$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eda38b15-0356-3b5d-ac01-a7ed16d162e4.roa File: eda38b15-0356-3b5d-ac01-a7ed16d162e4.roa (raw, json) Hash identifier: cv0+z/WYJ69aM9N+6Cz0assSec+4IhQeDsySOejLLbY= Subject key identifier: AE:66:5E:1E:C8:13:52:B3:42:CC:37:D2:77:ED:55:C5:B8:F5:8A:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B074ECA00FF5852A943B880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eda38b15-0356-3b5d-ac01-a7ed16d162e4.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 35994 IP address blocks: 23.210.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4e:ca:00:ff:58:52:a9:43:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=c35f5848-61ff-45de-a899-debf5f5e75e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:69:df:42:4b:92:d4:0d:a8:ef:aa:e4:07: 40:6f:8d:12:a2:c0:e5:23:95:16:9a:9f:56:86:da: 97:9c:e5:6d:39:f7:34:e3:3d:f1:11:f7:e1:56:ec: d1:6a:2d:d6:d8:ae:42:1f:99:82:ab:23:10:33:cf: 9c:99:77:bc:f3:03:da:eb:e7:85:58:90:04:26:5e: 4a:d2:36:e0:ad:7a:22:37:09:8d:43:a2:28:df:4b: a5:80:79:19:ef:6a:5a:78:5a:78:d4:34:d8:ce:ce: 29:03:d8:7d:56:19:7a:15:99:8e:bd:b7:7d:86:3b: 27:43:c7:fa:9a:7d:6a:c1:70:4a:02:ea:e6:ab:c9: 6c:9d:04:a9:b9:a9:24:41:87:f3:d7:08:81:35:0e: f6:a9:b5:c0:ab:fd:3c:78:7b:12:40:6e:94:dc:58: 5b:3c:6a:ed:e8:57:e1:da:9e:1c:7e:7a:14:fb:48: 1c:65:57:aa:82:05:b1:be:2e:ac:a8:7c:cf:15:8c: 21:cb:a0:d4:21:bb:10:4d:eb:97:a3:fd:4a:53:df: 07:b9:ae:17:e8:52:0d:f4:f6:a7:e3:c9:08:67:95: 5c:25:e5:fd:ca:81:62:50:b9:e8:b9:c2:75:de:58: 96:b4:12:e9:28:c8:fe:10:de:ab:58:44:9f:18:e7: d5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:66:5E:1E:C8:13:52:B3:42:CC:37:D2:77:ED:55:C5:B8:F5:8A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eda38b15-0356-3b5d-ac01-a7ed16d162e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:fb:e8:e9:84:f2:ad:a1:3c:12:f7:8b:7e:4f:eb:89:23:b6: 53:55:2a:00:5f:00:5c:d1:b6:d7:18:44:08:be:1f:c2:4c:64: b1:f2:d3:1d:b7:6c:a4:e4:fc:2f:3c:80:50:9e:f7:98:b7:14: c9:cf:2c:a4:d0:6b:2b:6a:9a:ad:c5:d6:63:19:86:3c:86:85: f8:6d:61:d7:4d:8c:4c:5c:f3:38:d7:18:ea:78:56:c3:c2:6c: e3:35:85:40:c7:ba:c4:b4:90:76:b2:f0:0b:94:36:f0:62:35: 0c:b0:58:65:2f:c6:c0:27:81:18:8e:0e:3e:44:2f:e6:a8:a5: b7:ac:d2:a1:e5:d2:73:1e:45:19:63:5f:a3:de:7e:29:1f:30: 90:fd:8c:60:a0:51:5e:c2:f1:32:65:c2:3a:04:12:6b:8f:4b: 93:86:47:d9:b2:af:e7:1f:dd:42:af:07:6e:be:c0:63:32:de: 34:98:dc:87:98:22:29:a9:18:a0:4b:f3:cc:27:05:fb:8e:b2: a6:ec:c1:75:17:41:98:f3:6f:4a:15:69:e8:54:5c:28:97:71: 8e:2a:51:d7:11:7c:c3:aa:75:7c:72:d6:e5:75:4c:12:49:15: da:01:25:d3:f2:27:80:c8:f6:08:64:03:92:6e:8a:48:cf:32: 4f:e0:36:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB07KAP9YUqlDuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YzM1ZjU4NDgtNjFmZi00NWRlLWE4OTktZGViZjVmNWU3NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i9p30JLktQNqO+q5AdAb40SosDlI5UWmp9W htqXnOVtOfc04z3xEffhVuzRai3W2K5CH5mCqyMQM8+cmXe88wPa6+eFWJAEJl5K 0jbgrXoiNwmNQ6Io30ulgHkZ72paeFp41DTYzs4pA9h9Vhl6FZmOvbd9hjsnQ8f6 mn1qwXBKAurmq8lsnQSpuakkQYfz1wiBNQ72qbXAq/08eHsSQG6U3FhbPGrt6Ffh 2p4cfnoU+0gcZVeqggWxvi6sqHzPFYwhy6DUIbsQTeuXo/1KU98Hua4X6FIN9Pan 48kIZ5VcJeX9yoFiULnoucJ13liWtBLpKMj+EN6rWESfGOfVNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5mXh7IE1KzQsw30nftVcW49YqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWRhMzhiMTUtMDM1Ni0z YjVkLWFjMDEtYTdlZDE2ZDE2MmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9IjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA376OmE8q2hPBL3i35P64kjtlNVKgBfAFzRttcYRAi+H8JMZLHy0x23 bKTk/C88gFCe95i3FMnPLKTQaytqmq3F1mMZhjyGhfhtYddNjExc8zjXGOp4VsPC bOM1hUDHusS0kHay8AuUNvBiNQywWGUvxsAngRiODj5EL+aopbes0qHl0nMeRRlj X6PefikfMJD9jGCgUV7C8TJlwjoEEmuPS5OGR9myr+cf3UKvB26+wGMy3jSY3IeY IimpGKBL88wnBfuOsqbswXUXQZjzb0oVaehUXCiXcY4qUdcRfMOqdXxy1uV1TBJJ FdoBJdPyJ4DI9ghkA5JuikjPMk/gNlA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:53:23 2025 by rpki-client