$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/458e53cf-63c9-346e-b1d4-213cead2a0d9.roa File: 458e53cf-63c9-346e-b1d4-213cead2a0d9.roa (raw, json) Hash identifier: 6p05SVmBtIe7j5iKV5oJhMKHgc29iz6eKftE+FLXdA4= Subject key identifier: 62:66:66:8F:F4:6D:0E:E4:56:C1:54:2B:7F:15:F9:21:0A:95:F1:29 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BD138D32E7BA3187DD32A3900 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/458e53cf-63c9-346e-b1d4-213cead2a0d9.roa Signing time: Mon 10 Nov 2025 21:06:08 +0000 ROA not before: Mon 10 Nov 2025 21:06:08 +0000 ROA not after: Sun 08 Feb 2026 21:06:08 +0000 asID: 9009 IP address blocks: 23.26.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:38:d3:2e:7b:a3:18:7d:d3:2a:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 10 21:06:08 2025 GMT Not After : Feb 8 21:06:08 2026 GMT Subject: CN=fd9d2155-db1f-40d7-9e66-62d10eaa0138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:6f:38:b5:76:77:8b:23:75:4d:7b:32:7c: 70:db:97:d3:5b:b4:5b:d9:01:6a:c3:a0:d5:b7:4e: bc:59:ad:a7:38:72:5d:c9:46:fa:34:a2:a2:9b:c3: c8:da:70:2f:bc:42:1a:7e:8f:1a:46:95:76:30:ff: 75:e2:c2:ea:9e:de:f3:0c:58:16:58:ad:0d:27:e7: 56:b7:f7:82:e5:6b:6e:21:ca:53:78:5a:fb:e3:08: af:20:23:3b:c1:7b:a1:dc:b7:01:de:16:b8:8e:a8: 16:20:ba:64:da:5f:cf:30:2f:7d:80:3a:3b:c7:b4: 0c:b1:43:b7:09:c5:2f:49:aa:0f:c3:50:7e:11:a1: 2d:c6:0e:c1:08:db:44:24:2c:c4:c4:20:75:58:0d: 9b:8f:10:f9:84:59:64:a4:92:79:30:f2:0e:ee:b5: a5:5c:4d:e6:c6:e9:03:c7:cb:8f:4e:6a:b1:2f:bf: 65:34:a4:f2:d4:7a:82:9c:de:6b:70:ca:42:60:b0: 92:59:57:07:ba:f3:10:4c:a2:24:23:92:62:c2:73: 1a:89:4c:d1:f0:3b:7a:f5:71:29:38:3f:38:ea:0e: a4:9d:0d:a4:72:fe:59:ad:b2:5e:49:17:e3:fd:92: ae:40:64:d2:cb:62:49:77:36:92:7f:b5:22:af:90: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:66:66:8F:F4:6D:0E:E4:56:C1:54:2B:7F:15:F9:21:0A:95:F1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/458e53cf-63c9-346e-b1d4-213cead2a0d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:5d:2f:98:42:6b:bb:2a:4a:85:c1:7b:38:aa:b1:bb:fc:c2: 74:da:2d:80:37:9f:b1:7d:84:2e:cb:ee:5d:91:bd:2c:0a:e2: 5e:34:e8:a0:6c:d0:86:da:4d:77:17:28:77:f8:1f:fa:f4:43: 27:fd:96:99:ef:a3:ef:65:27:6f:28:7c:ce:e9:e5:61:2a:6f: 5e:c4:ec:f2:57:13:cc:84:73:53:ca:e9:d6:e9:e6:e9:df:e5: 33:54:3a:69:a2:0d:71:1c:0b:20:9a:32:fc:7e:b7:d3:c9:63: aa:72:e9:ae:72:c3:d6:fa:5b:0c:a3:9d:f5:a2:28:1d:f1:f7: 3f:c3:03:e1:5f:e1:78:62:c8:42:99:40:5b:71:c8:48:ac:d4: 03:d9:33:36:61:ba:eb:42:3c:1d:a5:8d:77:1b:9d:f9:0f:4d: 44:45:a6:a8:fc:41:a9:7d:4f:e7:88:8f:b6:38:b2:68:2d:70: 2d:3b:83:01:9e:4a:12:fb:47:d6:ed:18:d5:73:24:00:cd:38: 51:75:74:89:91:da:1a:d6:30:33:a5:c6:f9:62:e3:25:88:09: bf:65:2c:76:7a:df:42:52:2a:19:2f:2a:84:c6:eb:7a:89:7f: a3:61:37:ce:ea:d5:f5:48:54:c9:ab:99:b4:a5:25:14:77:6f: 47:40:ed:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRONMue6MYfdMqOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTExMDIxMDYwOFoXDTI2MDIwODIxMDYwOFowLzEtMCsGA1UEAxMk ZmQ5ZDIxNTUtZGIxZi00MGQ3LTllNjYtNjJkMTBlYWEwMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9NvOLV2d4sjdU17Mnxw25fTW7Rb2QFqw6DV t068Wa2nOHJdyUb6NKKim8PI2nAvvEIafo8aRpV2MP914sLqnt7zDFgWWK0NJ+dW t/eC5WtuIcpTeFr74wivICM7wXuh3LcB3ha4jqgWILpk2l/PMC99gDo7x7QMsUO3 CcUvSaoPw1B+EaEtxg7BCNtEJCzExCB1WA2bjxD5hFlkpJJ5MPIO7rWlXE3mxukD x8uPTmqxL79lNKTy1HqCnN5rcMpCYLCSWVcHuvMQTKIkI5JiwnMaiUzR8Dt69XEp OD846g6knQ2kcv5ZrbJeSRfj/ZKuQGTSy2JJdzaSf7Uir5Ae+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJmZo/0bQ7kVsFUK38V+SEKlfEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDU4ZTUzY2YtNjNjOS0z NDZlLWIxZDQtMjEzY2VhZDJhMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFxoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZdL5hCa7sqSoXBeziqsbv8wnTaLYA3n7F9hC7L7l2RvSwK4l406KBs 0IbaTXcXKHf4H/r0Qyf9lpnvo+9lJ28ofM7p5WEqb17E7PJXE8yEc1PK6dbp5unf 5TNUOmmiDXEcCyCaMvx+t9PJY6py6a5yw9b6WwyjnfWiKB3x9z/DA+Ff4XhiyEKZ QFtxyEis1APZMzZhuutCPB2ljXcbnfkPTURFpqj8Qal9T+eIj7Y4smgtcC07gwGe ShL7R9btGNVzJADNOFF1dImR2hrWMDOlxvli4yWICb9lLHZ630JSKhkvKoTG63qJ f6NhN87q1fVIVMmrmbSlJRR3b0dA7VM= -----END CERTIFICATE-----Generated at Sun Nov 16 13:59:35 2025 by rpki-client