$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a94c3198-dfe2-38ea-b522-4d5836d8f0f3.roa File: a94c3198-dfe2-38ea-b522-4d5836d8f0f3.roa (raw, json) Hash identifier: u0+xfl5/jQJAYsuGj1HytizBzXJgGdCioNVxb7GoW8Y= Subject key identifier: 85:8C:9B:7D:A7:41:5B:20:66:F5:A7:6C:C3:E5:F5:EF:3F:40:FC:CD Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584B99D78D017B5BA52044725110 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a94c3198-dfe2-38ea-b522-4d5836d8f0f3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 399728 IP address blocks: 23.181.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8d:01:7b:5b:a5:20:44:72:51:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=da7434b4-38ae-400e-b7c3-6f62c44918c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:76:47:4f:0e:0d:47:d8:a6:36:cc:e8:49: 5d:c5:6d:23:1b:86:d6:7f:90:e8:ae:cb:3d:3b:b7: 2d:06:34:79:07:c4:4d:35:e6:3f:21:2f:8f:04:2a: ac:d2:19:55:f9:8e:a6:e3:ba:82:95:30:cb:6c:a9: 0c:42:5c:a5:b5:66:61:3f:07:51:d2:48:ec:f3:35: 2b:30:ec:f9:65:aa:62:7f:47:8c:7c:ec:5c:ab:b8: 18:e0:ad:a4:cb:6a:e9:b6:51:1c:eb:79:02:ba:23: 03:85:4f:79:2b:48:e5:b4:2d:1a:97:05:8b:f6:0a: bc:a8:18:d8:68:80:5e:37:54:61:0b:1d:09:87:51: 2b:39:e4:3d:57:c1:1e:36:20:6c:51:ea:d9:f0:ae: 49:ca:5f:fc:32:d1:b9:9c:9b:78:05:06:92:7f:12: f3:0e:8a:f0:3e:14:7a:58:96:4b:22:3c:7e:6a:28: 7b:6c:c3:09:05:9f:44:1c:d8:1c:95:e1:a1:5b:db: 4d:a9:3b:7d:a2:0e:0e:bd:59:76:a9:f5:dc:c6:bc: 64:c9:64:8c:0b:4a:11:29:69:ef:06:d3:87:50:64: ac:12:6e:b3:c1:0a:58:4a:59:20:96:5b:bb:51:14: 33:0d:ec:87:73:f1:58:9d:3b:0a:f5:c6:bf:84:60: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8C:9B:7D:A7:41:5B:20:66:F5:A7:6C:C3:E5:F5:EF:3F:40:FC:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a94c3198-dfe2-38ea-b522-4d5836d8f0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv4: 23.181.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c2:fa:22:0a:f9:d8:a1:5c:39:d8:ea:eb:7e:37:ba:b3:16: 05:52:6b:ba:92:29:89:92:0e:c7:88:8a:e5:8f:36:50:0b:66: 9e:e1:1f:02:0d:40:e8:a0:7b:8e:b2:8b:29:77:42:a5:cf:f6: 44:1e:16:d9:77:f1:41:ef:2c:ae:90:37:79:2b:61:91:e1:fe: d7:fe:97:db:ab:0c:7c:9b:a3:d3:c9:93:57:39:44:d7:fe:ee: 11:9a:5d:c4:94:cb:e2:75:31:57:5c:11:7d:15:6e:c9:2e:59: 6a:7e:5e:58:5c:d1:ca:bb:aa:4a:71:f9:07:34:f1:66:41:1d: 49:39:1d:85:0b:cf:d5:b9:8a:9e:ad:d2:5b:f5:cb:51:c4:de: d4:63:7f:b6:17:81:5a:6d:f0:96:80:f8:87:15:a5:cf:98:e5: 96:e1:f8:a3:09:ee:2a:5c:32:63:de:2c:6e:e6:be:81:f5:9c: 83:b8:aa:53:72:c9:fc:bd:e4:93:4f:0b:75:08:4e:44:b7:e8: b9:85:27:9f:7f:88:b8:97:59:3e:4d:2b:1e:d6:38:1b:cf:f9: bc:78:a2:55:43:34:22:13:1b:51:f3:5f:8f:c4:6c:32:ee:58: d3:90:fa:14:f7:25:f5:c8:c4:8a:51:cb:ab:ef:8b:eb:92:22: a1:47:42:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ140Be1ulIERyURAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZGE3NDM0YjQtMzhhZS00MDBlLWI3YzMtNmY2MmM0NDkxOGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKB2R08ODUfYpjbM6EldxW0jG4bWf5Dorss9 O7ctBjR5B8RNNeY/IS+PBCqs0hlV+Y6m47qClTDLbKkMQlyltWZhPwdR0kjs8zUr MOz5Zapif0eMfOxcq7gY4K2ky2rptlEc63kCuiMDhU95K0jltC0alwWL9gq8qBjY aIBeN1RhCx0Jh1ErOeQ9V8EeNiBsUerZ8K5Jyl/8MtG5nJt4BQaSfxLzDorwPhR6 WJZLIjx+aih7bMMJBZ9EHNgcleGhW9tNqTt9og4OvVl2qfXcxrxkyWSMC0oRKWnv BtOHUGSsEm6zwQpYSlkgllu7URQzDeyHc/FYnTsK9ca/hGDuDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWMm32nQVsgZvWnbMPl9e8/QPzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvYTk0YzMxOTgtZGZlMi0z OGVhLWI1MjItNGQ1ODM2ZDhmMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7C+iIK+dihXDnY6ut+N7qzFgVSa7qSKYmSDseIiuWPNlALZp7hHwIN QOige46yiyl3QqXP9kQeFtl38UHvLK6QN3krYZHh/tf+l9urDHybo9PJk1c5RNf+ 7hGaXcSUy+J1MVdcEX0VbskuWWp+Xlhc0cq7qkpx+Qc08WZBHUk5HYULz9W5ip6t 0lv1y1HE3tRjf7YXgVpt8JaA+IcVpc+Y5Zbh+KMJ7ipcMmPeLG7mvoH1nIO4qlNy yfy95JNPC3UITkS36LmFJ59/iLiXWT5NKx7WOBvP+bx4olVDNCITG1HzX4/EbDLu WNOQ+hT3JfXIxIpRy6vvi+uSIqFHQuY= -----END CERTIFICATE-----Generated at Wed Oct 29 11:07:18 2025 by rpki-client