$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae47d4-af0f-3d11-bdf7-659ff2e5b7fd.roa File: 71ae47d4-af0f-3d11-bdf7-659ff2e5b7fd.roa (raw, json) Hash identifier: SVfn4ocHDqcu3n6aC/Nqp6Sz+RowAkGZeWxwPonXgvo= Subject key identifier: 9F:6B:4A:15:F3:12:CC:86:E7:B6:9B:3C:31:AC:FE:60:3C:81:02:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8F3DB24D696DC43F21BA1180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae47d4-af0f-3d11-bdf7-659ff2e5b7fd.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 12222 IP address blocks: 23.15.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b2:4d:69:6d:c4:3f:21:ba:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=3246aabe-4f0a-4c40-9020-587f171964c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:6e:20:95:d2:91:f3:ee:ea:32:5b:8f:de: c1:68:02:f5:5f:19:bd:b6:9e:6f:9e:3e:fe:2e:0d: ae:f6:89:27:5e:04:88:5e:c2:71:99:a6:21:54:a4: 79:fc:c4:4b:3f:19:86:e1:ce:f3:11:59:47:cf:7f: e9:59:2d:77:f4:de:66:4d:1a:b6:cd:a4:cb:08:27: f7:1a:87:a6:5b:d6:36:c5:22:0e:d4:57:fd:d2:ec: 40:27:07:cb:4a:ae:1e:1f:60:dc:7e:b0:5a:ee:ef: ca:15:c7:e3:c0:ae:c7:d8:b1:08:02:b5:3a:36:34: 8d:d8:88:69:a3:ca:8d:b0:77:8b:e4:5a:d7:35:89: b1:43:9c:80:fe:7d:94:56:df:78:c9:e1:38:0f:f3: bf:b3:e8:4a:d6:11:2d:d6:44:83:2d:d7:e6:74:d2: 72:45:bc:71:2d:af:c7:cd:a0:08:41:9e:b3:1a:39: ec:b3:72:c2:6d:bc:ef:09:99:c9:c3:88:2d:a2:98: 59:21:fa:8f:a7:6a:fb:7b:1e:e8:d6:96:4d:ce:f5: b2:f5:57:2c:3d:b9:c5:1b:ac:a0:96:60:82:19:06: bb:83:5c:41:5d:1e:56:de:cb:50:2b:ce:05:f1:e5: 24:73:ae:2a:c9:84:a1:bb:c8:98:73:4f:40:7e:be: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6B:4A:15:F3:12:CC:86:E7:B6:9B:3C:31:AC:FE:60:3C:81:02:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71ae47d4-af0f-3d11-bdf7-659ff2e5b7fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:00:f6:9d:e4:32:33:d5:8d:37:d0:9e:d3:46:af:e3:16:d2: b8:9c:52:b3:ab:ee:bc:f9:b4:3f:a6:a2:c1:d1:dc:03:a7:9c: 81:9d:34:b4:92:c3:6b:4c:11:73:b9:2b:cb:59:69:ec:34:57: ec:31:b2:42:07:3a:48:d5:61:72:9f:8d:db:c4:91:1f:33:b5: d4:5d:47:5d:2d:ec:d8:ce:c1:c4:e2:44:12:2e:79:90:41:1e: aa:f9:67:f6:9d:e1:17:84:6a:ee:7f:69:8e:81:d4:0e:92:bd: 87:4b:3b:85:a6:8d:24:32:c0:62:ff:77:f4:68:5c:f5:6b:24: 28:a9:8e:10:06:9d:1f:00:5d:aa:7a:3e:15:32:57:6f:e4:6c: da:2c:1d:15:38:61:dd:4e:4c:97:13:bb:ab:71:33:13:6c:8c: d8:16:bd:c9:9a:cb:8f:d3:aa:3d:40:7f:fe:12:1b:41:18:eb: 6d:57:27:20:4c:9f:7c:e4:a8:31:3a:ea:ed:de:9f:67:2f:82: 0b:a5:cc:c9:36:97:64:25:d3:e7:62:35:ad:5d:9e:9f:ae:ca: 68:80:53:83:a9:a7:96:69:4a:39:2a:76:23:ba:48:7c:63:b1: 8c:f4:65:63:63:71:50:f3:61:aa:3f:69:79:1c:75:b3:6d:29: 74:59:91:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbJNaW3EPyG6EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MzI0NmFhYmUtNGYwYS00YzQwLTkwMjAtNTg3ZjE3MTk2NGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeZuIJXSkfPu6jJbj97BaAL1Xxm9tp5vnj7+ Lg2u9oknXgSIXsJxmaYhVKR5/MRLPxmG4c7zEVlHz3/pWS139N5mTRq2zaTLCCf3 GoemW9Y2xSIO1Ff90uxAJwfLSq4eH2DcfrBa7u/KFcfjwK7H2LEIArU6NjSN2Ihp o8qNsHeL5FrXNYmxQ5yA/n2UVt94yeE4D/O/s+hK1hEt1kSDLdfmdNJyRbxxLa/H zaAIQZ6zGjnss3LCbbzvCZnJw4gtophZIfqPp2r7ex7o1pZNzvWy9VcsPbnFG6yg lmCCGQa7g1xBXR5W3stQK84F8eUkc64qyYShu8iYc09Afr5KcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9rShXzEsyG57abPDGs/mA8gQIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFhZTQ3ZDQtYWYwZi0z ZDExLWJkZjctNjU5ZmYyZTViN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMA9p3kMjPVjTfQntNGr+MW0ricUrOr7rz5tD+mosHR3AOnnIGdNLSS w2tMEXO5K8tZaew0V+wxskIHOkjVYXKfjdvEkR8ztdRdR10t7NjOwcTiRBIueZBB Hqr5Z/ad4ReEau5/aY6B1A6SvYdLO4WmjSQywGL/d/RoXPVrJCipjhAGnR8AXap6 PhUyV2/kbNosHRU4Yd1OTJcTu6txMxNsjNgWvcmay4/Tqj1Af/4SG0EY621XJyBM n3zkqDE66u3en2cvggulzMk2l2Ql0+diNa1dnp+uymiAU4Opp5ZpSjkqdiO6SHxj sYz0ZWNjcVDzYao/aXkcdbNtKXRZkak= -----END CERTIFICATE-----Generated at Sat Oct 24 10:17:37 2026 by rpki-client