$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8353b3ba-cd6f-37fb-9101-d9933f616740.roa File: 8353b3ba-cd6f-37fb-9101-d9933f616740.roa (raw, json) Hash identifier: izxfwzgC9HpRZc3fy8frCk56GPLOXtQnRGzGDba7Nmg= Subject key identifier: 1C:0C:2E:07:1D:87:28:97:4B:3A:05:53:B0:A8:2F:99:12:D3:41:D0 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BB4E52CCB4C5A20A6D0E0E498 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8353b3ba-cd6f-37fb-9101-d9933f616740.roa Signing time: Fri 31 Oct 2025 17:34:58 +0000 ROA not before: Fri 31 Oct 2025 17:34:58 +0000 ROA not after: Thu 29 Jan 2026 18:34:58 +0000 asID: 7385 IP address blocks: 23.26.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:e5:2c:cb:4c:5a:20:a6:d0:e0:e4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 31 17:34:58 2025 GMT Not After : Jan 29 18:34:58 2026 GMT Subject: CN=502b1a49-0a7c-4646-99d3-44a4f7e31044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:bb:15:cf:b4:bf:21:f3:a0:2b:ad:6d:fe: 9d:bb:07:f0:17:b9:ba:a9:f3:ef:04:cd:e0:43:e0: cb:0f:19:8f:d3:fe:53:d4:7e:a7:c9:3a:ca:c0:5c: a4:21:0a:5e:1b:6d:43:4a:a7:0a:47:e7:09:aa:0b: 48:e0:71:1c:02:6d:3a:28:92:08:cc:cb:82:e2:3e: 5b:a0:99:36:21:ef:03:1c:dd:88:f7:85:4c:cc:31: 0e:26:2a:1f:0d:6d:65:af:2e:ba:f3:9c:dc:3c:a1: cf:46:da:77:fd:98:cb:ae:50:95:70:0c:a3:0c:a6: 18:63:1f:b7:52:80:07:77:b6:e1:e3:2a:54:aa:3e: e4:5f:58:9d:9f:a7:3b:ea:93:2a:c0:5a:2e:12:7e: 6c:8d:28:e4:14:09:46:8e:59:97:5d:88:59:4b:50: b5:d2:a6:76:43:46:f2:49:28:00:98:8f:a3:eb:74: da:75:ed:18:da:a7:28:5f:a4:ad:38:43:86:74:3b: 3b:3c:02:d1:69:e0:55:55:0a:60:30:5c:7d:2b:05: 99:f5:ac:fe:4a:54:51:e3:02:ca:46:c0:c6:72:2a: 36:a8:e2:4f:be:14:d1:15:c5:ea:49:cc:dc:aa:31: ae:e4:a5:21:fe:c3:22:58:32:ab:38:f6:e6:e7:44: ca:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0C:2E:07:1D:87:28:97:4B:3A:05:53:B0:A8:2F:99:12:D3:41:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8353b3ba-cd6f-37fb-9101-d9933f616740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c9:22:e0:ea:86:9e:a5:34:5e:0f:95:23:35:54:68:4b:64: eb:bb:85:90:70:f5:6e:9d:52:fc:fa:f9:21:12:83:53:32:b7: f5:68:56:77:d4:70:1a:33:37:5b:1c:ba:34:1c:9d:b9:4f:91: e7:5a:9e:8b:e0:d2:4b:67:38:ac:be:a3:11:0c:d7:b6:b9:d8: d5:50:dd:8e:e3:5b:60:04:c8:e7:56:98:fd:e7:d6:d6:19:27: ec:a0:88:8c:a0:fd:e1:b0:31:a7:1f:8b:48:38:46:1a:38:42: b1:f8:11:a5:4e:9a:dd:53:2e:5d:01:bd:46:e1:bf:72:5f:96: dc:c6:9a:18:1e:64:a9:3e:b2:91:38:9a:e2:2d:8c:40:c1:bf: 59:c5:93:74:46:12:97:f2:99:fb:7c:cc:e0:2f:44:b5:22:b1: e6:f2:25:02:84:1d:7f:90:78:7d:37:e0:49:4c:ef:af:62:1a: 1a:95:a8:2c:79:39:83:0a:34:f3:50:b6:37:ec:8d:4b:f5:7c: 1f:d4:5d:8c:dd:99:57:df:fb:02:66:87:91:b7:9e:3f:9c:54: e3:8b:07:f1:21:92:e4:ef:c0:3a:75:5c:ed:7a:6c:02:db:61: b5:dd:d3:d7:9b:0d:50:ce:ce:2d:f0:16:9b:2f:17:c2:63:a4: f9:4a:4c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu05SzLTFogptDg5JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAzMTE3MzQ1OFoXDTI2MDEyOTE4MzQ1OFowLzEtMCsGA1UEAxMk NTAyYjFhNDktMGE3Yy00NjQ2LTk5ZDMtNDRhNGY3ZTMxMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMm7Fc+0vyHzoCutbf6duwfwF7m6qfPvBM3g Q+DLDxmP0/5T1H6nyTrKwFykIQpeG21DSqcKR+cJqgtI4HEcAm06KJIIzMuC4j5b oJk2Ie8DHN2I94VMzDEOJiofDW1lry6685zcPKHPRtp3/ZjLrlCVcAyjDKYYYx+3 UoAHd7bh4ypUqj7kX1idn6c76pMqwFouEn5sjSjkFAlGjlmXXYhZS1C10qZ2Q0by SSgAmI+j63Tade0Y2qcoX6StOEOGdDs7PALRaeBVVQpgMFx9KwWZ9az+SlRR4wLK RsDGcio2qOJPvhTRFcXqSczcqjGu5KUh/sMiWDKrOPbm50TKGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwMLgcdhyiXSzoFU7CoL5kS00HQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODM1M2IzYmEtY2Q2Zi0z N2ZiLTkxMDEtZDk5MzNmNjE2NzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXJIuDqhp6lNF4PlSM1VGhLZOu7hZBw9W6dUvz6+SESg1Myt/VoVnfU cBozN1scujQcnblPkedanovg0ktnOKy+oxEM17a52NVQ3Y7jW2AEyOdWmP3n1tYZ J+ygiIyg/eGwMacfi0g4Rho4QrH4EaVOmt1TLl0BvUbhv3JfltzGmhgeZKk+spE4 muItjEDBv1nFk3RGEpfymft8zOAvRLUisebyJQKEHX+QeH034ElM769iGhqVqCx5 OYMKNPNQtjfsjUv1fB/UXYzdmVff+wJmh5G3nj+cVOOLB/EhkuTvwDp1XO16bALb YbXd09ebDVDOzi3wFpsvF8JjpPlKTBY= -----END CERTIFICATE-----Generated at Sun Nov 2 16:45:40 2025 by rpki-client