$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa File: 0af909ab-1156-3784-b0f8-10b7c8819074.roa (raw, json) Hash identifier: 1jISdlL9kxhMxDMDa7+qN8S9ArxnXx40jkQ7lNlLZT8= Subject key identifier: A6:CA:F3:2D:7B:8F:53:DC:9E:BA:42:FE:6C:07:2F:CC:7A:AE:04:33 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B25FC42A65C7BDBEE18FF1BE0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 137409 IP address blocks: 23.26.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:42:a6:5c:7b:db:ee:18:ff:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=12689ca1-b0a4-4606-9d87-5f69930bd769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:86:71:a9:a4:b6:b8:49:ad:31:6c:08:66: 29:ab:82:f6:73:f1:36:6e:0f:cd:b6:49:8e:81:bb: ae:02:eb:08:b0:28:98:c4:9c:5b:b5:f9:f3:b1:50: c6:65:4b:12:52:bd:79:ce:8c:0c:8a:8a:01:92:be: 9f:e9:bc:a7:98:e7:34:4b:ee:2a:12:14:77:aa:00: d3:06:26:94:5b:ca:b8:f8:d2:2c:08:b3:9f:a3:09: d8:a0:25:cb:24:1b:f2:d0:a9:a9:23:24:5a:23:88: 7d:df:7d:19:a1:5c:24:3f:ee:cd:a9:3a:83:88:a3: 36:36:cf:9d:78:f0:7d:72:6f:e4:eb:82:95:5f:05: f1:82:aa:6b:02:d8:98:43:fc:96:b3:2f:69:99:6e: 1f:1e:2d:f3:7a:2d:b2:de:40:a1:7f:4f:03:3c:ea: 44:6f:e8:74:3f:3f:65:44:57:0e:0d:70:c5:f3:10: d8:28:3b:76:0f:50:6b:9a:3a:f0:dc:3d:c2:9a:3c: c6:df:df:5b:47:c2:23:88:8e:77:da:eb:2c:4e:ba: 90:47:db:0c:8e:68:c6:0f:b7:61:fd:62:29:e7:be: 70:82:99:cf:f6:36:d4:b5:c5:fe:e5:42:82:a0:d0: da:f9:b1:fc:43:53:e2:e9:d4:89:a7:3f:1e:9f:25: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CA:F3:2D:7B:8F:53:DC:9E:BA:42:FE:6C:07:2F:CC:7A:AE:04:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0af909ab-1156-3784-b0f8-10b7c8819074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:af:d8:d3:2e:e5:3c:c2:eb:34:14:22:16:90:c8:11:bb:29: 63:58:52:29:40:5f:40:6b:9e:b2:a9:06:2b:2e:3c:8a:44:53: 67:3b:b6:14:40:26:40:0d:c1:f0:00:ab:b6:61:79:42:47:d3: cd:8d:f7:88:41:eb:8e:a9:09:3f:b6:f6:8d:06:83:5d:33:4f: a9:ed:17:28:a9:d0:ca:c1:e0:d6:7e:e7:ed:2b:ea:17:16:a5: 63:70:b3:82:8c:11:65:93:2b:dc:48:72:f6:62:f6:38:34:90: a3:f9:83:c0:ac:24:8e:fe:3f:76:28:d3:2b:07:54:6e:01:0b: d6:8c:07:7e:77:0b:ef:ba:07:8a:c4:15:b1:01:9e:46:74:4c: 0e:a3:92:6a:ff:4f:07:e7:4e:cb:3c:19:3b:ed:1d:22:e7:d5: 30:db:33:07:df:e3:dd:33:d0:34:6d:36:d8:e1:ae:1f:81:25: 24:c3:cc:10:8b:23:8b:e3:12:3a:df:e3:88:73:bc:cd:b7:fb: d3:c2:45:f4:77:39:19:f4:bc:92:f5:96:dd:ff:8b:00:a7:66: 75:39:15:9c:ff:cb:e0:a0:ce:25:55:10:13:5d:42:5e:fd:a7: aa:7a:19:77:77:bd:dc:26:bf:15:5a:94:86:d0:74:a4:4a:df: 6d:82:fa:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EKmXHvb7hj/G+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MTI2ODljYTEtYjBhNC00NjA2LTlkODctNWY2OTkzMGJkNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEWGcamktrhJrTFsCGYpq4L2c/E2bg/NtkmO gbuuAusIsCiYxJxbtfnzsVDGZUsSUr15zowMiooBkr6f6bynmOc0S+4qEhR3qgDT BiaUW8q4+NIsCLOfownYoCXLJBvy0KmpIyRaI4h9330ZoVwkP+7NqTqDiKM2Ns+d ePB9cm/k64KVXwXxgqprAtiYQ/yWsy9pmW4fHi3zei2y3kChf08DPOpEb+h0Pz9l RFcODXDF8xDYKDt2D1Brmjrw3D3CmjzG399bR8IjiI532ussTrqQR9sMjmjGD7dh /WIp575wgpnP9jbUtcX+5UKCoNDa+bH8Q1Pi6dSJpz8enyVq6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbK8y17j1PcnrpC/mwHL8x6rgQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGFmOTA5YWItMTE1Ni0z Nzg0LWIwZjgtMTBiN2M4ODE5MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSv2NMu5TzC6zQUIhaQyBG7KWNYUilAX0BrnrKpBisuPIpEU2c7thRA JkANwfAAq7ZheUJH082N94hB646pCT+29o0Gg10zT6ntFyip0MrB4NZ+5+0r6hcW pWNws4KMEWWTK9xIcvZi9jg0kKP5g8CsJI7+P3Yo0ysHVG4BC9aMB353C++6B4rE FbEBnkZ0TA6jkmr/TwfnTss8GTvtHSLn1TDbMwff490z0DRtNtjhrh+BJSTDzBCL I4vjEjrf44hzvM23+9PCRfR3ORn0vJL1lt3/iwCnZnU5FZz/y+CgziVVEBNdQl79 p6p6GXd3vdwmvxValIbQdKRK322C+nY= -----END CERTIFICATE-----Generated at Sun Oct 19 22:41:00 2025 by rpki-client