$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88d59cad-b1d2-39b4-8fa8-744452e38546.roa File: 88d59cad-b1d2-39b4-8fa8-744452e38546.roa (raw, json) Hash identifier: Z0Zfq0aGYgJ5nphpQkuCuPKrzYk0CD9QD1VTBm9Q0+Y= Subject key identifier: AE:87:B9:34:2A:C9:EC:28:9C:E0:CE:B3:B5:40:EF:45:EE:6C:BC:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8AA05B7346DA09F95C20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88d59cad-b1d2-39b4-8fa8-744452e38546.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.196.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:8a:a0:5b:73:46:da:09:f9:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=3d5ba093-16a7-4c78-8137-694f5857492e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:26:69:f7:f1:40:7d:0a:12:e0:5e:a4:6e: eb:96:c0:ab:60:9d:9d:d6:0c:c0:31:e7:f1:da:82: ed:0a:e6:c9:8e:c6:13:07:15:10:cd:3c:d9:42:43: d4:be:2d:b2:15:99:b4:79:0a:88:25:66:db:72:50: 60:3e:42:74:4e:88:7d:cc:ad:1e:01:04:13:65:a7: 24:a6:3d:2a:ad:15:95:31:dd:eb:24:ee:16:57:60: 3d:84:6f:a7:72:5f:a7:5c:ca:b2:27:c4:5b:8b:97: 5c:01:22:ee:ca:f5:95:f2:4a:84:f0:61:41:33:52: f4:13:ec:06:1b:49:86:fc:f3:0d:cb:ee:4f:bd:e6: 3b:e5:05:0e:29:d3:83:cb:8a:61:a4:4f:e5:71:02: ef:2a:34:f6:e7:4d:59:9c:19:33:eb:02:30:2d:8f: cb:53:72:bf:8a:94:f7:2a:b3:02:63:87:bb:20:24: 68:8b:84:fe:9d:45:d1:a4:80:5b:cf:a4:a5:7c:b8: 14:d5:a8:4d:81:4c:52:82:6e:d0:ba:e6:30:90:3b: 66:c6:8e:7f:9b:4c:36:85:e8:1e:52:99:4e:81:1e: 28:67:37:4a:c6:b5:a0:db:a7:6b:58:d8:3c:24:79: 1b:4f:35:5b:37:a0:46:32:fd:a6:68:ad:b2:d0:78: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:87:B9:34:2A:C9:EC:28:9C:E0:CE:B3:B5:40:EF:45:EE:6C:BC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88d59cad-b1d2-39b4-8fa8-744452e38546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5b:41:83:95:70:40:fe:fd:b8:b8:2a:4e:f2:7f:3b:36:f2: bc:0a:6b:31:5e:ff:e9:e8:11:fb:23:33:68:8d:d6:93:29:4d: de:5c:19:60:20:93:59:dc:77:67:ad:e9:46:b6:0b:02:6a:d1: 33:2d:96:93:e3:f6:23:a7:4e:21:63:f2:be:06:69:4f:19:0a: 45:5a:53:27:2e:fe:b7:49:16:a8:5b:c8:8d:3a:8a:43:d7:b9: e8:24:55:b5:97:b3:67:71:f0:45:8a:ee:71:c8:40:78:87:58: 9b:19:6b:35:b8:35:6e:dc:d4:b0:e1:36:80:90:85:35:ce:ff: b7:d0:27:f6:9a:04:d9:cc:f3:36:c1:cf:fc:40:80:ce:61:0a: 4d:59:1f:d5:f9:5c:f7:3d:cf:bc:a7:27:67:d0:04:67:45:18: 9a:03:c2:f0:f8:7e:4f:22:cf:a0:7f:23:80:e8:72:03:6f:f5: ba:06:b2:6b:cf:55:a9:4e:7d:6d:af:b3:63:44:ac:0b:d2:69: e4:43:0b:79:e9:1d:14:7b:5b:79:e0:6b:9e:4e:30:60:42:7f: 2c:52:d3:5c:93:0a:19:d7:a2:2f:6d:09:7c:81:48:fa:4c:96: 4c:7c:40:eb:64:b1:75:c7:4f:21:6f:9f:4b:1d:4c:f1:69:87: 7d:b9:5b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIqgW3NG2gn5XCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk M2Q1YmEwOTMtMTZhNy00Yzc4LTgxMzctNjk0ZjU4NTc0OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNsmaffxQH0KEuBepG7rlsCrYJ2d1gzAMefx 2oLtCubJjsYTBxUQzTzZQkPUvi2yFZm0eQqIJWbbclBgPkJ0Toh9zK0eAQQTZack pj0qrRWVMd3rJO4WV2A9hG+ncl+nXMqyJ8Rbi5dcASLuyvWV8kqE8GFBM1L0E+wG G0mG/PMNy+5PveY75QUOKdODy4phpE/lcQLvKjT2501ZnBkz6wIwLY/LU3K/ipT3 KrMCY4e7ICRoi4T+nUXRpIBbz6SlfLgU1ahNgUxSgm7QuuYwkDtmxo5/m0w2hege UplOgR4oZzdKxrWg26drWNg8JHkbTzVbN6BGMv2maK2y0Hh/iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6HuTQqyewonODOs7VA70XubLzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhkNTljYWQtYjFkMi0z OWI0LThmYTgtNzQ0NDUyZTM4NTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8QPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtbQYOVcED+/bi4Kk7yfzs28rwKazFe/+noEfsjM2iN1pMpTd5cGWAg k1ncd2et6Ua2CwJq0TMtlpPj9iOnTiFj8r4GaU8ZCkVaUycu/rdJFqhbyI06ikPX uegkVbWXs2dx8EWK7nHIQHiHWJsZazW4NW7c1LDhNoCQhTXO/7fQJ/aaBNnM8zbB z/xAgM5hCk1ZH9X5XPc9z7ynJ2fQBGdFGJoDwvD4fk8iz6B/I4DocgNv9boGsmvP ValOfW2vs2NErAvSaeRDC3npHRR7W3nga55OMGBCfyxS01yTChnXoi9tCXyBSPpM lkx8QOtksXXHTyFvn0sdTPFph325W0o= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:40 2025 by rpki-client