$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa File: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (raw, json) Hash identifier: xoDQyth6P/aB/Z3wd+1YM0ytQTiDwRPt6ymEfDBMncw= Subject key identifier: ED:01:27:2C:F3:44:40:FB:02:F2:26:1B:C1:64:BD:6F:5E:C7:4B:76 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584B8BE2336CAAE5C5D9E9077280 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 46733 IP address blocks: 23.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:33:6c:aa:e5:c5:d9:e9:07:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=cba7568f-6c16-4794-b1a8-6da1aa28657a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:ae:8a:c7:f0:ef:eb:47:89:84:02:75:6b: 0c:44:90:c0:4b:a2:c7:97:d8:b7:e6:db:e8:7f:bb: 81:11:39:39:0b:02:e7:4b:89:c8:b7:aa:f3:56:40: ac:8c:d1:02:6e:77:b9:81:b8:80:8d:61:a3:80:b9: 51:22:37:87:7f:ad:7b:18:46:86:e9:9d:13:d4:f5: 58:f4:57:ac:31:49:2f:e4:b1:9d:a5:e7:57:ac:76: cc:a7:40:a6:cd:fe:ac:48:8d:ce:de:72:47:e0:85: 7f:fa:83:70:24:bf:9b:ed:05:43:4d:82:88:a1:c9: fb:9e:af:a5:a5:6f:7a:6b:80:12:83:11:bf:27:87: a8:81:c9:04:62:a2:fb:59:7b:54:27:76:4c:1e:34: 9f:b8:42:68:99:54:c4:f8:9e:38:a4:f3:f4:4a:c8: 9e:8a:fc:44:a4:1f:27:20:88:e2:67:fe:c2:ed:44: 29:4e:70:b0:ce:0d:65:78:a2:e9:be:17:cc:66:ed: 33:e4:b0:fe:43:57:24:64:61:20:ad:92:22:3e:e3: dd:94:f6:b8:de:7c:6d:1a:39:76:c2:65:fe:68:96: e9:d1:06:72:32:ac:61:b1:ff:c5:d5:75:c8:89:f5: e4:1d:ce:93:f0:af:88:f9:5b:1f:ac:f2:4e:ff:fe: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:01:27:2C:F3:44:40:FB:02:F2:26:1B:C1:64:BD:6F:5E:C7:4B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3e:92:d4:09:b3:b3:a9:28:18:15:60:e4:c0:9a:7d:9c:f7: 7a:79:49:64:bc:f8:b7:92:d8:10:08:57:c3:8a:30:c2:7c:99: fd:7c:4c:ce:98:b6:4e:40:2a:ae:3c:a0:aa:94:d5:07:8e:65: ef:6d:30:be:f8:a4:9d:ee:b2:7a:83:b4:0c:b1:bf:83:17:92: d2:ab:03:2e:a9:e1:bd:80:c2:c8:3e:b6:da:63:02:9e:71:24: da:e9:1c:16:b4:91:61:cd:85:31:fa:79:b3:b0:a7:be:3a:74: eb:53:37:e3:98:6e:8c:d4:ad:7d:3d:7c:21:70:e6:1c:d4:44: ff:00:42:f0:a5:7f:7f:55:2c:c7:74:6a:49:c8:ce:39:62:70: 3e:1f:c8:9f:00:71:d3:51:68:64:24:ac:c7:02:28:43:99:74: 55:a6:5d:9f:ff:6a:a5:93:21:08:56:2e:83:5f:d5:2d:e3:71: 6a:db:da:8b:9e:c6:6b:60:ef:cb:22:b6:44:48:1a:a1:5f:ac: b9:8a:32:5f:b9:66:13:25:e4:b4:a7:5a:e4:a9:e2:53:ab:ae: b8:82:49:af:18:d8:8e:5f:96:3b:1e:7e:e7:c5:9e:ab:91:83: 2a:62:98:65:7a:34:2b:99:39:6a:d7:d7:6e:13:cd:a0:d1:56: 31:91:2d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jNsquXF2ekHcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk Y2JhNzU2OGYtNmMxNi00Nzk0LWIxYTgtNmRhMWFhMjg2NTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgySuisfw7+tHiYQCdWsMRJDAS6LHl9i35tvo f7uBETk5CwLnS4nIt6rzVkCsjNECbne5gbiAjWGjgLlRIjeHf617GEaG6Z0T1PVY 9FesMUkv5LGdpedXrHbMp0Cmzf6sSI3O3nJH4IV/+oNwJL+b7QVDTYKIocn7nq+l pW96a4ASgxG/J4eogckEYqL7WXtUJ3ZMHjSfuEJomVTE+J44pPP0SsieivxEpB8n IIjiZ/7C7UQpTnCwzg1leKLpvhfMZu0z5LD+Q1ckZGEgrZIiPuPdlPa43nxtGjl2 wmX+aJbp0QZyMqxhsf/F1XXIifXkHc6T8K+I+VsfrPJO//4fzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0BJyzzRED7AvImG8FkvW9ex0t2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvMDdmNmI1ZDAtZTgwYS0z NDRiLWEyNTItMjEyOWM2NGQ5NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA+ktQJs7OpKBgVYOTAmn2c93p5SWS8+LeS2BAIV8OKMMJ8mf18TM6Y tk5AKq48oKqU1QeOZe9tML74pJ3usnqDtAyxv4MXktKrAy6p4b2Awsg+ttpjAp5x JNrpHBa0kWHNhTH6ebOwp746dOtTN+OYbozUrX09fCFw5hzURP8AQvClf39VLMd0 aknIzjlicD4fyJ8AcdNRaGQkrMcCKEOZdFWmXZ//aqWTIQhWLoNf1S3jcWrb2oue xmtg78sitkRIGqFfrLmKMl+5ZhMl5LSnWuSp4lOrrriCSa8Y2I5fljsefufFnquR gypimGV6NCuZOWrX124TzaDRVjGRLbc= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:54 2025 by rpki-client