$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2c2ec605-2cab-32e2-9843-5d3cbc57793c.roa File: 2c2ec605-2cab-32e2-9843-5d3cbc57793c.roa (raw, json) Hash identifier: XB6Embna1TLJMrOdU/GQhOWiEEDuzDbpzDxDgEDmlHc= Subject key identifier: CA:5F:ED:DD:BA:CD:7D:A9:01:A1:13:55:C6:63:48:B9:6C:B1:8D:33 Certificate issuer: /CN=2e703bc9-a07e-4d78-84a0-d4d15f1f42ad Certificate serial: 010D0C9F4328584B742751031AD4413B434A3700 Authority key identifier: CE:AA:D9:C4:CC:68:54:5E:D8:92:D2:26:6C:46:1E:63:23:11:2A:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2c2ec605-2cab-32e2-9843-5d3cbc57793c.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 376 IP address blocks: 206.123.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:51:03:1a:d4:41:3b:43:4a:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e703bc9-a07e-4d78-84a0-d4d15f1f42ad Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=b3dab337-354b-4bb1-ac5c-6801ccdc9b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:b7:b8:f5:23:a7:6f:1c:84:2f:5b:df:80: 9d:4c:6c:92:c3:bb:1f:10:cd:e6:ac:8c:a2:0a:ce: 3e:77:f5:e1:c7:ed:38:cd:17:5f:1c:8a:38:50:bd: b7:40:62:7d:33:da:85:84:cc:04:ab:a9:62:83:bd: 1b:11:56:1d:7e:b2:68:45:0a:0e:2d:32:66:c5:f8: 7f:03:f0:b5:54:56:9f:94:67:0a:5d:0f:82:7c:ac: 15:dc:30:f4:71:70:e5:8a:07:58:57:71:7a:46:bd: 75:1f:34:c7:1d:36:75:9e:3e:34:68:37:58:48:a1: 11:71:06:8f:98:c1:14:52:3d:de:c3:ce:7b:03:70: 7a:72:40:4c:71:a8:54:33:62:7b:7e:71:2f:2c:db: af:c7:c3:c9:c3:c0:95:d1:ef:63:fc:5b:96:31:45: d1:13:db:92:29:f0:e6:37:e3:95:51:76:38:2d:58: 82:f7:f8:ac:e4:73:80:31:86:49:44:db:2e:b7:82: 78:6a:36:f4:d5:a9:d8:e2:a6:a4:a5:05:a9:b9:b6: cf:2a:77:10:de:a1:36:3f:90:37:b9:d0:8d:7e:88: f1:27:e4:29:76:57:8e:35:f4:36:7d:15:0d:d5:95: e7:10:35:f2:27:02:c9:64:f7:35:48:18:ed:0f:2c: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5F:ED:DD:BA:CD:7D:A9:01:A1:13:55:C6:63:48:B9:6C:B1:8D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2c2ec605-2cab-32e2-9843-5d3cbc57793c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.crl X509v3 Authority Key Identifier: keyid:CE:AA:D9:C4:CC:68:54:5E:D8:92:D2:26:6C:46:1E:63:23:11:2A:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e703bc9-a07e-4d78-84a0-d4d15f1f42ad.cer sbgp-ipAddrBlock: critical IPv4: 206.123.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:89:24:68:b8:a0:27:d0:5c:87:39:cd:b7:91:09:c2:e3:66: ae:77:27:95:fd:59:db:90:5b:4e:d8:2e:17:6f:a8:2c:e7:f1: d5:d2:20:fd:36:25:58:23:3d:ab:0f:01:9f:eb:5c:f5:ce:0c: 48:3f:41:e4:42:80:30:37:9a:84:28:ef:0c:14:de:50:f2:4b: 8a:e7:3c:7e:80:1c:5d:8b:be:a6:b5:36:17:ef:7c:db:53:69: 3a:41:af:d7:97:73:2d:e4:3b:cb:14:02:34:af:79:3f:b8:d6: e6:75:9a:9a:0e:38:66:7c:a3:56:6b:9d:2a:58:72:9b:81:11: e7:8a:45:1b:f8:99:2a:f8:3d:b8:1f:dc:39:04:e9:3f:bf:03: 67:d3:41:aa:10:0a:63:43:3b:e1:42:0d:f0:52:9a:98:23:31: 30:25:ba:23:b0:d4:54:72:2e:13:24:9d:1c:9b:d2:9a:56:69: 9f:bd:b3:eb:2a:72:ce:20:9a:45:10:f4:98:bc:dc:1a:fc:a3: 06:28:fd:2f:32:8c:10:60:86:ad:e5:5f:a8:8c:5a:4f:7a:52: 52:f2:4f:14:80:37:39:1c:7d:ab:34:71:31:e4:9b:0a:5a:4c: b0:ea:34:7a:01:83:29:f9:46:eb:c0:a0:d0:9d:02:0e:ba:ee: e3:6f:0a:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J1EDGtRBO0NKNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU3MDNiYzktYTA3ZS00ZDc4LTg0YTAtZDRkMTVmMWY0 MmFkMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk YjNkYWIzMzctMzU0Yi00YmIxLWFjNWMtNjgwMWNjZGM5YjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvi3uPUjp28chC9b34CdTGySw7sfEM3mrIyi Cs4+d/Xhx+04zRdfHIo4UL23QGJ9M9qFhMwEq6lig70bEVYdfrJoRQoOLTJmxfh/ A/C1VFaflGcKXQ+CfKwV3DD0cXDligdYV3F6Rr11HzTHHTZ1nj40aDdYSKERcQaP mMEUUj3ew857A3B6ckBMcahUM2J7fnEvLNuvx8PJw8CV0e9j/FuWMUXRE9uSKfDm N+OVUXY4LViC9/is5HOAMYZJRNsut4J4ajb01anY4qakpQWpubbPKncQ3qE2P5A3 udCNfojxJ+QpdleONfQ2fRUN1ZXnEDXyJwLJZPc1SBjtDyzKPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpf7d26zX2pAaETVcZjSLlssY0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTcw M2JjOS1hMDdlLTRkNzgtODRhMC1kNGQxNWYxZjQyYWQvMmMyZWM2MDUtMmNhYi0z MmUyLTk4NDMtNWQzY2JjNTc3OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU3MDNiYzktYTA3ZS00ZDc4LTg0 YTAtZDRkMTVmMWY0MmFkLzJlNzAzYmM5LWEwN2UtNGQ3OC04NGEwLWQ0ZDE1ZjFm NDJhZC5jcmwwHwYDVR0jBBgwFoAUzqrZxMxoVF7YktImbEYeYyMRKnEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTcwM2JjOS1hMDdlLTRkNzgtODRhMC1kNGQx NWYxZjQyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaJJGi4oCfQXIc5zbeRCcLjZq53J5X9WduQW07YLhdvqCzn8dXSIP02 JVgjPasPAZ/rXPXODEg/QeRCgDA3moQo7wwU3lDyS4rnPH6AHF2Lvqa1NhfvfNtT aTpBr9eXcy3kO8sUAjSveT+41uZ1mpoOOGZ8o1ZrnSpYcpuBEeeKRRv4mSr4Pbgf 3DkE6T+/A2fTQaoQCmNDO+FCDfBSmpgjMTAluiOw1FRyLhMknRyb0ppWaZ+9s+sq cs4gmkUQ9Ji83Br8owYo/S8yjBBghq3lX6iMWk96UlLyTxSANzkcfas0cTHkmwpa TLDqNHoBgyn5RuvAoNCdAg667uNvCt4= -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:35 2025 by rpki-client