35a85-6612-37e4-9324-4fba70edc479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl X509v3 Authority Key Identifier: keyid:82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer sbgp-ipAddrBlock: critical IPv4: 23.155.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f6:97:f4:19:bd:2b:2e:f6:f7:fb:bb:dc:3e:6d:27:be:31: 85:96:17:ac:72:49:e8:f0:cc:e4:46:73:06:96:60:55:03:aa: f7:fa:2b:ff:2e:c1:8e:2a:39:3d:c1:25:64:65:08:96:1a:b9: df:b1:07:d6:a8:57:37:2e:96:f3:9f:04:8b:66:81:99:21:d7: 1e:8a:cb:42:ea:3d:cd:1d:25:a3:55:99:8a:ca:60:73:26:57: 6d:78:4c:01:72:b8:4d:7b:92:7a:ea:c8:be:da:b2:8d:8b:43: ee:24:89:57:2b:c2:20:4c:5e:77:71:3d:1b:10:64:03:21:ea: cc:73:5f:af:94:45:53:80:cf:d3:2e:47:97:2e:e1:10:38:32: bf:70:17:ec:8a:2b:78:31:55:fa:e5:00:3b:db:50:01:85:d1: 34:03:c1:dd:3d:2d:46:65:c1:a4:2c:f6:4e:ab:d1:16:e8:38: 20:bd:c0:c9:1b:3d:f2:19:6c:15:88:b5:ec:dd:9b:33:bb:b6: 87:a1:8d:66:61:a9:f6:70:c1:f2:b2:b5:bf:ee:2e:05:d8:b0: 38:4b:ef:d2:84:df:8a:6d:8d:f5:d3:f9:da:49:eb:86:bf:1b: 56:60:f0:1c:b0:4b:bb:ac:19:9c:e5:5e:89:d8:cc:bd:b7:9e: f7:9a:20:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq1WPEKhx3qgQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmVkYzlkZjgtNTk2ZS00ZTMzLWI4YWMtNjg1N2NmN2Y1 NmNmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OGYyOTYyOTMtZmVmNS00MjhmLWI3YzAtMWNjNWQ2MWE3MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijaJLl4pxLzCKy7nyoNUJj5ajwH8GkOK8VfF AQhObMyO2xzE1XgQvRerjHAeAViY2B3KLEhSMUJ6hfGMfaEJEc50qfx+DaFgllkZ vAPNJlNeD7+3B1VAVPH9+1DOcayV9ioGucN84q0kkKtsZXEvwIWEoIx9D7E3UxSD 0qu6KkKfbKzvjoFyUytqwwF8Bri/qY1NuuJpPjjI3FCrFKpgmtQ2PsOJ0Tr7SNaJ +ZdK1/qBLpS6gGHsBXWMdmkRYFhMfJl168V0cKAQuri+Ma9v12hCOltSEy5bYRPF C/NnC2oQis+8P2KyWA9hbZ9lRC2pkd5bvvaT51pMkSz7kJKfqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVd21Du3laQhjW4bvCY+hnN2I9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZWRj OWRmOC01OTZlLTRlMzMtYjhhYy02ODU3Y2Y3ZjU2Y2YvMDBmMzVhODUtNjYxMi0z N2U0LTkzMjQtNGZiYTcwZWRjNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmVkYzlkZjgtNTk2ZS00ZTMzLWI4 YWMtNjg1N2NmN2Y1NmNmL2JlZGM5ZGY4LTU5NmUtNGUzMy1iOGFjLTY4NTdjZjdm NTZjZi5jcmwwHwYDVR0jBBgwFoAUgv866NVINlTTQK2Gd9R+Zslr4ZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZWRjOWRmOC01OTZlLTRlMzMtYjhhYy02ODU3 Y2Y3ZjU2Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5u4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFX2l/QZvSsu9vf7u9w+bSe+MYWWF6xySejwzORGcwaWYFUDqvf6K/8u wY4qOT3BJWRlCJYaud+xB9aoVzculvOfBItmgZkh1x6Ky0LqPc0dJaNVmYrKYHMm V214TAFyuE17knrqyL7aso2LQ+4kiVcrwiBMXndxPRsQZAMh6sxzX6+URVOAz9Mu R5cu4RA4Mr9wF+yKK3gxVfrlADvbUAGF0TQDwd09LUZlwaQs9k6r0RboOCC9wMkb PfIZbBWItezdmzO7toehjWZhqfZwwfKytb/uLgXYsDhL79KE34ptjfXT+dpJ64a/ G1Zg8BywS7usGZzlXonYzL23nveaII8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:00:33 2025 by rpki-client