$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa File: 44924e0a-deef-3257-a202-f20fac287530.roa (raw, json) Hash identifier: HIMycHfDlNZ7cpqqfSgveDaANIGTioyDMUHZvpxDl7Q= Subject key identifier: E9:F9:16:BF:A8:A1:39:F8:F8:4E:12:7C:1E:21:E6:33:BD:18:40:05 Certificate issuer: /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Certificate serial: 010D0C9F4328584B9E0794A09EE88E3247740900 Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 208.91.36.0/24 maxlen: 24 208.91.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:94:a0:9e:e8:8e:32:47:74:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=df5e08d9-ca53-4e6d-bbf8-5260ecb91ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:58:34:9f:3b:9c:f5:bb:6a:f1:aa:fb:d5: 04:0f:d7:05:a7:d0:2d:4e:f4:0f:d3:5b:38:e0:1f: 4c:8d:24:d7:92:56:73:51:cb:64:f7:03:19:ec:31: b5:b6:5b:07:2f:f2:fb:33:32:fc:99:3f:65:b7:13: a3:b8:29:22:4a:cc:88:7c:e6:ca:71:8c:6f:4b:5f: 70:8a:f8:2e:29:14:c4:78:36:9d:b0:17:5e:38:b5: e1:c3:91:c6:b6:d6:d8:0c:81:84:07:52:99:0e:7f: 57:25:d4:a6:fb:5a:56:e2:db:35:f0:e5:5b:ef:23: bf:ad:85:82:f3:0a:50:82:40:0c:f5:be:5a:95:43: 95:b1:51:08:ae:de:b8:17:35:9b:b1:41:09:7b:94: 05:a2:6b:a3:47:12:3b:1d:71:10:e2:94:a9:cc:f3: 87:19:ec:fc:8f:f1:c9:fd:5a:a5:e1:79:3f:5f:e8: 06:db:ac:47:1d:c3:bb:3f:e6:df:4e:a4:fa:12:90: 88:24:ab:76:b5:6a:43:79:fc:b1:c6:2a:13:0d:98: 99:60:b0:09:70:df:74:34:7b:bf:cf:b1:e1:1e:a2: 52:6d:06:2c:14:1d:d9:e4:d5:eb:d6:8f:e9:ee:02: 57:6d:37:84:90:3a:1f:45:53:60:53:de:90:c6:bd: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F9:16:BF:A8:A1:39:F8:F8:4E:12:7C:1E:21:E6:33:BD:18:40:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/44924e0a-deef-3257-a202-f20fac287530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl X509v3 Authority Key Identifier: keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer sbgp-ipAddrBlock: critical IPv4: 208.91.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:d8:8e:da:28:2f:63:23:f9:09:a0:da:b2:34:64:e6:d3:fa: 9a:77:67:99:2e:f0:b3:b0:8f:6a:f9:f5:fa:37:13:c5:df:cd: a6:17:83:7c:34:97:34:24:d5:1d:71:c9:2b:86:27:eb:ef:d3: 04:51:fc:dc:a5:f4:e0:3f:3a:55:f7:c9:b7:2c:1a:34:61:b2: f4:3c:39:ec:13:12:fa:03:2f:bb:e6:59:32:e5:f9:29:d9:d2: 25:98:66:24:ff:40:68:e8:d4:79:a6:22:4a:e3:2b:43:3e:d2: b3:a3:ec:84:8e:44:85:94:13:39:06:27:cc:5c:85:a7:02:9e: 5d:ac:df:ed:31:5a:75:d0:b6:6d:f1:ef:36:9b:51:41:03:90: f1:42:d3:67:00:fa:6d:ed:0b:f6:5d:05:e7:f1:dc:1f:7a:8b: f9:c4:e4:74:97:4a:69:43:c4:d9:f9:e9:dc:a8:49:92:70:bd: e7:29:89:e6:ea:56:f5:ed:09:53:c3:91:20:65:73:1f:fa:c1: f9:9e:ac:05:2a:b5:ef:39:29:fe:41:42:c2:e8:01:50:d2:b4: 2d:ae:56:f1:35:94:34:ff:2a:c0:a4:cd:ac:30:db:68:21:3d: d9:98:dd:a3:e4:a9:27:a6:55:8b:66:64:36:52:68:70:b9:b1: 4c:9f:a3:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5SgnuiOMkd0CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVmOGQ0NDMtZTgyMy00YjM3LTkyMTctM2M1YWY4ZGNj OGZhMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZGY1ZTA4ZDktY2E1My00ZTZkLWJiZjgtNTI2MGVjYjkxYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP1YNJ87nPW7avGq+9UED9cFp9AtTvQP01s4 4B9MjSTXklZzUctk9wMZ7DG1tlsHL/L7MzL8mT9ltxOjuCkiSsyIfObKcYxvS19w ivguKRTEeDadsBdeOLXhw5HGttbYDIGEB1KZDn9XJdSm+1pW4ts18OVb7yO/rYWC 8wpQgkAM9b5alUOVsVEIrt64FzWbsUEJe5QFomujRxI7HXEQ4pSpzPOHGez8j/HJ /Vql4Xk/X+gG26xHHcO7P+bfTqT6EpCIJKt2tWpDefyxxioTDZiZYLAJcN90NHu/ z7HhHqJSbQYsFB3Z5NXr1o/p7gJXbTeEkDofRVNgU96Qxr3OqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn5Fr+ooTn4+E4SfB4h5jO9GEAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4 ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVhZjhkY2M4ZmEvNDQ5MjRlMGEtZGVlZi0z MjU3LWEyMDItZjIwZmFjMjg3NTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTVmOGQ0NDMtZTgyMy00YjM3LTky MTctM2M1YWY4ZGNjOGZhLzE1ZjhkNDQzLWU4MjMtNGIzNy05MjE3LTNjNWFmOGRj YzhmYS5jcmwwHwYDVR0jBBgwFoAU9YWLjmQM9/Nlg4QdP7rAQAXC1tswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVh ZjhkY2M4ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANDYjtooL2Mj+Qmg2rI0ZObT+pp3Z5ku8LOwj2r59fo3E8XfzaYXg3w0 lzQk1R1xySuGJ+vv0wRR/Nyl9OA/OlX3ybcsGjRhsvQ8OewTEvoDL7vmWTLl+SnZ 0iWYZiT/QGjo1HmmIkrjK0M+0rOj7ISORIWUEzkGJ8xchacCnl2s3+0xWnXQtm3x 7zabUUEDkPFC02cA+m3tC/ZdBefx3B96i/nE5HSXSmlDxNn56dyoSZJwvecpiebq VvXtCVPDkSBlcx/6wfmerAUqte85Kf5BQsLoAVDStC2uVvE1lDT/KsCkzaww22gh PdmY3aPkqSemVYtmZDZSaHC5sUyfozw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:06 2025 by rpki-client