$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/605374b5-7d17-3aa5-a05c-9560ac6f8293.roa File: 605374b5-7d17-3aa5-a05c-9560ac6f8293.roa (raw, json) Hash identifier: Hr2wFpaozSADifrhBEv0DUOAx5ty5lpnoYmR7A4L2sE= Subject key identifier: CF:26:C3:A6:04:80:14:D7:76:E0:3D:2E:C1:F1:A6:A3:B0:14:D4:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8F3DB259D87407C0B8F84740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/605374b5-7d17-3aa5-a05c-9560ac6f8293.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 12222 IP address blocks: 23.15.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b2:59:d8:74:07:c0:b8:f8:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=3dc14c2e-32d9-4f6d-b489-85b7f8ee0049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:40:45:6e:e4:06:55:c6:bb:88:0c:c2:93: a8:4b:94:8b:2a:3b:b0:9c:2b:0c:67:76:96:0c:6b: 3f:2c:c8:55:fc:e8:70:4c:cd:95:e1:25:63:3b:9e: a6:e7:18:70:5d:0d:7f:15:1e:b4:81:ba:09:58:3c: e3:55:49:09:9a:b7:76:10:84:a2:be:fa:42:53:a6: 7e:27:e9:28:d9:46:24:e5:3b:9f:dc:7e:c6:e0:25: d2:fa:4c:ad:34:27:82:8f:d4:23:bb:10:be:97:f7: ef:67:22:9d:8f:fd:9e:d5:8c:f6:74:d4:cd:4a:64: f6:e6:46:20:a7:c8:c8:f9:25:0b:0f:03:f2:fe:76: 45:46:98:8a:b6:35:26:d5:5f:2d:88:d3:21:b5:01: 8c:0a:ef:ef:c4:03:d2:e7:5a:d3:0a:bd:86:c3:1d: ba:78:d9:bc:d9:d2:ed:e3:1f:9c:ad:23:5e:8d:20: 62:8a:9a:0c:49:d7:ac:b2:ad:63:b0:8d:ca:8b:4f: 7e:f9:67:da:05:5c:9e:c9:55:3f:37:73:cf:81:02: 61:01:33:89:df:d6:72:f0:ab:f8:c9:f3:59:64:d5: 7a:ef:14:25:ea:90:48:a5:02:62:da:94:34:19:eb: b5:f1:c9:00:91:2a:6f:b9:d7:ff:fe:c5:e9:46:6b: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:26:C3:A6:04:80:14:D7:76:E0:3D:2E:C1:F1:A6:A3:B0:14:D4:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/605374b5-7d17-3aa5-a05c-9560ac6f8293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e7:0e:aa:db:83:f8:28:de:4a:6c:21:3a:81:b2:87:e8:33: 12:73:64:18:c6:d1:6f:b7:c6:36:cd:fa:1a:38:1c:bd:49:42: 41:83:95:1e:90:58:63:50:3e:82:f9:ed:df:10:ec:13:02:0b: 9c:a5:a9:b2:fd:92:d1:67:8a:a4:84:8d:17:d6:80:05:72:5b: cd:99:04:40:e8:b2:57:00:09:10:a1:b6:67:65:68:f0:f5:68: ad:71:5e:86:13:c5:9e:f3:c5:99:ca:40:db:a6:03:7a:35:aa: 78:6c:58:44:95:ac:7e:fa:dd:9e:b4:f4:10:d2:49:ed:8e:40: 85:17:2e:8e:5b:b8:59:b1:5f:c9:55:75:df:c4:15:08:87:8d: 65:ef:7c:c7:1d:26:03:a1:cf:56:6a:e3:db:cc:3f:da:e1:bc: 57:71:f0:2f:a8:60:7e:2a:0d:13:5b:8c:95:61:82:02:b7:b3: 96:f8:e4:df:1f:64:ac:70:89:27:29:aa:8e:af:b7:5e:a6:18: 0a:7f:d9:83:1b:73:38:11:8b:d9:2a:bb:17:ef:a4:ae:b1:23: 70:de:13:0b:fc:42:1a:76:1c:99:95:b1:f6:eb:59:b3:3e:da: 70:c3:b4:87:46:fb:82:94:72:d3:8a:3d:6a:be:e5:c0:68:0d: b5:d8:5a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbJZ2HQHwLj4R0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk M2RjMTRjMmUtMzJkOS00ZjZkLWI0ODktODViN2Y4ZWUwMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHdARW7kBlXGu4gMwpOoS5SLKjuwnCsMZ3aW DGs/LMhV/OhwTM2V4SVjO56m5xhwXQ1/FR60gboJWDzjVUkJmrd2EISivvpCU6Z+ J+ko2UYk5Tuf3H7G4CXS+kytNCeCj9QjuxC+l/fvZyKdj/2e1Yz2dNTNSmT25kYg p8jI+SULDwPy/nZFRpiKtjUm1V8tiNMhtQGMCu/vxAPS51rTCr2Gwx26eNm82dLt 4x+crSNejSBiipoMSdessq1jsI3Ki09++WfaBVyeyVU/N3PPgQJhATOJ39Zy8Kv4 yfNZZNV67xQl6pBIpQJi2pQ0Geu18ckAkSpvudf//sXpRmtqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8mw6YEgBTXduA9LsHxpqOwFNQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjA1Mzc0YjUtN2QxNy0z YWE1LWEwNWMtOTU2MGFjNmY4MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw8NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvnDqrbg/go3kpsITqBsofoMxJzZBjG0W+3xjbN+ho4HL1JQkGDlR6Q WGNQPoL57d8Q7BMCC5ylqbL9ktFniqSEjRfWgAVyW82ZBEDoslcACRChtmdlaPD1 aK1xXoYTxZ7zxZnKQNumA3o1qnhsWESVrH763Z609BDSSe2OQIUXLo5buFmxX8lV dd/EFQiHjWXvfMcdJgOhz1Zq49vMP9rhvFdx8C+oYH4qDRNbjJVhggK3s5b45N8f ZKxwiScpqo6vt16mGAp/2YMbczgRi9kquxfvpK6xI3DeEwv8Qhp2HJmVsfbrWbM+ 2nDDtIdG+4KUctOKPWq+5cBoDbXYWjc= -----END CERTIFICATE-----Generated at Sat Oct 24 10:53:30 2026 by rpki-client