$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa File: a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa (raw, json) Hash identifier: dU1yvCozqxdjn73Xys8pdFSxNaYah/4JP3m3Qu9TB+s= Subject key identifier: 2F:D2:FA:C5:AE:97:E3:2E:BB:3F:53:38:FF:4C:75:1B:9E:08:08:E1 Certificate issuer: /CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b Certificate serial: 010D0C9F4328584B9E07B688B49CC978B2ED94C0 Authority key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 12175 IP address blocks: 66.243.232.0/21 maxlen: 24 66.243.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b6:88:b4:9c:c9:78:b2:ed:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=9ab9f633-3736-4cb6-8715-2e1a04671433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f8:3c:91:29:a7:f5:87:b4:ba:b8:0e:59:ef: ab:bb:33:52:57:2c:a6:e1:bf:af:1c:52:5c:9c:9a: 8d:36:df:4c:44:a3:67:83:f8:29:1c:55:bc:8d:9a: 23:20:1b:a4:58:3e:6b:d5:30:8f:32:3f:ec:e5:81: 2b:d2:cd:5a:74:89:e4:53:e2:0e:7f:8a:37:09:6e: 08:d2:3a:fd:99:62:81:5e:55:a1:38:6b:57:34:4e: 93:ac:c7:3d:19:a6:87:13:e4:24:cb:15:ab:a8:75: c0:18:e6:56:6b:27:da:c8:5f:fc:40:04:3d:c7:35: 77:36:09:15:4e:5b:0f:27:1f:c4:f7:48:1e:f4:da: dc:68:55:6f:05:3b:1f:d8:04:67:52:ab:e5:85:c2: 1b:4d:d9:b3:57:b8:b5:7d:65:e6:4e:c1:75:bb:83: 0f:4d:55:42:97:67:2e:3b:6e:57:15:74:71:8b:d2: 46:90:b2:9e:20:f2:f7:39:cf:af:eb:09:f7:06:7a: dc:7f:39:05:bf:9a:9b:77:6c:e9:cc:f2:06:cc:ee: 68:cd:ce:92:95:ce:32:dd:22:92:66:42:e1:d5:4b: 27:6d:5c:fe:3d:35:09:1e:25:fd:55:ca:8a:b0:d9: 89:02:3b:38:5c:90:eb:9a:f2:4b:a8:e4:df:1b:5d: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D2:FA:C5:AE:97:E3:2E:BB:3F:53:38:FF:4C:75:1B:9E:08:08:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/a48abf35-c2cf-3f99-901f-4c22d9a1f796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl X509v3 Authority Key Identifier: keyid:A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer sbgp-ipAddrBlock: critical IPv4: 66.243.232.0-66.243.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7b:b5:78:15:80:83:df:84:4e:c3:bc:1a:76:6c:a4:1a:35: 60:8c:29:a5:5a:a1:6c:43:f3:d0:09:22:e0:38:b0:2d:8b:50: 8e:1c:63:d9:62:b9:db:bc:47:86:9b:8b:09:1e:ec:a2:a5:d4: 34:7f:4d:09:cc:9d:5d:da:ba:cc:9e:6d:8e:f6:6a:89:e4:eb: 99:58:93:35:5a:2f:14:80:f5:5b:8e:99:6f:8c:34:7f:03:16: b8:db:9e:c2:b7:fc:36:32:e6:16:a2:47:8d:4f:53:d5:42:60: 49:aa:01:2d:72:11:fc:9f:68:07:4a:7e:91:84:a8:61:47:58: 3c:7a:f9:da:f5:f9:57:64:09:bc:95:00:ce:1f:58:82:e4:b7: 44:9b:34:80:36:81:c6:e5:c6:13:5c:ec:35:6f:32:2c:24:36: 12:3c:71:7f:fa:60:37:a6:5f:40:0f:51:69:82:da:60:95:3d: 71:10:f3:fa:05:03:db:1f:23:85:dc:36:0f:ba:d0:4c:63:5a: 21:48:61:40:2b:1b:c2:92:52:e1:7b:d0:36:32:31:a1:c2:5a: 84:6f:53:fc:23:99:4c:16:fa:fa:fb:5d:a6:a8:10:c6:33:79: 49:78:7e:1a:3e:5f:01:3c:cf:7a:81:a5:e6:09:30:c0:17:3d: 46:2a:29:d7 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEueB7aItJzJeLLtlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDc5NWI3YjktZjJkYS00NGZhLWIxODEtZDc0YTU3ZjY0 ZTFiMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OWFiOWY2MzMtMzczNi00Y2I2LTg3MTUtMmUxYTA0NjcxNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivg8kSmn9Ye0urgOWe+ruzNSVyym4b+vHFJc nJqNNt9MRKNng/gpHFW8jZojIBukWD5r1TCPMj/s5YEr0s1adInkU+IOf4o3CW4I 0jr9mWKBXlWhOGtXNE6TrMc9GaaHE+QkyxWrqHXAGOZWayfayF/8QAQ9xzV3NgkV TlsPJx/E90ge9NrcaFVvBTsf2ARnUqvlhcIbTdmzV7i1fWXmTsF1u4MPTVVCl2cu O25XFXRxi9JGkLKeIPL3Oc+v6wn3BnrcfzkFv5qbd2zpzPIGzO5ozc6Slc4y3SKS ZkLh1UsnbVz+PTUJHiX9VcqKsNmJAjs4XJDrmvJLqOTfG13PwQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFC/S+sWul+Muuz9TOP9MdRueCAjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNzk1 YjdiOS1mMmRhLTQ0ZmEtYjE4MS1kNzRhNTdmNjRlMWIvYTQ4YWJmMzUtYzJjZi0z Zjk5LTkwMWYtNGMyMmQ5YTFmNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDc5NWI3YjktZjJkYS00NGZhLWIx ODEtZDc0YTU3ZjY0ZTFiLzA3OTViN2I5LWYyZGEtNDRmYS1iMTgxLWQ3NGE1N2Y2 NGUxYi5jcmwwHwYDVR0jBBgwFoAUo/sdWc0v2+ROWIpYu25Nbyd2SgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNzk1YjdiOS1mMmRhLTQ0ZmEtYjE4MS1kNzRh NTdmNjRlMWIuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBANC8+gD AwJC8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBMe7V4FYCD34ROw7wadmykGjVgjCmlWqFsQ/PQCSLgOLAt i1COHGPZYrnbvEeGm4sJHuyipdQ0f00JzJ1d2rrMnm2O9mqJ5OuZWJM1Wi8UgPVb jplvjDR/Axa4257Ct/w2MuYWokeNT1PVQmBJqgEtchH8n2gHSn6RhKhhR1g8evna 9flXZAm8lQDOH1iC5LdEmzSANoHG5cYTXOw1bzIsJDYSPHF/+mA3pl9AD1Fpgtpg lT1xEPP6BQPbHyOF3DYPutBMY1ohSGFAKxvCklLhe9A2MjGhwlqEb1P8I5lMFvr6 +12mqBDGM3lJeH4aPl8BPM96gaXmCTDAFz1GKinX -----END CERTIFICATE-----Generated at Wed Nov 5 04:13:01 2025 by rpki-client