$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa File: 60a1544b-8598-310f-8888-5a763d4944f7.roa (raw, json) Hash identifier: Ot7ani+QB/K+D21byiSb2gowScKQZDak4szhexKAViY= Subject key identifier: 5B:44:73:CC:C5:80:9A:1F:C3:71:E8:5B:C6:F1:D2:D8:D3:0C:C0:15 Certificate issuer: /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Certificate serial: 010D0C9F4328584B9E079D55298D4E1D7D1503C0 Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 15019 IP address blocks: 208.91.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9d:55:29:8d:4e:1d:7d:15:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=fd757ed7-9c55-4f15-a56c-7414e7a96247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:c5:25:fd:2a:20:12:97:29:26:98:78:cf: 1d:e8:20:76:b5:06:ec:28:e2:80:b8:5b:03:4a:f5: 9c:cc:5c:7b:74:4c:5f:fd:58:08:37:16:bc:31:1a: 61:53:15:4c:e4:80:aa:0f:11:ec:4b:a4:a3:98:c2: a6:a5:77:d1:79:0b:6f:09:e0:62:40:1f:6c:4a:4a: e3:a5:7f:26:1f:0f:07:cf:39:fd:0c:ca:88:b4:e2: 76:58:21:54:23:87:29:dd:8c:d5:bc:1d:c3:58:f5: 81:e2:d9:c8:60:c6:ce:44:c3:ce:d4:d2:58:b8:5e: 2a:10:36:d2:c0:b6:b2:e3:f4:90:6e:e8:77:23:b9: fe:4a:57:8d:e4:89:00:98:b2:40:51:3d:d2:c9:2c: 44:92:f4:5d:f5:9a:fe:7e:78:ea:6e:26:4e:d7:83: dc:a7:2f:59:db:42:d2:60:9d:18:7f:e5:46:f8:5a: ad:66:44:74:88:c4:ea:42:dd:89:07:4a:87:19:4a: b9:21:ba:42:10:84:01:e4:3b:48:0e:e2:94:d7:0f: 10:7d:43:96:9e:99:e1:ee:9a:ea:3f:ff:33:f6:1c: 90:2f:3d:39:cb:47:fb:39:ec:2e:f2:21:df:cb:95: b9:a5:90:9e:46:28:5c:de:a9:9b:ec:07:c7:5a:d9: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:44:73:CC:C5:80:9A:1F:C3:71:E8:5B:C6:F1:D2:D8:D3:0C:C0:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/60a1544b-8598-310f-8888-5a763d4944f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl X509v3 Authority Key Identifier: keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer sbgp-ipAddrBlock: critical IPv4: 208.91.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3b:dd:e9:61:b5:1e:9d:3d:0f:b9:9b:e6:29:7c:21:99:26: 38:d3:b0:10:e5:f9:a3:64:e5:84:da:3a:f2:9c:25:3b:6c:b8: fd:1d:6a:b9:41:2d:3c:19:d6:bc:0f:8e:c6:71:44:91:c9:da: e8:76:26:27:11:49:1a:1f:48:26:05:cd:76:83:af:13:6c:49: d7:74:89:88:1f:7c:b7:72:c1:92:94:e2:85:51:7f:81:46:44: 66:ac:fe:43:95:6a:b8:f6:4a:73:6d:a7:33:cc:93:cf:06:67: 5a:14:5d:19:f9:8d:27:00:f9:71:f4:44:50:b7:8c:dc:63:09: 6c:47:a1:27:e8:d5:30:e7:b6:13:91:7d:e3:4c:0c:67:66:b2: da:eb:c5:a0:f6:5c:ed:bf:f2:d7:6b:fa:1c:2a:29:e1:0c:54: ea:98:4b:bf:f2:7d:62:ce:88:70:55:88:97:f2:4c:74:d8:68: 6d:e9:7e:97:e2:c7:c8:07:b9:0c:6a:c5:d5:71:ec:a8:fb:66: 7b:ed:4f:c1:e3:15:4e:2f:49:31:13:6e:d4:65:3f:f5:6d:aa: a3:b2:c7:2a:89:68:03:98:55:36:28:d1:ae:35:1f:41:46:eb: f9:c1:f0:ed:36:e7:b1:c1:fb:6d:7c:66:4e:4e:c6:f1:c7:30: e7:84:c2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB51VKY1OHX0VA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTVmOGQ0NDMtZTgyMy00YjM3LTkyMTctM2M1YWY4ZGNj OGZhMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmQ3NTdlZDctOWM1NS00ZjE1LWE1NmMtNzQxNGU3YTk2MjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskvFJf0qIBKXKSaYeM8d6CB2tQbsKOKAuFsD SvWczFx7dExf/VgINxa8MRphUxVM5ICqDxHsS6SjmMKmpXfReQtvCeBiQB9sSkrj pX8mHw8Hzzn9DMqItOJ2WCFUI4cp3YzVvB3DWPWB4tnIYMbORMPO1NJYuF4qEDbS wLay4/SQbuh3I7n+SleN5IkAmLJAUT3SySxEkvRd9Zr+fnjqbiZO14Pcpy9Z20LS YJ0Yf+VG+FqtZkR0iMTqQt2JB0qHGUq5IbpCEIQB5DtIDuKU1w8QfUOWnpnh7prq P/8z9hyQLz05y0f7Oewu8iHfy5W5pZCeRihc3qmb7AfHWtlzEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtEc8zFgJofw3HoW8bx0tjTDMAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4 ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVhZjhkY2M4ZmEvNjBhMTU0NGItODU5OC0z MTBmLTg4ODgtNWE3NjNkNDk0NGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTVmOGQ0NDMtZTgyMy00YjM3LTky MTctM2M1YWY4ZGNjOGZhLzE1ZjhkNDQzLWU4MjMtNGIzNy05MjE3LTNjNWFmOGRj YzhmYS5jcmwwHwYDVR0jBBgwFoAU9YWLjmQM9/Nlg4QdP7rAQAXC1tswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNWY4ZDQ0My1lODIzLTRiMzctOTIxNy0zYzVh ZjhkY2M4ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJo73elhtR6dPQ+5m+YpfCGZJjjTsBDl+aNk5YTaOvKcJTtsuP0darlB LTwZ1rwPjsZxRJHJ2uh2JicRSRofSCYFzXaDrxNsSdd0iYgffLdywZKU4oVRf4FG RGas/kOVarj2SnNtpzPMk88GZ1oUXRn5jScA+XH0RFC3jNxjCWxHoSfo1TDnthOR feNMDGdmstrrxaD2XO2/8tdr+hwqKeEMVOqYS7/yfWLOiHBViJfyTHTYaG3pfpfi x8gHuQxqxdVx7Kj7ZnvtT8HjFU4vSTETbtRlP/VtqqOyxyqJaAOYVTYo0a41H0FG 6/nB8O0257HB+218Zk5OxvHHMOeEwqk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:12:32 2025 by rpki-client