$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb15ea05-471c-3028-bb25-13e25dd228f2.roa File: bb15ea05-471c-3028-bb25-13e25dd228f2.roa (raw, json) Hash identifier: vLnBuziOvDeD8aP4oVkFCdcBXJuuPLPb5hFti4HnXxU= Subject key identifier: CB:BB:B0:61:10:43:78:7F:1D:A1:A3:F2:F5:A1:08:8E:F6:1F:C6:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9A1E6C4D986E641886248 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb15ea05-471c-3028-bb25-13e25dd228f2.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 24.60.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:a1:e6:c4:d9:86:e6:41:88:62:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fb0d9e0c-f16d-4976-a2c1-cd50eca49ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:49:b2:db:3c:6d:77:86:ef:7f:e2:70:89: 0e:9d:50:b6:4d:1d:dd:43:35:a6:87:b8:e0:ef:5b: 18:62:5a:84:fa:b4:e2:3b:d6:87:10:f0:49:89:2d: 3f:08:6f:49:91:e7:b7:d4:40:39:5c:24:48:33:51: 97:51:79:77:98:2e:6e:36:6f:7f:6b:50:bd:3c:4f: 02:5c:3e:52:2e:ad:6e:37:20:1d:71:f9:99:c7:73: a6:fb:f1:1f:35:aa:fd:04:32:3a:8c:b3:11:2d:9f: 99:47:b5:9c:59:74:46:02:f7:95:62:da:52:75:e1: 06:3c:d5:fa:9b:f9:d2:2a:71:f9:16:61:0a:f1:30: b7:e6:38:58:c9:ab:ee:a0:13:58:87:76:d6:85:33: 44:80:5c:bf:77:e3:7d:45:47:7f:e1:86:b0:8d:60: 9b:91:2b:0a:db:b8:45:0d:59:14:b0:b8:66:a0:0d: ea:5f:7a:f2:f5:83:c4:71:3f:f1:8b:ef:a3:37:e6: 05:64:8f:fc:e8:44:ff:81:90:78:88:e9:df:6b:f0: 7f:e5:62:94:b2:cc:47:a1:b5:8c:5b:03:21:49:05: 48:45:0c:19:e5:99:78:6c:e9:a6:eb:2f:be:e9:b6: 1b:3b:40:51:d1:0d:b3:19:0f:02:e0:f6:e0:7a:8b: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BB:B0:61:10:43:78:7F:1D:A1:A3:F2:F5:A1:08:8E:F6:1F:C6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb15ea05-471c-3028-bb25-13e25dd228f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.60.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:de:5f:99:1a:36:42:16:d2:68:58:ea:1d:54:0a:b9:de:e5: 8a:9c:6e:f4:12:79:a8:c9:a1:07:01:72:3b:8a:ac:bb:82:d3: 95:13:64:5e:62:82:a0:eb:9a:b4:46:e1:80:8a:b1:ae:42:d3: 3b:32:86:23:08:54:54:06:8b:8c:34:2d:8d:62:89:f7:fd:1b: c7:31:39:7d:79:d3:af:51:a8:7d:13:66:10:87:33:be:3a:9f: 24:2e:1d:71:93:03:45:8b:ff:49:2d:ed:b2:f7:f2:ad:43:64: e3:74:79:44:ac:c9:21:0c:79:de:d6:00:41:41:23:11:ff:8e: 3f:d9:ea:08:49:40:4b:ba:f1:bd:c6:7e:7d:23:dc:31:39:97: 3d:7b:a5:73:c3:6f:d4:24:c7:48:fd:0e:05:2e:46:0e:eb:5c: ef:99:a9:38:2c:e7:96:6a:97:84:e2:9b:c7:29:2e:27:bb:86: 38:73:48:9d:21:05:44:69:04:10:92:09:3e:27:df:41:44:ec: b6:d3:5f:87:7b:94:11:61:c1:39:8c:f0:ea:50:bd:1f:1c:67: 03:11:de:d4:28:b2:83:44:38:7b:83:08:7d:ee:4c:10:69:c8: 23:c5:f7:e3:39:c1:54:04:88:34:a7:4c:cf:a2:95:de:f3:c7: 5b:5c:a5:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqaHmxNmG5kGIYkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmIwZDllMGMtZjE2ZC00OTc2LWEyYzEtY2Q1MGVjYTQ5YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqVJsts8bXeG73/icIkOnVC2TR3dQzWmh7jg 71sYYlqE+rTiO9aHEPBJiS0/CG9Jkee31EA5XCRIM1GXUXl3mC5uNm9/a1C9PE8C XD5SLq1uNyAdcfmZx3Om+/EfNar9BDI6jLMRLZ+ZR7WcWXRGAveVYtpSdeEGPNX6 m/nSKnH5FmEK8TC35jhYyavuoBNYh3bWhTNEgFy/d+N9RUd/4YawjWCbkSsK27hF DVkUsLhmoA3qX3ry9YPEcT/xi++jN+YFZI/86ET/gZB4iOnfa/B/5WKUssxHobWM WwMhSQVIRQwZ5Zl4bOmm6y++6bYbO0BR0Q2zGQ8C4PbgeossbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu7sGEQQ3h/HaGj8vWhCI72H8ZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmIxNWVhMDUtNDcxYy0z MDI4LWJiMjUtMTNlMjVkZDIyOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGDz2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFveX5kaNkIW0mhY6h1UCrne5YqcbvQSeajJoQcBcjuKrLuC05UTZF5i gqDrmrRG4YCKsa5C0zsyhiMIVFQGi4w0LY1iiff9G8cxOX15069RqH0TZhCHM746 nyQuHXGTA0WL/0kt7bL38q1DZON0eUSsySEMed7WAEFBIxH/jj/Z6ghJQEu68b3G fn0j3DE5lz17pXPDb9Qkx0j9DgUuRg7rXO+ZqTgs55Zql4Tim8cpLie7hjhzSJ0h BURpBBCSCT4n30FE7LbTX4d7lBFhwTmM8OpQvR8cZwMR3tQosoNEOHuDCH3uTBBp yCPF9+M5wVQEiDSnTM+ild7zx1tcpS8= -----END CERTIFICATE-----Generated at Wed Oct 22 00:44:56 2025 by rpki-client