$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3992bbeb-50e7-319f-afa2-3249d2a8feaf.roa File: 3992bbeb-50e7-319f-afa2-3249d2a8feaf.roa (raw, json) Hash identifier: OxGqQlzevdBunPH+EJn1Qq884g7DvBX+qyAjM8YJvgo= Subject key identifier: 8B:19:E4:AC:1A:02:87:6B:A6:46:F4:6A:3C:16:32:E9:81:CC:87:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FB9A11F6DD1215FE5D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3992bbeb-50e7-319f-afa2-3249d2a8feaf.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.215.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fb:9a:11:f6:dd:12:15:fe:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=99b6de21-7891-4372-b435-9e456581fb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:eb:cf:d0:31:b1:86:73:bc:31:43:79:00:54: 84:b2:cc:43:b6:cc:00:74:e9:8e:e1:98:d0:cb:5d: 18:5e:aa:cb:e5:a5:40:08:41:c2:9b:a4:07:d8:f2: 3a:b0:14:bf:b4:19:d8:89:cc:e4:64:0c:64:5d:d3: 12:46:d5:2e:74:17:52:0c:97:4d:c9:60:a4:74:ab: cc:76:88:52:1c:65:2d:aa:11:82:a8:5a:e6:31:a3: 29:2f:b1:46:f4:dd:d9:e8:be:96:08:9a:43:39:14: c3:1d:74:97:7c:7c:0e:b5:72:4f:f7:5c:4e:e3:fa: 1c:ae:0d:ae:18:38:be:bc:7c:d9:20:79:de:d0:2a: 2b:ed:b9:16:64:9c:8a:00:5e:7c:7f:3d:13:10:28: 1b:57:37:f5:b1:bd:eb:4e:db:3c:f2:c5:d3:10:4e: 31:db:a2:22:b5:09:7f:d3:38:12:f6:4d:37:00:df: 15:c6:3c:ea:27:6a:a8:21:fb:d7:72:5d:64:15:be: e2:bb:28:bb:13:2b:21:80:c3:e4:49:d9:f2:8a:a7: 1d:d7:8e:47:54:d1:11:fa:ea:db:80:df:86:15:86: 98:2a:a6:25:dd:5f:d0:46:62:fb:5b:9e:c1:32:b1: 4a:d2:27:86:7e:7c:19:de:8a:e9:fc:2b:1a:d9:9a: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:19:E4:AC:1A:02:87:6B:A6:46:F4:6A:3C:16:32:E9:81:CC:87:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3992bbeb-50e7-319f-afa2-3249d2a8feaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2f:02:c1:39:6a:dc:18:e8:21:34:bc:37:a3:b9:ba:1e:92: 09:5e:61:91:6d:85:cd:aa:28:e2:15:89:49:40:12:42:c0:3e: 46:fe:56:ab:86:92:53:22:17:5e:f5:36:cf:c1:1e:e8:45:85: f2:4e:d6:a7:08:ab:8d:32:84:0f:47:84:e8:11:4c:19:11:c1: b4:18:e7:3f:6b:5c:dc:06:51:73:77:87:31:a5:ee:cc:67:65: b8:46:66:de:0f:98:6a:b8:e5:4a:5f:6b:45:22:f8:ef:7c:ad: 61:fe:75:a0:69:a6:76:e9:41:9e:7a:e1:eb:49:3d:8a:58:d6: 8a:57:03:d4:d5:af:72:47:27:40:e4:9b:d2:be:1c:77:8b:27: 7a:fc:d9:bd:ae:d1:73:56:f8:7d:3d:00:40:b3:ce:93:00:58: 95:76:f3:90:35:47:fb:e9:f7:30:8c:c0:bf:2e:ad:5e:78:7a: a0:64:1b:b7:49:75:51:63:19:cd:b3:f6:d6:73:b8:7c:0d:cb: 09:64:c2:c7:97:46:3e:30:0b:ba:44:7e:4a:84:ba:bc:01:9a: 9b:5e:1c:2e:03:9d:b8:af:c6:8c:63:e6:84:74:4d:1e:be:0c: b5:06:10:70:f6:66:93:d5:cc:74:e3:93:df:ff:b7:3f:4c:d0: f0:da:b1:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fuaEfbdEhX+XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OTliNmRlMjEtNzg5MS00MzcyLWI0MzUtOWU0NTY1ODFmYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhevP0DGxhnO8MUN5AFSEssxDtswAdOmO4ZjQ y10YXqrL5aVACEHCm6QH2PI6sBS/tBnYiczkZAxkXdMSRtUudBdSDJdNyWCkdKvM dohSHGUtqhGCqFrmMaMpL7FG9N3Z6L6WCJpDORTDHXSXfHwOtXJP91xO4/ocrg2u GDi+vHzZIHne0Cor7bkWZJyKAF58fz0TECgbVzf1sb3rTts88sXTEE4x26IitQl/ 0zgS9k03AN8VxjzqJ2qoIfvXcl1kFb7iuyi7EyshgMPkSdnyiqcd145HVNER+urb gN+GFYaYKqYl3V/QRmL7W57BMrFK0ieGfnwZ3orp/Csa2ZoVAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsZ5KwaAodrpkb0ajwWMumBzIc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk5MmJiZWItNTBlNy0z MTlmLWFmYTItMzI0OWQyYThmZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9fcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8vAsE5atwY6CE0vDejuboekgleYZFthc2qKOIViUlAEkLAPkb+VquG klMiF171Ns/BHuhFhfJO1qcIq40yhA9HhOgRTBkRwbQY5z9rXNwGUXN3hzGl7sxn ZbhGZt4PmGq45Upfa0Ui+O98rWH+daBppnbpQZ564etJPYpY1opXA9TVr3JHJ0Dk m9K+HHeLJ3r82b2u0XNW+H09AECzzpMAWJV285A1R/vp9zCMwL8urV54eqBkG7dJ dVFjGc2z9tZzuHwNywlkwseXRj4wC7pEfkqEurwBmpteHC4Dnbivxoxj5oR0TR6+ DLUGEHD2ZpPVzHTjk9//tz9M0PDasYk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:37:47 2025 by rpki-client