$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5020f86-b6c7-3075-b2a5-326812e63983.roa File: e5020f86-b6c7-3075-b2a5-326812e63983.roa (raw, json) Hash identifier: nYdrN5Rl4XJ8wY78Ozyfh7hMfp9cRzfVY6IrnTL5w4M= Subject key identifier: 5F:F2:5D:77:35:BD:EA:CA:22:21:72:21:94:DB:FB:30:64:C9:ED:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B72C1F156DFBFB416C5D6D280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5020f86-b6c7-3075-b2a5-326812e63983.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 9498 IP address blocks: 23.215.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:f1:56:df:bf:b4:16:c5:d6:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=dff02e28-9583-4294-a1e0-d1253541c876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:98:90:6a:99:55:d3:3f:ca:91:81:99:25: 39:a0:07:52:8e:60:da:4f:9e:2a:51:af:af:3a:ad: 97:c9:df:cf:f4:fa:c5:b7:60:c4:80:f0:67:ee:b9: 92:9b:45:4a:ba:ff:1d:7f:38:0a:27:40:52:43:51: cd:ad:16:a1:d9:61:01:4a:02:90:79:e5:fe:b6:5b: 9c:a8:8c:bd:99:63:b8:a7:8d:fe:39:62:43:04:ff: 1c:ca:e6:7b:12:f3:c5:68:f7:e4:d7:af:d9:b3:ee: 2f:1b:d3:1b:8b:95:eb:93:e6:af:4d:7d:3e:47:3e: be:97:a8:8a:1d:a7:62:e1:1a:bb:57:3e:d4:fe:37: 30:52:c7:b0:f5:36:91:82:9b:32:3b:18:78:a5:dc: 52:1e:f9:86:38:32:2d:01:57:b1:98:77:49:e8:2b: ed:10:d6:90:89:af:e2:ac:fc:c7:7d:28:ba:c7:42: a7:77:93:10:41:3e:74:37:15:0d:ce:48:19:ad:b0: 88:d9:94:af:de:ea:52:26:6d:f6:5a:ce:5e:86:6e: 27:54:b8:21:e9:7c:b6:df:99:ec:d2:6a:84:8a:d3: 29:8c:d3:81:71:4c:55:cc:8f:fc:19:f4:62:f8:60: ee:40:45:e0:b1:01:a2:4c:a9:db:af:5b:03:73:2c: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:5D:77:35:BD:EA:CA:22:21:72:21:94:DB:FB:30:64:C9:ED:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5020f86-b6c7-3075-b2a5-326812e63983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ca:24:f0:69:d0:4c:91:08:bd:1d:29:06:4a:35:0f:8e:9b: 69:1f:ec:12:be:d2:ab:0a:22:c4:ee:bf:1d:49:0c:3a:f1:8d: cb:2c:eb:7d:9f:ed:6e:de:ec:66:89:46:57:3c:9f:3e:04:b7: 26:76:43:83:6e:63:61:8c:c2:1f:1f:4f:a0:10:86:12:ff:d4: 58:80:53:3b:af:f7:66:46:ff:37:a1:78:03:d6:97:9f:0f:85: 99:65:85:21:61:0b:9a:33:b1:fb:c3:9f:3c:9b:c8:c2:4d:74: 1b:ff:d5:18:31:93:8b:82:c0:ff:f4:55:65:27:54:42:e7:ee: bc:34:b6:b7:97:87:7e:d3:3c:19:8e:db:a6:0c:b8:71:d5:8e: d6:92:42:2b:98:44:35:1b:05:7b:cd:2c:c4:ea:41:1d:1b:f6: 6c:ed:a9:94:13:1d:ac:7c:eb:d9:f8:d5:14:3c:b2:11:0e:26: 01:9f:2b:04:0f:9b:41:4c:7b:12:2b:f7:3f:41:b0:37:f8:8d: 67:fc:7c:f3:63:64:91:1d:12:1f:42:3a:f1:9b:95:48:ea:32: ee:0a:e8:51:02:14:af:81:ba:51:46:29:b0:41:10:cf:e7:a8: 1e:1c:e6:e3:21:84:ca:c4:85:49:a4:d8:88:41:93:02:95:89: b6:60:25:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywfFW37+0FsXW0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk ZGZmMDJlMjgtOTU4My00Mjk0LWExZTAtZDEyNTM1NDFjODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHaYkGqZVdM/ypGBmSU5oAdSjmDaT54qUa+v Oq2Xyd/P9PrFt2DEgPBn7rmSm0VKuv8dfzgKJ0BSQ1HNrRah2WEBSgKQeeX+tluc qIy9mWO4p43+OWJDBP8cyuZ7EvPFaPfk16/Zs+4vG9Mbi5Xrk+avTX0+Rz6+l6iK Hadi4Rq7Vz7U/jcwUsew9TaRgpsyOxh4pdxSHvmGODItAVexmHdJ6CvtENaQia/i rPzHfSi6x0Knd5MQQT50NxUNzkgZrbCI2ZSv3upSJm32Ws5ehm4nVLgh6Xy235ns 0mqEitMpjNOBcUxVzI/8GfRi+GDuQEXgsQGiTKnbr1sDcyzKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/yXXc1verKIiFyIZTb+zBkye2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUwMjBmODYtYjZjNy0z MDc1LWIyYTUtMzI2ODEyZTYzOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9c8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrKJPBp0EyRCL0dKQZKNQ+Om2kf7BK+0qsKIsTuvx1JDDrxjcss632f 7W7e7GaJRlc8nz4EtyZ2Q4NuY2GMwh8fT6AQhhL/1FiAUzuv92ZG/zeheAPWl58P hZllhSFhC5ozsfvDnzybyMJNdBv/1Rgxk4uCwP/0VWUnVELn7rw0treXh37TPBmO 26YMuHHVjtaSQiuYRDUbBXvNLMTqQR0b9mztqZQTHax869n41RQ8shEOJgGfKwQP m0FMexIr9z9BsDf4jWf8fPNjZJEdEh9COvGblUjqMu4K6FECFK+BulFGKbBBEM/n qB4c5uMhhMrEhUmk2IhBkwKVibZgJWs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:38:32 2025 by rpki-client