$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0512954d-bde6-3557-aa1a-35da98d10c53.roa File: 0512954d-bde6-3557-aa1a-35da98d10c53.roa (raw, json) Hash identifier: jjtyVN/wAvFZTYzC488VX7oSFJKEcAMjQowWa0ZAmfw= Subject key identifier: 4E:79:88:FB:FD:8B:CF:20:B6:1E:2E:80:17:18:15:D2:4A:C4:EB:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FAC2CE07D47DA2967FF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0512954d-bde6-3557-aa1a-35da98d10c53.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.215.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fa:c2:ce:07:d4:7d:a2:96:7f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=4d848e97-f4bc-4e26-bb59-daae9b1163f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:a0:e8:a4:6d:eb:3f:09:37:c6:8d:21:04: 9e:d1:59:16:dc:e4:28:82:1a:55:eb:19:65:b8:b5: be:b9:b7:79:16:22:fe:f5:7d:54:13:7f:76:7a:33: 89:08:17:01:ae:cb:d9:37:4e:be:31:97:30:1a:b6: b9:c4:29:46:85:83:d3:36:b6:fa:08:be:a6:4f:c2: b0:d8:95:eb:6e:76:8a:25:f7:39:fe:f3:e7:86:77: 31:38:df:09:96:bf:cf:98:df:4f:a4:e4:c3:e9:6f: 45:f0:32:4b:ae:0b:58:b0:c0:1e:e9:b5:e9:5d:64: a3:89:49:36:1d:e1:55:5a:18:47:40:69:e5:3a:0f: 0b:4f:d2:88:1a:d1:cb:85:1a:3d:a0:eb:04:e8:6d: ee:e6:8b:1a:23:7c:8d:2c:59:21:b6:ad:29:b1:49: 9f:8f:07:5c:1e:8e:34:42:27:3c:a6:39:07:ee:12: b2:9f:54:77:58:86:fc:e5:12:38:66:52:8f:fc:5a: 0b:ed:50:d3:e7:27:ab:86:9f:49:02:6d:f4:eb:66: 2a:7e:4c:26:bf:d9:1b:e4:a0:3b:11:05:f9:44:92: 61:69:c4:70:da:f2:f5:0b:8e:70:15:a7:47:f7:6b: 62:31:85:5f:b1:2c:88:23:5f:e3:86:31:d1:67:fc: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:79:88:FB:FD:8B:CF:20:B6:1E:2E:80:17:18:15:D2:4A:C4:EB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0512954d-bde6-3557-aa1a-35da98d10c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c7:2b:0d:9f:f2:b0:fb:92:c6:7b:43:04:c5:f2:bb:c2:66: 84:42:ec:eb:d7:9e:e1:e1:ff:fc:4c:ad:64:c0:bb:44:ba:0b: f1:cc:30:5c:c7:b9:7d:63:8e:e4:66:7b:71:9c:e8:76:00:68: b1:f4:a3:f7:8f:2c:0c:71:96:0b:7b:51:fa:79:e7:b0:eb:32: 8e:d1:8d:68:a8:ee:4d:56:7b:03:c4:58:ea:f6:1d:e7:ac:4c: 71:df:e8:63:f3:70:05:08:54:f6:c3:1e:e7:08:01:ce:ad:a9: 2c:33:95:6e:2c:98:8a:1f:e9:02:7b:f8:9d:51:bc:a6:4c:b6: 19:6f:c0:ac:90:ad:57:a8:8c:70:0b:4b:97:3d:ab:0f:e1:6a: 05:ec:a9:2f:d4:56:41:4d:1c:61:03:3a:75:25:88:ab:1f:ca: 77:56:73:6e:96:2d:b0:19:56:a2:09:fd:f4:ae:2d:7d:7e:9c: 57:80:0f:68:47:12:7c:65:ec:bd:3a:5c:e6:3e:27:1d:90:69: bb:19:7b:98:bd:9c:cc:50:94:43:3d:fc:c1:59:8f:80:63:46: 25:09:67:a0:36:f8:ca:08:19:80:7e:58:b2:5f:50:9b:c9:0d: 54:d7:cb:2c:64:79:f7:31:e2:0a:8e:fe:1e:e3:9a:3d:74:03: 8c:ac:e8:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0frCzgfUfaKWf/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NGQ4NDhlOTctZjRiYy00ZTI2LWJiNTktZGFhZTliMTE2M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Sg6KRt6z8JN8aNIQSe0VkW3OQoghpV6xll uLW+ubd5FiL+9X1UE392ejOJCBcBrsvZN06+MZcwGra5xClGhYPTNrb6CL6mT8Kw 2JXrbnaKJfc5/vPnhncxON8Jlr/PmN9PpOTD6W9F8DJLrgtYsMAe6bXpXWSjiUk2 HeFVWhhHQGnlOg8LT9KIGtHLhRo9oOsE6G3u5osaI3yNLFkhtq0psUmfjwdcHo40 Qic8pjkH7hKyn1R3WIb85RI4ZlKP/FoL7VDT5yerhp9JAm3062Yqfkwmv9kb5KA7 EQX5RJJhacRw2vL1C45wFadH92tiMYVfsSyII1/jhjHRZ/yPfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE55iPv9i88gth4ugBcYFdJKxOvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDUxMjk1NGQtYmRlNi0z NTU3LWFhMWEtMzVkYTk4ZDEwYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9eEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnHKw2f8rD7ksZ7QwTF8rvCZoRC7OvXnuHh//xMrWTAu0S6C/HMMFzH uX1jjuRme3Gc6HYAaLH0o/ePLAxxlgt7Ufp557DrMo7RjWio7k1WewPEWOr2Hees THHf6GPzcAUIVPbDHucIAc6tqSwzlW4smIof6QJ7+J1RvKZMthlvwKyQrVeojHAL S5c9qw/hagXsqS/UVkFNHGEDOnUliKsfyndWc26WLbAZVqIJ/fSuLX1+nFeAD2hH Enxl7L06XOY+Jx2QabsZe5i9nMxQlEM9/MFZj4BjRiUJZ6A2+MoIGYB+WLJfUJvJ DVTXyyxkefcx4gqO/h7jmj10A4ys6Ao= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:53 2025 by rpki-client