$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a0cec23c-2db8-3a55-95b7-80be6e490124.roa File: a0cec23c-2db8-3a55-95b7-80be6e490124.roa (raw, json) Hash identifier: kLljr0+l5ySgHE4+ly+LJqd8Atl7eUwcConTtU8lumk= Subject key identifier: 22:35:69:11:C2:4B:6F:DC:F3:B6:DC:FC:9E:DC:15:D0:9E:5B:6A:EE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BA5023B2143E017387501B500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a0cec23c-2db8-3a55-95b7-80be6e490124.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 266044 IP address blocks: 200.15.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3b:21:43:e0:17:38:75:01:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=4a202625-77eb-493a-8052-de4505562e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e0:45:83:63:14:b0:93:57:c3:55:98:54:43: 8c:20:c9:3c:08:18:84:0c:ed:37:3e:00:87:21:8d: c0:2d:4e:f0:16:40:9b:e0:eb:fc:c7:9d:2a:c1:e4: 60:8b:cb:b4:f9:77:c1:3f:cf:25:fe:17:36:20:78: 6a:20:b4:f6:85:fe:da:6e:18:98:63:cd:c9:2a:78: ec:fb:87:ba:67:d0:6a:ee:d5:1c:73:24:62:59:1c: ff:31:6c:95:62:7d:e4:3e:09:e9:bd:61:1e:8c:15: 22:97:95:61:dc:5a:44:7f:86:b5:ec:13:13:91:4a: e7:71:0a:47:a0:3a:89:78:1f:31:3a:a6:a3:0a:d4: 78:a8:8f:e5:0b:81:58:e3:a4:62:5f:47:74:fb:8a: ce:e7:e5:96:f1:92:cc:da:36:a4:6e:f5:5f:35:f9: 5e:af:81:8d:55:40:8c:24:66:30:99:eb:8c:75:94: f2:47:89:e1:7d:0f:20:2a:9f:ca:e1:2a:d0:43:49: 3a:fb:e3:08:24:71:a7:b9:53:96:ee:0a:f8:ad:bd: a0:95:b6:2a:e3:3c:2f:7c:f6:ee:a2:8c:15:b9:07: c7:7e:e4:2b:87:ec:4e:ac:43:b1:e5:c3:f8:5f:fd: 3f:1e:93:0d:fe:14:fb:f5:00:03:f9:b4:5a:e3:63: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:69:11:C2:4B:6F:DC:F3:B6:DC:FC:9E:DC:15:D0:9E:5B:6A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a0cec23c-2db8-3a55-95b7-80be6e490124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 200.15.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d6:5d:68:25:3f:62:2b:18:57:53:4e:3f:6a:b7:52:0c:8d: 35:ec:43:60:9c:a1:04:9f:4c:5f:3f:03:12:20:3f:c0:90:34: 07:5b:a9:a1:b8:a8:c2:15:2d:08:f5:80:11:ef:ec:28:f7:54: 15:c2:5e:18:ab:dc:92:ef:4f:39:41:08:a5:0a:2a:ec:0f:55: 28:4d:22:26:c8:25:84:16:d0:86:49:e4:6d:73:54:8e:36:d9: 38:dc:f2:a3:72:ff:17:09:0c:64:44:4c:62:95:34:1f:51:a8: 29:ae:7a:fb:db:c2:37:04:f3:7f:b6:b6:e0:c8:b0:3d:f2:0e: 6e:fa:8f:db:fd:b1:67:a0:c8:ff:12:aa:1f:38:e5:eb:8f:71: 66:91:dd:f4:7c:c5:d6:6e:7f:b9:c4:b5:e8:47:e6:34:17:40: 02:d9:c0:79:06:67:2a:d4:48:aa:00:df:5c:f9:3d:b0:36:1d: 68:c7:43:07:58:d1:2c:4e:08:a4:45:c1:e5:e8:1d:13:06:84: a9:32:5c:0f:ea:e4:2b:90:37:01:72:52:d4:4b:d2:37:05:7c: 08:09:41:5c:62:08:4a:ce:dd:4a:4b:fa:d2:9b:5f:0a:fe:af: 08:0a:3f:5e:26:5b:80:0b:a8:e7:05:e0:d4:57:42:c2:74:66: a1:b9:a4:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjshQ+AXOHUBtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk NGEyMDI2MjUtNzdlYi00OTNhLTgwNTItZGU0NTA1NTYyZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguBFg2MUsJNXw1WYVEOMIMk8CBiEDO03PgCH IY3ALU7wFkCb4Ov8x50qweRgi8u0+XfBP88l/hc2IHhqILT2hf7abhiYY83JKnjs +4e6Z9Bq7tUccyRiWRz/MWyVYn3kPgnpvWEejBUil5Vh3FpEf4a17BMTkUrncQpH oDqJeB8xOqajCtR4qI/lC4FY46RiX0d0+4rO5+WW8ZLM2jakbvVfNfler4GNVUCM JGYwmeuMdZTyR4nhfQ8gKp/K4SrQQ0k6++MIJHGnuVOW7gr4rb2glbYq4zwvfPbu oowVuQfHfuQrh+xOrEOx5cP4X/0/HpMN/hT79QAD+bRa42NSEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI1aRHCS2/c87bc/J7cFdCeW2ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTBjZWMyM2MtMmRiOC0z YTU1LTk1YjctODBiZTZlNDkwMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyA8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzWXWglP2IrGFdTTj9qt1IMjTXsQ2CcoQSfTF8/AxIgP8CQNAdbqaG4 qMIVLQj1gBHv7Cj3VBXCXhir3JLvTzlBCKUKKuwPVShNIibIJYQW0IZJ5G1zVI42 2Tjc8qNy/xcJDGRETGKVNB9RqCmuevvbwjcE83+2tuDIsD3yDm76j9v9sWegyP8S qh845euPcWaR3fR8xdZuf7nEtehH5jQXQALZwHkGZyrUSKoA31z5PbA2HWjHQwdY 0SxOCKRFweXoHRMGhKkyXA/q5CuQNwFyUtRL0jcFfAgJQVxiCErO3UpL+tKbXwr+ rwgKP14mW4ALqOcF4NRXQsJ0ZqG5pBU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:14:38 2025 by rpki-client