$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18e2e96e-f0a7-3f16-87da-fd21a7bb7eea.roa File: 18e2e96e-f0a7-3f16-87da-fd21a7bb7eea.roa (raw, json) Hash identifier: E2r1MgtxCOp1QHbXNzffJe03ctjLpujwggofYGA4QmA= Subject key identifier: 08:4F:A9:30:22:2D:C6:E0:EA:04:79:A1:A0:8A:F0:AE:80:E7:F9:A2 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BDC439E6CFA2026E46C0E3480 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18e2e96e-f0a7-3f16-87da-fd21a7bb7eea.roa Signing time: Fri 14 Nov 2025 20:01:47 +0000 ROA not before: Fri 14 Nov 2025 20:01:47 +0000 ROA not after: Thu 12 Feb 2026 20:01:47 +0000 asID: 401152 IP address blocks: 23.26.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:43:9e:6c:fa:20:26:e4:6c:0e:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 14 20:01:47 2025 GMT Not After : Feb 12 20:01:47 2026 GMT Subject: CN=fdb60eb7-776f-42ae-b355-569d872d014e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:5a:ca:24:09:be:2d:5a:2c:9e:92:2b:d6: 92:57:b9:60:e8:9f:c2:9c:ff:64:e9:4f:c9:9e:b4: 80:fb:1c:4c:c5:20:99:a9:f7:f0:3d:3e:54:d5:4a: 79:bb:41:fc:c6:b3:0b:37:5b:40:15:00:57:e1:f1: d0:8a:58:bf:62:25:60:c7:75:a3:00:84:92:8e:06: 44:28:f3:f8:2f:0b:c3:99:e3:d4:af:ff:45:82:e2: 4e:5f:c1:14:74:92:11:90:d2:86:f2:ca:82:b5:31: c5:e6:e7:a3:72:71:83:bb:c3:3a:6e:39:f5:13:58: 3a:d9:06:e7:1f:0e:cf:8e:38:1c:c6:0f:8d:88:95: 38:03:18:7d:36:50:93:ef:c3:34:06:ec:28:66:22: 97:e0:11:b0:5e:42:bd:9b:e5:31:dd:5d:ae:8f:34: f4:ba:b1:a0:2b:95:69:8e:ce:24:1b:3b:cf:17:a4: 90:a4:49:77:6e:35:15:cd:4f:7c:a8:1e:23:08:ca: 52:c8:a3:2d:39:5c:75:27:88:c4:ca:e6:51:f6:ef: 4b:eb:c0:c3:05:ea:a4:b2:e9:cb:da:9c:53:d4:44: f8:a0:c0:ba:4e:44:c5:0e:bd:1d:c6:22:ea:e3:ae: e1:d2:bc:c4:45:6b:e6:da:cf:42:ed:cd:19:51:e7: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4F:A9:30:22:2D:C6:E0:EA:04:79:A1:A0:8A:F0:AE:80:E7:F9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/18e2e96e-f0a7-3f16-87da-fd21a7bb7eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d3:2b:9e:8d:84:91:b5:10:ae:a2:17:43:66:bc:70:11:f5: 8b:c5:71:b8:36:ea:b7:0a:69:f9:6a:b2:20:f8:df:a5:ba:01: fe:c5:c8:c6:b8:55:b6:4c:1e:b1:a1:54:b0:d7:0f:7b:1f:e1: 58:61:dd:1c:70:9a:a6:8f:1e:f2:af:ac:e5:e0:d3:e2:ce:f0: bb:54:30:a1:66:cb:3e:4a:20:70:5e:1e:84:a5:27:2c:62:01: d3:7f:12:b7:47:b1:79:e7:1e:50:87:3e:d8:47:f9:78:7d:e9: 35:a3:83:b0:00:bf:cc:39:af:e8:15:9b:24:49:80:2e:3d:60: de:51:b5:01:99:e8:dd:a7:40:13:48:c5:6b:42:b9:a3:49:00: c4:ff:50:55:06:82:9b:02:10:5f:f2:c0:c2:13:ad:be:eb:ee: 51:ac:a0:b4:f9:e2:a2:21:8f:0d:94:6e:53:f4:d6:f3:cb:bd: 99:80:13:37:8f:0a:9d:ed:35:d9:cf:30:6c:f2:4b:13:bb:c0: 34:97:30:02:ad:0d:ae:fe:91:81:37:ce:e7:84:f3:ff:46:72: ab:fd:0c:69:77:ec:f8:38:67:11:2c:b7:26:16:42:eb:63:a8: 7f:91:ff:e9:ac:01:2e:73:46:5a:a5:4f:58:eb:94:d2:2c:81: 5a:66:07:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvcQ55s+iAm5GwONIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTExNDIwMDE0N1oXDTI2MDIxMjIwMDE0N1owLzEtMCsGA1UEAxMk ZmRiNjBlYjctNzc2Zi00MmFlLWIzNTUtNTY5ZDg3MmQwMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2VayiQJvi1aLJ6SK9aSV7lg6J/CnP9k6U/J nrSA+xxMxSCZqffwPT5U1Up5u0H8xrMLN1tAFQBX4fHQili/YiVgx3WjAISSjgZE KPP4LwvDmePUr/9FguJOX8EUdJIRkNKG8sqCtTHF5uejcnGDu8M6bjn1E1g62Qbn Hw7Pjjgcxg+NiJU4Axh9NlCT78M0BuwoZiKX4BGwXkK9m+Ux3V2ujzT0urGgK5Vp js4kGzvPF6SQpEl3bjUVzU98qB4jCMpSyKMtOVx1J4jEyuZR9u9L68DDBeqksunL 2pxT1ET4oMC6TkTFDr0dxiLq467h0rzERWvm2s9C7c0ZUeeruwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhPqTAiLcbg6gR5oaCK8K6A5/miMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMThlMmU5NmUtZjBhNy0z ZjE2LTg3ZGEtZmQyMWE3YmI3ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjTK56NhJG1EK6iF0NmvHAR9YvFcbg26rcKaflqsiD436W6Af7FyMa4 VbZMHrGhVLDXD3sf4Vhh3RxwmqaPHvKvrOXg0+LO8LtUMKFmyz5KIHBeHoSlJyxi AdN/ErdHsXnnHlCHPthH+Xh96TWjg7AAv8w5r+gVmyRJgC49YN5RtQGZ6N2nQBNI xWtCuaNJAMT/UFUGgpsCEF/ywMITrb7r7lGsoLT54qIhjw2UblP01vPLvZmAEzeP Cp3tNdnPMGzySxO7wDSXMAKtDa7+kYE3zueE8/9Gcqv9DGl37Pg4ZxEstyYWQutj qH+R/+msAS5zRlqlT1jrlNIsgVpmByk= -----END CERTIFICATE-----Generated at Sun Nov 16 13:53:32 2025 by rpki-client