$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dc53d19-903f-31cd-bfa4-48f0921ec232.roa File: 1dc53d19-903f-31cd-bfa4-48f0921ec232.roa (raw, json) Hash identifier: xiFrVez1/Yrb3RzYInVf/l2UIp5msFf2E9GvLrYHCCw= Subject key identifier: 2A:29:FE:9E:AA:78:D2:EF:67:9E:13:8A:B0:BC:88:1B:0E:C4:4B:43 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B7B2208056EE9497A41BC3020 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dc53d19-903f-31cd-bfa4-48f0921ec232.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7385 IP address blocks: 23.26.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:08:05:6e:e9:49:7a:41:bc:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=fb357802-003e-4e1c-91ec-557d87298e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:1e:1c:00:25:c5:26:f9:9b:ef:cd:e9:cb: 4b:45:39:ca:14:d7:64:e1:34:35:7a:37:6e:c4:c4: 4c:bb:53:30:58:e4:c6:59:34:d5:45:87:7d:0a:83: 33:54:95:00:81:68:74:5c:f8:51:fb:68:41:1c:82: db:4d:d8:e0:91:ba:d5:c7:6f:03:9e:ab:c2:ce:30: 05:a3:a6:2b:08:c9:2d:73:7b:55:02:67:23:00:90: 87:af:c1:cf:2e:c9:38:cf:2c:d0:5f:6f:c9:08:24: 0b:dd:60:68:d7:42:1f:7d:e4:d3:0d:aa:dd:1f:5a: c6:eb:d4:9b:15:84:96:af:2f:07:59:81:35:b7:01: 20:ac:68:8e:75:cb:1c:24:ee:b4:40:e9:0a:07:8d: a2:cc:ae:12:cb:5a:85:a1:2f:c6:51:71:fe:b4:d5: 1b:e7:77:3b:30:97:df:1c:1b:08:51:4b:d7:27:7a: a4:a5:f6:1a:16:9c:14:71:f5:e3:80:86:d1:35:83: a4:65:aa:5a:6c:b8:76:eb:3e:cc:92:27:aa:16:9a: 3e:65:2d:e8:ee:85:6c:d6:41:d1:b1:e0:c6:28:95: 5b:e3:be:c2:23:76:f6:3a:09:72:cc:11:63:86:57: c6:a9:fe:7c:c6:85:63:7e:42:4b:d6:8a:17:e0:d9: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:29:FE:9E:AA:78:D2:EF:67:9E:13:8A:B0:BC:88:1B:0E:C4:4B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dc53d19-903f-31cd-bfa4-48f0921ec232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:9a:79:c9:1c:4e:59:df:57:62:60:7c:7b:7c:4b:31:ef:fa: fb:cc:e7:26:de:6c:42:4a:43:25:2c:2e:ad:87:ab:46:dc:82: fa:00:f9:80:14:96:63:21:fb:bf:bc:37:71:0f:99:8a:d1:ed: 81:99:66:57:dc:c4:1d:9e:88:06:57:69:5d:bb:56:68:62:f6: 7c:22:c5:7c:2c:5b:e0:ad:9b:dc:0c:50:fc:c0:64:8f:68:46: b3:00:4a:5b:25:36:1c:02:34:85:5f:d6:de:bd:38:9d:24:2a: 5b:87:76:22:0d:8b:0c:f3:ec:1d:d0:29:94:73:d6:ea:75:d2: 6c:0b:05:4e:6c:fb:f5:92:92:ce:e7:30:ea:83:a7:00:61:1b: 6b:f8:6d:f9:4f:fc:33:b5:83:24:05:d1:09:fb:4b:17:15:ca: 27:92:2a:e5:1d:de:36:14:45:90:b2:bd:0b:c5:01:d6:38:b3: 25:2d:1c:a8:40:68:c0:13:34:90:3c:5b:08:bd:af:42:1f:be: 05:29:ae:70:b9:84:15:5d:6f:33:50:9b:93:28:3c:05:ec:31: 5f:10:0c:a6:e2:9b:ff:8f:48:79:87:58:b9:d3:7b:19:73:db: fb:bb:39:95:18:e0:c1:dc:bc:52:e6:d4:a6:7f:03:79:9b:3b: df:7c:03:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IggFbulJekG8MCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmIzNTc4MDItMDAzZS00ZTFjLTkxZWMtNTU3ZDg3Mjk4ZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA0eHAAlxSb5m+/N6ctLRTnKFNdk4TQ1ejdu xMRMu1MwWOTGWTTVRYd9CoMzVJUAgWh0XPhR+2hBHILbTdjgkbrVx28DnqvCzjAF o6YrCMktc3tVAmcjAJCHr8HPLsk4zyzQX2/JCCQL3WBo10IffeTTDardH1rG69Sb FYSWry8HWYE1twEgrGiOdcscJO60QOkKB42izK4Sy1qFoS/GUXH+tNUb53c7MJff HBsIUUvXJ3qkpfYaFpwUcfXjgIbRNYOkZapabLh26z7MkieqFpo+ZS3o7oVs1kHR seDGKJVb477CI3b2OglyzBFjhlfGqf58xoVjfkJL1ooX4NlqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCop/p6qeNLvZ54TirC8iBsOxEtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWRjNTNkMTktOTAzZi0z MWNkLWJmYTQtNDhmMDkyMWVjMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+aeckcTlnfV2JgfHt8SzHv+vvM5ybebEJKQyUsLq2Hq0bcgvoA+YAU lmMh+7+8N3EPmYrR7YGZZlfcxB2eiAZXaV27Vmhi9nwixXwsW+Ctm9wMUPzAZI9o RrMASlslNhwCNIVf1t69OJ0kKluHdiINiwzz7B3QKZRz1up10mwLBU5s+/WSks7n MOqDpwBhG2v4bflP/DO1gyQF0Qn7SxcVyieSKuUd3jYURZCyvQvFAdY4syUtHKhA aMATNJA8Wwi9r0IfvgUprnC5hBVdbzNQm5MoPAXsMV8QDKbim/+PSHmHWLnTexlz 2/u7OZUY4MHcvFLm1KZ/A3mbO998A5U= -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:42 2025 by rpki-client