$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba8f644-a8c8-348e-b76e-244e666542f2.roa File: 3ba8f644-a8c8-348e-b76e-244e666542f2.roa (raw, json) Hash identifier: i/QOl9wHnolQQLUwC+lWYOROKVoMG1WSrNOSB8s42lU= Subject key identifier: BA:37:F7:78:69:D4:2C:D4:72:9A:CE:83:9C:49:D9:5F:23:38:9C:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD201B8328C1BEBC09F2580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba8f644-a8c8-348e-b76e-244e666542f2.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 24319 IP address blocks: 23.215.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:01:b8:32:8c:1b:eb:c0:9f:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=aa5a2f25-691f-4c91-ae73-de2b6b102a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:20:54:f2:66:01:ab:e4:2b:71:6b:9d:e1: 5f:2c:9d:b7:4c:9b:0b:a5:85:90:6a:79:8b:81:d2: 40:cb:77:09:d1:48:ad:3d:dc:23:20:fa:1a:09:cc: 3b:38:fa:14:5c:36:ec:f8:c3:f4:dc:4b:9b:74:f0: 85:26:b0:45:33:34:89:05:9e:02:77:89:52:1a:ca: d6:4c:a3:6b:94:71:b9:d5:bd:c1:4f:54:c9:65:5d: fc:44:b3:e4:a5:9c:3d:02:67:b7:3d:c2:8b:ca:23: 88:ed:42:e0:97:22:2d:91:fb:07:88:04:97:a8:42: 57:86:7a:3f:aa:27:4b:88:83:17:cb:1c:36:50:71: 01:71:60:e1:a2:62:8d:7c:67:68:71:73:71:01:db: c7:a1:ab:e6:cd:2f:99:42:ff:10:33:75:eb:bc:3a: a2:3e:e0:df:c6:e1:55:59:68:b7:11:cf:91:f0:76: ad:d3:59:0e:a1:0e:32:80:97:53:ab:fe:8f:d9:c5: f8:e6:d8:6a:70:04:48:87:6a:fd:be:ea:b0:78:6c: cc:bb:98:61:da:ff:be:60:53:b2:cf:88:0e:ec:22: 4b:c9:ae:ab:97:8e:cc:f0:57:f7:d3:8c:88:88:61: d5:b1:d4:cb:e7:fe:72:cc:c4:5e:45:1d:cf:e2:e0: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:37:F7:78:69:D4:2C:D4:72:9A:CE:83:9C:49:D9:5F:23:38:9C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba8f644-a8c8-348e-b76e-244e666542f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:36:9d:2f:97:87:a0:3b:94:a3:26:c8:b5:19:cd:e5:15:b2: 53:80:bd:15:b9:3d:68:69:d5:75:40:35:15:26:f4:a7:3d:5b: 5e:e2:9e:d5:1a:b5:f0:45:a3:03:45:5b:cc:2c:9e:6e:60:d7: 94:e2:54:98:aa:2c:49:fe:85:f1:b7:29:d0:63:2e:5f:47:1f: f9:53:e9:60:86:12:72:85:c7:8e:e0:00:03:58:5f:7e:ad:d1: 3e:b7:bb:cb:12:f0:24:0f:ed:53:76:e0:96:c1:89:e1:2b:eb: 5f:71:ce:db:e7:7c:6c:f6:85:43:2a:79:8b:59:ba:55:d9:b8: 2e:86:15:52:58:9c:8c:64:3f:86:c1:82:f6:28:fb:bc:77:65: 4d:ba:9b:73:98:8a:57:b2:2b:d9:a2:87:a1:91:ae:45:aa:08: 2a:1d:9b:74:20:36:2d:0a:9f:3d:c6:2b:20:78:bd:d2:72:6a: ba:29:31:41:fd:14:9b:72:7c:44:86:f2:4d:92:04:cf:30:04: ed:45:37:5d:f1:1a:5c:40:01:be:d8:9e:32:79:d0:90:44:b0: e0:d3:09:43:cf:05:86:cc:21:05:6b:ed:5c:6d:1d:b1:62:d4: 25:e2:89:26:fa:26:de:2c:52:c9:cd:70:b1:9b:45:b3:37:60: 87:c2:ec:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gG4Mowb68CfJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YWE1YTJmMjUtNjkxZi00YzkxLWFlNzMtZGUyYjZiMTAyYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy4gVPJmAavkK3FrneFfLJ23TJsLpYWQanmL gdJAy3cJ0UitPdwjIPoaCcw7OPoUXDbs+MP03EubdPCFJrBFMzSJBZ4Cd4lSGsrW TKNrlHG51b3BT1TJZV38RLPkpZw9Ame3PcKLyiOI7ULglyItkfsHiASXqEJXhno/ qidLiIMXyxw2UHEBcWDhomKNfGdocXNxAdvHoavmzS+ZQv8QM3XrvDqiPuDfxuFV WWi3Ec+R8Hat01kOoQ4ygJdTq/6P2cX45thqcARIh2r9vuqweGzMu5hh2v++YFOy z4gO7CJLya6rl47M8Ff304yIiGHVsdTL5/5yzMReRR3P4uDcVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLo393hp1CzUcprOg5xJ2V8jOJwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JhOGY2NDQtYThjOC0z NDhlLWI3NmUtMjQ0ZTY2NjU0MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9cgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs2nS+Xh6A7lKMmyLUZzeUVslOAvRW5PWhp1XVANRUm9Kc9W17intUa tfBFowNFW8wsnm5g15TiVJiqLEn+hfG3KdBjLl9HH/lT6WCGEnKFx47gAANYX36t 0T63u8sS8CQP7VN24JbBieEr619xztvnfGz2hUMqeYtZulXZuC6GFVJYnIxkP4bB gvYo+7x3ZU26m3OYileyK9mih6GRrkWqCCodm3QgNi0Knz3GKyB4vdJyaropMUH9 FJtyfESG8k2SBM8wBO1FN13xGlxAAb7YnjJ50JBEsODTCUPPBYbMIQVr7VxtHbFi 1CXiiSb6Jt4sUsnNcLGbRbM3YIfC7GY= -----END CERTIFICATE-----Generated at Tue Oct 21 02:21:46 2025 by rpki-client