$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b867e1f0-9864-328e-bf85-c926d810e40b.roa File: b867e1f0-9864-328e-bf85-c926d810e40b.roa (raw, json) Hash identifier: zezDBBLmo1XFh6x3EiSfaC6cc0qP+6TW5MLb1BhXgBE= Subject key identifier: 1A:0E:F4:F8:02:8C:95:3C:61:6F:88:F3:DF:18:D3:7A:51:F8:1F:C8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AB739FC73AD700DA8AB71A460 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b867e1f0-9864-328e-bf85-c926d810e40b.roa Signing time: Fri 01 Aug 2025 20:50:32 +0000 ROA not before: Fri 01 Aug 2025 20:50:32 +0000 ROA not after: Thu 30 Oct 2025 20:50:32 +0000 asID: 401152 IP address blocks: 23.26.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:39:fc:73:ad:70:0d:a8:ab:71:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 1 20:50:32 2025 GMT Not After : Oct 30 20:50:32 2025 GMT Subject: CN=4570fd1c-55d0-48b1-bb15-ae4269dcce1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:70:e1:39:96:b7:6f:9a:ed:f9:b9:ae:6d: 6b:06:26:50:38:99:80:14:c1:2c:cb:81:9d:1f:fb: 5f:92:52:80:5d:7d:92:a2:ce:a9:e4:a1:0b:6f:02: 73:84:51:5a:e2:c7:d5:50:c1:bd:3d:76:e5:ec:02: 23:87:08:f8:c9:69:49:3d:23:3b:49:65:2a:69:6e: 52:f3:15:6e:1a:24:30:12:47:0e:86:93:45:0d:42: ed:c8:27:81:67:4d:6e:15:7c:af:28:97:14:0e:60: 66:02:94:be:68:4d:3c:3d:41:e3:66:a7:db:42:fd: 7a:c7:48:96:b8:c0:bc:18:05:07:08:4a:c8:a2:08: c4:d0:08:36:51:5f:85:2d:3a:d5:8a:75:6f:dd:ca: f6:7c:e5:6a:5d:91:0c:83:71:fa:c5:cc:20:96:af: 11:9c:70:f8:09:05:81:d8:98:0b:52:f7:8f:b3:32: c9:0f:02:10:f4:f8:2c:c6:ea:f4:2d:ec:12:07:c5: 74:28:4e:95:7a:9b:f6:ae:78:b8:15:ac:74:f2:d9: 5f:19:01:68:0a:51:5b:4b:b0:04:ca:85:c0:a9:a9: 9f:d4:5c:dd:a0:5d:91:d6:22:eb:fe:a5:2e:61:00: 3c:45:57:03:47:9e:84:5d:2d:27:83:1d:34:9a:9d: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0E:F4:F8:02:8C:95:3C:61:6F:88:F3:DF:18:D3:7A:51:F8:1F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b867e1f0-9864-328e-bf85-c926d810e40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:78:4e:ce:7a:41:0c:89:2c:25:ef:51:33:9a:2d:02:5c:13: 8d:1b:54:0c:62:31:b6:25:b2:75:84:9f:db:57:57:98:a9:a1: b5:e3:95:48:eb:ef:59:7f:a2:43:e3:d4:74:45:d4:0c:0f:ba: 7a:37:55:d9:f0:e2:7c:12:f8:6d:35:a5:c9:80:30:55:66:59: c7:45:62:fb:d1:ac:89:7c:fe:57:37:8c:73:45:9e:63:f4:5e: 16:e6:ec:0b:02:34:0c:56:54:f9:0b:c3:24:fd:6d:15:e6:46: fd:ef:cd:26:e7:4d:79:b9:ad:e1:a1:58:0e:f0:e3:8b:a9:73: 0b:7b:fe:23:5a:e2:90:45:2f:86:0e:fb:57:33:d2:33:75:f7: 76:e3:28:e6:89:26:ec:cc:d6:83:c0:23:c0:96:f8:3c:a6:5f: e4:db:71:7c:fa:36:b6:93:b4:e6:23:59:4e:14:04:f0:80:03: e0:c5:4d:f3:3f:28:16:38:ee:b2:ec:70:ef:2b:a9:b5:7b:4e: 8d:09:30:06:3a:49:ce:6d:0f:7d:2b:9a:bd:1e:da:b0:b1:9a: 5c:1e:4c:b1:0b:36:01:69:18:77:1a:00:95:05:be:0b:19:b4: 92:e3:6d:87:c9:ff:78:ec:7d:67:f5:f9:f4:c4:fe:89:a3:a5: 17:57:90:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3OfxzrXANqKtxpGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgwMTIwNTAzMloXDTI1MTAzMDIwNTAzMlowLzEtMCsGA1UEAxMk NDU3MGZkMWMtNTVkMC00OGIxLWJiMTUtYWU0MjY5ZGNjZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyVw4TmWt2+a7fm5rm1rBiZQOJmAFMEsy4Gd H/tfklKAXX2Sos6p5KELbwJzhFFa4sfVUMG9PXbl7AIjhwj4yWlJPSM7SWUqaW5S 8xVuGiQwEkcOhpNFDULtyCeBZ01uFXyvKJcUDmBmApS+aE08PUHjZqfbQv16x0iW uMC8GAUHCErIogjE0Ag2UV+FLTrVinVv3cr2fOVqXZEMg3H6xcwglq8RnHD4CQWB 2JgLUvePszLJDwIQ9Pgsxur0LewSB8V0KE6Vepv2rni4Fax08tlfGQFoClFbS7AE yoXAqamf1FzdoF2R1iLr/qUuYQA8RVcDR56EXS0ngx00mp2iKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoO9PgCjJU8YW+I898Y03pR+B/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjg2N2UxZjAtOTg2NC0z MjhlLWJmODUtYzkyNmQ4MTBlNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh4Ts56QQyJLCXvUTOaLQJcE40bVAxiMbYlsnWEn9tXV5ipobXjlUjr 71l/okPj1HRF1AwPuno3Vdnw4nwS+G01pcmAMFVmWcdFYvvRrIl8/lc3jHNFnmP0 Xhbm7AsCNAxWVPkLwyT9bRXmRv3vzSbnTXm5reGhWA7w44upcwt7/iNa4pBFL4YO +1cz0jN193bjKOaJJuzM1oPAI8CW+DymX+TbcXz6NraTtOYjWU4UBPCAA+DFTfM/ KBY47rLscO8rqbV7To0JMAY6Sc5tD30rmr0e2rCxmlweTLELNgFpGHcaAJUFvgsZ tJLjbYfJ/3jsfWf1+fTE/omjpRdXkMQ= -----END CERTIFICATE-----Generated at Mon Aug 4 07:55:09 2025 by rpki-client