$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58935b39-72d5-3e9f-ad53-94ea9e3194a4.roa File: 58935b39-72d5-3e9f-ad53-94ea9e3194a4.roa (raw, json) Hash identifier: 5dqDc1TkvQOnH1pCTcxKTw0hddZ+5F00i2CaH8ID1uo= Subject key identifier: 5E:AE:40:78:44:76:F6:5A:A7:48:6C:07:83:DC:27:0C:4D:D0:E2:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BAEC7C9B75BF9654D24BF65E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58935b39-72d5-3e9f-ad53-94ea9e3194a4.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.215.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c9:b7:5b:f9:65:4d:24:bf:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=aafcb420-aef9-44ba-be8c-0f1a0c7c87fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:93:a6:f9:6b:19:ce:bd:c2:4b:9f:d3:f0:b8: d2:f1:f3:de:6f:9b:c3:25:83:e6:cc:fd:04:94:4e: fd:d0:00:ee:87:23:3a:7d:63:78:2a:8c:0a:0c:d3: 4e:7c:cc:be:28:54:3a:69:45:70:dd:f7:df:f0:eb: a1:f2:41:d1:a2:a1:8a:44:ab:86:99:57:c8:72:5f: d6:d5:54:35:3a:0c:11:ba:19:17:04:d5:a1:c3:e1: b2:4d:80:b6:55:4e:f4:c9:0b:00:21:c1:1e:97:49: be:f1:58:f4:53:c9:33:f7:6f:cb:3f:c2:11:5b:ba: 33:56:e7:f1:22:9c:9f:e4:ed:43:b2:30:58:58:1b: 94:f0:89:ca:1f:92:d8:01:f0:26:7d:69:30:3e:ca: c4:6a:e7:2b:2f:f3:48:c9:50:a0:92:20:03:0b:e7: 81:c4:88:d1:d1:4d:56:4f:c2:49:96:63:e8:7f:ef: 1f:84:2f:55:cb:80:9c:56:d4:6b:35:20:03:b6:18: 35:49:62:3e:e2:3c:4f:aa:cb:01:3a:0d:83:b6:73: c3:b9:96:16:30:66:c2:c5:e2:0b:33:88:70:7b:7d: 2d:99:9e:de:1e:cf:c4:1c:93:22:10:0c:09:b6:fb: ee:53:78:5c:03:00:ed:e8:78:9a:71:6f:76:48:fa: a2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AE:40:78:44:76:F6:5A:A7:48:6C:07:83:DC:27:0C:4D:D0:E2:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58935b39-72d5-3e9f-ad53-94ea9e3194a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e6:28:0f:2c:f7:38:b6:55:bf:21:31:bd:bb:3e:ce:44:e8: 53:ae:67:a2:2d:a1:1a:e3:8e:9e:26:38:24:8b:6b:69:31:7c: 93:0a:07:56:c3:47:ab:4d:fe:cd:77:6e:14:31:5b:87:ea:6e: 9a:9c:4c:3d:f6:5e:68:2a:88:53:4e:79:76:01:ed:d9:da:ad: 9a:09:a0:39:03:a6:f8:32:bd:b6:50:ad:16:c2:a0:60:3b:12: e4:31:68:df:ec:62:9e:cf:08:d2:1e:55:b6:1c:5d:dd:45:ba: f0:a4:35:47:a1:92:19:1a:f2:60:08:e0:ac:ea:ef:c8:8c:c4: 00:53:48:60:60:b2:6d:02:3c:ff:6f:83:ad:fd:b8:1a:d1:d0: 51:9c:af:f3:6f:c2:cf:57:d3:7e:77:d8:85:fb:fa:e5:d0:24: c2:90:11:79:3e:9a:13:ac:84:9a:90:47:31:7d:1b:34:9d:b4: c2:7f:3f:2f:c8:d2:38:ef:8d:5c:37:08:d2:d1:a3:30:17:8e: 43:e7:91:5f:6d:f2:15:4a:b5:99:82:78:06:32:20:2f:2d:4d: 4b:86:0d:c4:b7:c6:e6:2d:b0:52:46:ea:4a:8f:96:63:ca:36: 4f:12:c1:b8:48:73:39:af:0c:bf:b9:01:16:96:60:f1:1a:a8: f1:4e:c6:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8m3W/llTSS/ZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YWFmY2I0MjAtYWVmOS00NGJhLWJlOGMtMGYxYTBjN2M4N2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpOm+WsZzr3CS5/T8LjS8fPeb5vDJYPmzP0E lE790ADuhyM6fWN4KowKDNNOfMy+KFQ6aUVw3fff8Ouh8kHRoqGKRKuGmVfIcl/W 1VQ1OgwRuhkXBNWhw+GyTYC2VU70yQsAIcEel0m+8Vj0U8kz92/LP8IRW7ozVufx Ipyf5O1DsjBYWBuU8InKH5LYAfAmfWkwPsrEaucrL/NIyVCgkiADC+eBxIjR0U1W T8JJlmPof+8fhC9Vy4CcVtRrNSADthg1SWI+4jxPqssBOg2DtnPDuZYWMGbCxeIL M4hwe30tmZ7eHs/EHJMiEAwJtvvuU3hcAwDt6HiacW92SPqifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6uQHhEdvZap0hsB4PcJwxN0OItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTg5MzViMzktNzJkNS0z ZTlmLWFkNTMtOTRlYTllMzE5NGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9d0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvmKA8s9zi2Vb8hMb27Ps5E6FOuZ6ItoRrjjp4mOCSLa2kxfJMKB1bD R6tN/s13bhQxW4fqbpqcTD32XmgqiFNOeXYB7dnarZoJoDkDpvgyvbZQrRbCoGA7 EuQxaN/sYp7PCNIeVbYcXd1FuvCkNUehkhka8mAI4Kzq78iMxABTSGBgsm0CPP9v g639uBrR0FGcr/Nvws9X03532IX7+uXQJMKQEXk+mhOshJqQRzF9GzSdtMJ/Py/I 0jjvjVw3CNLRozAXjkPnkV9t8hVKtZmCeAYyIC8tTUuGDcS3xuYtsFJG6kqPlmPK Nk8SwbhIczmvDL+5ARaWYPEaqPFOxrw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:26 2025 by rpki-client