$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f80a42ea-3e2a-3945-8a51-bf519faeaf7d.roa File: f80a42ea-3e2a-3945-8a51-bf519faeaf7d.roa (raw, json) Hash identifier: q1VNsLgE5ydbqQ37ZH8QO5S5fqhnQIPjC93k8fYpaDI= Subject key identifier: 02:5C:19:A8:CA:7F:24:C4:E3:3C:06:3A:5E:12:23:B9:30:CA:E3:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3AEC3AE141B3F1E3ED234400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f80a42ea-3e2a-3945-8a51-bf519faeaf7d.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.15.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:3a:e1:41:b3:f1:e3:ed:23:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=ae9f4376-743f-468d-a1fe-be9229e070a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:24:56:06:a8:2b:a6:36:b9:e2:33:33:a8: 9a:0b:ef:64:e4:ea:cc:ef:7c:96:64:73:01:c5:67: 96:63:33:8a:97:03:0c:81:e8:30:6a:fe:5b:b9:fe: d7:df:91:63:a7:c7:ba:81:92:3e:fe:6a:78:28:d1: 63:4f:58:97:4a:fb:0e:5b:1d:e4:e4:7c:bc:1b:aa: a2:12:98:b1:2d:b1:e4:a5:95:38:6c:2f:e1:23:67: 0e:5d:ef:57:03:03:74:dd:70:c2:49:4c:aa:66:be: 0b:53:8e:96:5c:1b:00:3a:4a:d3:cc:06:ff:96:10: 12:95:16:dc:49:48:a5:96:65:9b:bb:fb:ef:21:1b: e5:df:b6:2b:fd:47:db:34:96:a2:75:05:ea:c1:3e: c2:bf:30:6a:7c:99:70:7f:9a:5d:3d:eb:57:71:d2: 99:d5:d7:23:87:6b:ca:98:8c:4f:c5:cc:5f:b8:da: 9c:61:78:3d:db:79:2e:42:3e:fc:b2:96:a1:30:9f: 74:d3:f1:6d:e9:64:84:27:53:a6:bf:2e:d3:a8:02: d3:63:d4:33:8b:f7:e3:aa:6f:6f:bf:c7:87:76:60: 51:7c:cf:19:1f:e5:5f:2f:4b:78:17:d4:10:b4:42: 33:ee:8c:df:98:3a:55:5d:30:7f:f7:b0:41:7c:e1: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5C:19:A8:CA:7F:24:C4:E3:3C:06:3A:5E:12:23:B9:30:CA:E3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f80a42ea-3e2a-3945-8a51-bf519faeaf7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9c:10:ee:5e:41:48:13:3d:87:d7:9a:fa:b2:62:29:77:f6: d1:cd:0f:b7:16:b8:99:5b:bd:eb:e7:85:01:63:d0:73:9c:6f: d2:20:62:62:19:04:52:f1:00:50:a8:af:4d:98:ba:d1:43:0f: c2:cb:f8:64:a0:41:08:4a:66:9b:32:50:d2:de:41:11:8c:c3: 4c:62:49:04:cd:b6:6b:63:8e:7f:b5:cb:9d:ec:11:50:05:68: 2d:57:ad:26:fc:6b:73:52:d8:9f:07:ec:ed:9c:ea:74:be:44: aa:c0:a1:ba:0d:25:95:94:f9:f6:05:25:cc:c7:b2:30:0b:24: e9:27:a8:ac:98:38:6c:2d:3f:06:07:8a:ba:cc:c3:00:34:96: 1f:de:15:55:39:21:4f:a1:1d:d6:c0:23:94:c2:55:cb:32:2e: 70:ee:b6:42:d7:31:4b:85:ec:6d:6b:49:8f:9e:58:8d:4f:63: d8:e7:23:9c:be:8c:d3:38:be:1b:56:0d:cb:f5:af:e3:3c:05: 35:85:9b:b3:53:56:96:9f:52:0d:db:76:b7:a9:cc:c7:c0:a2: 03:4c:b2:79:95:1c:37:60:74:c0:20:4c:68:2b:a8:4b:6d:79: 2d:1f:ee:75:4c:63:51:d8:85:74:76:37:c7:99:1f:19:3e:43: e0:a2:f5:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67DrhQbPx4+0jRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk YWU5ZjQzNzYtNzQzZi00NjhkLWExZmUtYmU5MjI5ZTA3MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggYkVgaoK6Y2ueIzM6iaC+9k5OrM73yWZHMB xWeWYzOKlwMMgegwav5buf7X35Fjp8e6gZI+/mp4KNFjT1iXSvsOWx3k5Hy8G6qi EpixLbHkpZU4bC/hI2cOXe9XAwN03XDCSUyqZr4LU46WXBsAOkrTzAb/lhASlRbc SUillmWbu/vvIRvl37Yr/UfbNJaidQXqwT7CvzBqfJlwf5pdPetXcdKZ1dcjh2vK mIxPxcxfuNqcYXg923kuQj78spahMJ900/Ft6WSEJ1Omvy7TqALTY9Qzi/fjqm9v v8eHdmBRfM8ZH+VfL0t4F9QQtEIz7ozfmDpVXTB/97BBfOFgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJcGajKfyTE4zwGOl4SI7kwyuOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjgwYTQyZWEtM2UyYS0z OTQ1LThhNTEtYmY1MTlmYWVhZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2cEO5eQUgTPYfXmvqyYil39tHND7cWuJlbvevnhQFj0HOcb9IgYmIZ BFLxAFCor02YutFDD8LL+GSgQQhKZpsyUNLeQRGMw0xiSQTNtmtjjn+1y53sEVAF aC1XrSb8a3NS2J8H7O2c6nS+RKrAoboNJZWU+fYFJczHsjALJOknqKyYOGwtPwYH irrMwwA0lh/eFVU5IU+hHdbAI5TCVcsyLnDutkLXMUuF7G1rSY+eWI1PY9jnI5y+ jNM4vhtWDcv1r+M8BTWFm7NTVpafUg3bdrepzMfAogNMsnmVHDdgdMAgTGgrqEtt eS0f7nVMY1HYhXR2N8eZHxk+Q+Ci9cY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:43 2025 by rpki-client