$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa File: 7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa (raw, json) Hash identifier: sHB5CTkWcXbM8Z7mKQqjXcQVNDj8Ii2xpxENpHf79PE= Subject key identifier: 40:9B:99:CB:92:3B:1D:53:FF:08:F5:0A:28:82:FA:88:83:55:35:79 Certificate issuer: /CN=bf246bfa-4298-4264-af85-3fb2845207f8 Certificate serial: 010D0C9F4328584BAA97A5BC76D86CA2E847C400 Authority key identifier: 0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 395886 IP address blocks: 23.135.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a5:bc:76:d8:6c:a2:e8:47:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf246bfa-4298-4264-af85-3fb2845207f8 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=3fd61304-7b16-4079-b530-4208c20a9bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:12:41:04:b7:d9:bb:ef:84:01:68:52:96:94: b8:81:e6:17:93:19:bf:c5:88:85:82:c6:ad:52:e5: 57:3c:a9:1d:a0:9e:d1:95:3e:8d:f7:b2:41:9e:f8: 81:af:d9:11:2f:62:3d:97:ae:b2:c0:2d:48:80:76: a5:83:8e:66:eb:93:5d:d5:de:0f:5f:ce:75:95:82: 90:bd:d1:9c:db:08:a8:fe:5b:fc:26:0d:2f:8f:36: f0:aa:ad:c1:1f:08:19:09:30:11:7a:81:08:8b:6a: 85:72:42:67:29:5e:fa:04:85:c8:4d:2e:3c:63:7c: 21:ae:af:78:b8:47:d4:c3:3a:93:ef:72:ee:5c:b3: 97:ce:d7:68:5c:bd:ec:07:58:e2:76:3f:91:8e:da: 05:3e:7d:77:d9:6e:06:e5:7e:3a:8b:80:fd:0a:a4: 65:92:93:7d:26:48:fb:a3:d0:25:05:a0:05:9b:92: 1e:8e:9f:af:00:8c:e3:b1:cf:49:02:a9:97:05:fa: ec:59:7b:24:8c:8e:44:b4:f1:50:b4:2c:66:c6:2b: a9:20:45:e4:7f:36:db:9c:a0:3d:04:68:61:89:41: 89:84:d8:b5:22:e0:cf:f4:5d:aa:6e:0b:8a:6b:cf: de:bd:52:2e:fd:a4:72:ac:2c:0c:e3:93:fb:d1:ce: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9B:99:CB:92:3B:1D:53:FF:08:F5:0A:28:82:FA:88:83:55:35:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl X509v3 Authority Key Identifier: keyid:0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer sbgp-ipAddrBlock: critical IPv4: 23.135.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:da:e1:32:96:56:c5:ca:4a:42:12:0e:19:a4:2f:00:c8:d6: f9:d6:bc:99:80:28:98:2a:3e:e4:dc:99:7a:f5:24:f9:0d:f6: 14:eb:c7:b0:bc:00:c5:c6:3d:0c:3e:f9:3f:6b:27:8f:46:24: 91:2a:06:13:c8:c8:ed:2c:51:4f:cb:f4:58:63:a1:53:4d:e1: 50:17:7d:74:06:b7:9d:02:ba:e2:51:6d:bd:79:9c:16:f6:34: 11:0f:6e:04:77:8e:75:64:bf:78:91:d4:89:93:9f:8f:ac:6a: 94:98:c3:2e:98:47:b8:7d:f8:a4:7f:e3:36:43:0f:0d:25:aa: b8:b3:b4:24:2d:6d:b1:4e:fc:e1:a4:07:f3:8a:1b:b9:3d:39: 49:5f:a3:ff:c0:4d:1e:b5:06:c2:90:98:f8:e9:43:b5:bd:6d: 1f:18:2a:4c:2f:ed:68:a8:28:3e:24:0f:3e:d6:ba:0d:8a:36: 05:07:7c:42:05:f9:b1:c8:89:06:39:14:dc:fc:e6:d6:16:e0: 59:4b:e0:7a:18:e6:5a:17:b6:82:f6:49:13:4f:68:31:8b:a8: 85:1a:85:ba:d4:55:d8:2c:fc:03:d1:9c:ef:5d:60:c6:30:41: 7e:cf:8c:b8:bc:f8:24:88:3c:bc:d5:6e:78:bf:c4:a7:1d:8e: 64:95:af:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6W8dthsouhHxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYyNDZiZmEtNDI5OC00MjY0LWFmODUtM2ZiMjg0NTIw N2Y4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk M2ZkNjEzMDQtN2IxNi00MDc5LWI1MzAtNDIwOGMyMGE5YmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhJBBLfZu++EAWhSlpS4geYXkxm/xYiFgsat UuVXPKkdoJ7RlT6N97JBnviBr9kRL2I9l66ywC1IgHalg45m65Nd1d4PX851lYKQ vdGc2wio/lv8Jg0vjzbwqq3BHwgZCTAReoEIi2qFckJnKV76BIXITS48Y3whrq94 uEfUwzqT73LuXLOXztdoXL3sB1jidj+RjtoFPn132W4G5X46i4D9CqRlkpN9Jkj7 o9AlBaAFm5Iejp+vAIzjsc9JAqmXBfrsWXskjI5EtPFQtCxmxiupIEXkfzbbnKA9 BGhhiUGJhNi1IuDP9F2qbguKa8/evVIu/aRyrCwM45P70c7UoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECbmcuSOx1T/wj1CiiC+oiDVTV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZjI0 NmJmYS00Mjk4LTQyNjQtYWY4NS0zZmIyODQ1MjA3ZjgvN2YxNjhjNWItYzE0ZS0z YjFlLTkxOGEtMDA2OWI4Y2E3ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmYyNDZiZmEtNDI5OC00MjY0LWFm ODUtM2ZiMjg0NTIwN2Y4L2JmMjQ2YmZhLTQyOTgtNDI2NC1hZjg1LTNmYjI4NDUy MDdmOC5jcmwwHwYDVR0jBBgwFoAUDLICaJXL5MaEmGjUtBq7vWVtv6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZjI0NmJmYS00Mjk4LTQyNjQtYWY4NS0zZmIy ODQ1MjA3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4c4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/a4TKWVsXKSkISDhmkLwDI1vnWvJmAKJgqPuTcmXr1JPkN9hTrx7C8 AMXGPQw++T9rJ49GJJEqBhPIyO0sUU/L9FhjoVNN4VAXfXQGt50CuuJRbb15nBb2 NBEPbgR3jnVkv3iR1ImTn4+sapSYwy6YR7h9+KR/4zZDDw0lqriztCQtbbFO/OGk B/OKG7k9OUlfo//ATR61BsKQmPjpQ7W9bR8YKkwv7WioKD4kDz7Wug2KNgUHfEIF +bHIiQY5FNz85tYW4FlL4HoY5loXtoL2SRNPaDGLqIUahbrUVdgs/APRnO9dYMYw QX7PjLi8+CSIPLzVbni/xKcdjmSVr+Q= -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:44 2025 by rpki-client