$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40e6d57a-40d8-3f88-9124-1f70659eff56.roa File: 40e6d57a-40d8-3f88-9124-1f70659eff56.roa (raw, json) Hash identifier: cZAtn/kLjng3RLc87RlkQ9J5pLhjTqQoZohbU2mi+Zo= Subject key identifier: 6D:E4:FD:BF:A4:C2:EA:83:5D:6E:68:A9:32:87:3A:35:7C:69:E2:F3 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B24058EE0C47FAFB02D98F220 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40e6d57a-40d8-3f88-9124-1f70659eff56.roa Signing time: Tue 09 Sep 2025 20:08:00 +0000 ROA not before: Tue 09 Sep 2025 20:08:00 +0000 ROA not after: Mon 08 Dec 2025 21:08:00 +0000 asID: 22773 IP address blocks: 23.26.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:05:8e:e0:c4:7f:af:b0:2d:98:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 9 20:08:00 2025 GMT Not After : Dec 8 21:08:00 2025 GMT Subject: CN=fe45e530-01c0-4305-9bc5-9aa655f6e92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:de:1e:c5:b1:64:66:d9:80:ec:48:97:72: 2d:1a:46:32:3c:83:af:80:5c:26:e9:c5:30:15:72: 21:ec:9c:08:ee:77:99:c9:10:7f:61:c0:c3:55:ed: 66:70:ed:39:11:98:a1:74:73:47:64:35:b5:84:af: 17:6f:2d:c4:ef:cf:6a:ff:4f:24:98:b2:f1:c2:74: c5:79:a1:19:dd:96:df:99:c4:90:14:ce:78:39:4e: 2f:13:f7:dd:12:3a:75:79:d6:22:24:ae:57:9b:f7: 95:3b:0e:39:51:d8:44:b6:d5:3c:be:15:74:4e:e3: b0:ff:c9:ae:a8:04:a9:22:7c:37:c1:51:14:cf:7e: 43:e3:9d:e2:b4:5d:93:d8:f0:91:08:f6:7c:21:e1: 6c:47:23:78:f7:bc:6d:a7:38:4f:c8:29:a8:f7:10: 35:40:1e:f7:09:00:e5:b1:cb:7f:df:36:dd:e9:93: 02:6b:10:ec:65:de:95:b7:98:34:4b:ce:4c:04:12: d9:0b:b2:25:5e:08:ab:2a:28:88:33:ea:41:2a:9f: 72:e9:08:d9:c5:5a:9c:24:de:24:7c:c3:70:1d:eb: f1:54:d1:6a:77:f3:8d:81:90:28:1c:e6:60:65:cf: 9c:65:21:4b:e3:0d:35:3c:f5:c7:29:6b:1a:03:eb: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E4:FD:BF:A4:C2:EA:83:5D:6E:68:A9:32:87:3A:35:7C:69:E2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40e6d57a-40d8-3f88-9124-1f70659eff56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:40:e7:fd:57:33:68:34:29:d1:52:dc:7a:89:24:20:a7:21: 23:49:cb:f5:15:bf:3c:6d:f8:cb:b8:3c:88:3d:d7:8e:72:fb: 2b:c7:0d:07:81:62:ee:b4:ad:d1:13:64:e4:b0:fa:75:91:f2: 7e:80:d3:f9:80:bf:28:15:79:ad:a6:6e:7f:0e:7b:26:18:64: ec:7f:8c:89:e2:38:d7:77:83:65:cd:27:ec:e3:7a:8c:54:47: da:3c:14:a6:c8:bf:0f:8d:84:da:17:ff:63:b2:0e:2d:e1:e3: 73:a1:f0:76:da:70:32:87:9f:d6:a9:7d:d8:36:86:76:6f:6e: 16:4a:81:aa:e5:f1:39:78:a7:41:5d:dc:da:1d:a0:6b:3b:11: 2f:2c:d1:8b:a9:02:84:bc:7a:d8:8c:ee:14:aa:24:5f:af:02: c2:03:86:1c:0d:7e:d6:90:a8:87:8a:7c:f7:f6:d7:c4:fb:d5: 3a:5d:48:cb:ae:21:af:60:aa:4b:70:ee:aa:fe:3d:44:83:68: 71:c2:0c:d1:78:5f:bc:a3:0f:a1:4c:79:c4:e7:b8:89:bf:e2: 0c:a4:88:c6:49:f4:1d:9f:85:c2:0a:0f:89:51:14:db:9d:a3: 05:2b:9f:1a:6f:0f:32:0c:12:c4:17:52:5c:00:ca:98:b9:a3: 80:9c:a5:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskBY7gxH+vsC2Y8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkwOTIwMDgwMFoXDTI1MTIwODIxMDgwMFowLzEtMCsGA1UEAxMk ZmU0NWU1MzAtMDFjMC00MzA1LTliYzUtOWFhNjU1ZjZlOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmifeHsWxZGbZgOxIl3ItGkYyPIOvgFwm6cUw FXIh7JwI7neZyRB/YcDDVe1mcO05EZihdHNHZDW1hK8Xby3E789q/08kmLLxwnTF eaEZ3ZbfmcSQFM54OU4vE/fdEjp1edYiJK5Xm/eVOw45UdhEttU8vhV0TuOw/8mu qASpInw3wVEUz35D453itF2T2PCRCPZ8IeFsRyN497xtpzhPyCmo9xA1QB73CQDl sct/3zbd6ZMCaxDsZd6Vt5g0S85MBBLZC7IlXgirKiiIM+pBKp9y6QjZxVqcJN4k fMNwHevxVNFqd/ONgZAoHOZgZc+cZSFL4w01PPXHKWsaA+v4iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3k/b+kwuqDXW5oqTKHOjV8aeLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDBlNmQ1N2EtNDBkOC0z Zjg4LTkxMjQtMWY3MDY1OWVmZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtA5/1XM2g0KdFS3HqJJCCnISNJy/UVvzxt+Mu4PIg9145y+yvHDQeB Yu60rdETZOSw+nWR8n6A0/mAvygVea2mbn8OeyYYZOx/jIniONd3g2XNJ+zjeoxU R9o8FKbIvw+NhNoX/2OyDi3h43Oh8HbacDKHn9apfdg2hnZvbhZKgarl8Tl4p0Fd 3NodoGs7ES8s0YupAoS8etiM7hSqJF+vAsIDhhwNftaQqIeKfPf218T71TpdSMuu Ia9gqktw7qr+PUSDaHHCDNF4X7yjD6FMecTnuIm/4gykiMZJ9B2fhcIKD4lRFNud owUrnxpvDzIMEsQXUlwAypi5o4CcpRQ= -----END CERTIFICATE-----Generated at Mon Nov 3 17:14:49 2025 by rpki-client