$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa File: 16633004-e46a-3fb4-be3b-681f6a980807.roa (raw, json) Hash identifier: b5oyAkyhSm+pDCgw5+8Ypfrl96Q2MeQEgF5H6ZswTHA= Subject key identifier: 47:5F:FF:53:CF:96:09:AF:3C:ED:B3:52:33:66:26:06:9D:77:58:47 Certificate issuer: /CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Certificate serial: 010D0C9F4328584B7F520D9DC0491BA8BA990A40 Authority key identifier: 27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 394763 IP address blocks: 23.182.248.0/24 maxlen: 24 2620:c9:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0d:9d:c0:49:1b:a8:ba:99:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a797d172-f965-4985-96d7-d010e3d89bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5b:a9:68:79:fb:0f:18:39:7b:ef:41:8d:24: 5e:b8:fd:00:61:33:6d:41:46:f7:9f:38:07:96:0d: 6d:a8:20:10:88:6c:c1:c7:eb:8c:e4:f1:39:e0:b2: 9c:e5:a3:95:ba:e2:90:ef:3c:65:72:68:01:2d:a3: 8d:0f:c0:c4:39:8b:46:4e:1b:26:ff:5f:c8:50:b3: e7:40:1d:ae:66:0f:8e:2a:e3:0c:50:c5:be:0f:8f: dd:51:97:5a:2c:72:42:cc:5b:c0:42:f8:79:3e:c6: fe:52:a4:9c:98:0d:48:69:42:27:60:93:4c:11:61: cf:13:62:36:a0:6b:c5:21:fd:30:90:99:d5:05:4b: 52:dd:36:ed:6e:23:60:21:c4:ba:46:0c:cb:14:9f: b0:43:5e:cc:89:ba:f8:7c:de:52:8e:9b:c6:7d:75: fb:1b:42:73:d3:b2:35:e1:25:5b:9f:6c:d3:2a:7e: b0:57:ed:c1:8e:89:40:0a:1b:88:21:42:db:73:5c: 88:38:98:42:97:29:8b:19:84:73:b8:01:4e:b5:32: 9e:23:f1:a5:8b:70:10:46:8f:79:32:6d:55:6a:06: a3:e9:4f:75:74:5e:46:77:6a:8f:b8:49:85:67:51: d6:8e:f5:8e:24:60:4c:3e:f9:70:7c:21:2d:96:78: 33:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5F:FF:53:CF:96:09:AF:3C:ED:B3:52:33:66:26:06:9D:77:58:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/16633004-e46a-3fb4-be3b-681f6a980807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl X509v3 Authority Key Identifier: keyid:27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer sbgp-ipAddrBlock: critical IPv4: 23.182.248.0/24 IPv6: 2620:c9:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:dc:a1:40:47:18:02:12:26:25:99:74:cb:1d:3f:0a:f8:3f: f2:9b:70:a7:69:24:ac:28:00:12:b0:e1:8b:62:9d:72:cb:3c: 52:3d:0c:f8:a3:ab:92:68:17:43:41:92:dc:3a:56:4a:5d:b4: f0:4d:8d:4f:78:48:c5:97:a1:d1:c5:3d:c4:a1:d0:c8:13:5f: f9:3c:ae:b4:ff:b8:84:a8:22:04:8d:22:f1:3f:99:f3:25:5d: c7:96:07:3f:ab:57:19:bd:57:11:32:96:80:0b:41:bb:a3:63: be:2d:23:ca:b5:2d:03:23:c9:4f:e5:e7:07:7b:1d:2e:de:cd: ba:d6:04:1e:59:02:f5:64:ad:51:fa:47:3a:e4:37:de:4e:27: d6:d1:52:ad:77:f1:0d:0e:19:d3:ae:3d:a2:8c:5b:18:b3:b6: db:3a:f3:d8:6c:62:26:e8:07:a0:09:75:61:e0:3f:c2:6a:a9: db:26:be:8c:57:b6:7b:b9:11:cf:e3:a7:a1:36:ae:6b:40:97: 05:9a:d9:a1:37:b9:14:e6:3d:34:78:d9:9a:0d:6c:a7:ea:80: 7a:82:14:8b:1a:4c:28:ad:b0:79:9b:da:0a:43:b8:39:7e:5b: 38:73:70:ee:fc:0c:fb:24:a1:6d:5e:31:0e:e4:58:74:4e:43: 7b:37:0f:2c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEt/Ug2dwEkbqLqZCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZDRhNDAtNzVkMy00MTEyLWE0YzgtNmRlOWNhNTcx ZmZlMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTc5N2QxNzItZjk2NS00OTg1LTk2ZDctZDAxMGUzZDg5YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lupaHn7Dxg5e+9BjSReuP0AYTNtQUb3nzgH lg1tqCAQiGzBx+uM5PE54LKc5aOVuuKQ7zxlcmgBLaOND8DEOYtGThsm/1/IULPn QB2uZg+OKuMMUMW+D4/dUZdaLHJCzFvAQvh5Psb+UqScmA1IaUInYJNMEWHPE2I2 oGvFIf0wkJnVBUtS3TbtbiNgIcS6RgzLFJ+wQ17Mibr4fN5SjpvGfXX7G0Jz07I1 4SVbn2zTKn6wV+3BjolAChuIIULbc1yIOJhClymLGYRzuAFOtTKeI/Gli3AQRo95 Mm1Vagaj6U91dF5Gd2qPuEmFZ1HWjvWOJGBMPvlwfCEtlngzlwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEdf/1PPlgmvPO2zUjNmJgadd1hHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNk NGE0MC03NWQzLTQxMTItYTRjOC02ZGU5Y2E1NzFmZmUvMTY2MzMwMDQtZTQ2YS0z ZmI0LWJlM2ItNjgxZjZhOTgwODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZDRhNDAtNzVkMy00MTEyLWE0 YzgtNmRlOWNhNTcxZmZlLzY2Y2Q0YTQwLTc1ZDMtNDExMi1hNGM4LTZkZTljYTU3 MWZmZS5jcmwwHwYDVR0jBBgwFoAUJ4LHseRo4uvhVpDdLeNlrXlb7MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNkNGE0MC03NWQzLTQxMTItYTRjOC02ZGU5 Y2E1NzFmZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7b4MA8E AgACMAkDBwAmIADJ4AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAptyhQEcYAhImJZl0yx0/Cvg/8ptwp2kk rCgAErDhi2Kdcss8Uj0M+KOrkmgXQ0GS3DpWSl208E2NT3hIxZeh0cU9xKHQyBNf +TyutP+4hKgiBI0i8T+Z8yVdx5YHP6tXGb1XETKWgAtBu6Njvi0jyrUtAyPJT+Xn B3sdLt7NutYEHlkC9WStUfpHOuQ33k4n1tFSrXfxDQ4Z0649ooxbGLO22zrz2Gxi JugHoAl1YeA/wmqp2ya+jFe2e7kRz+OnoTaua0CXBZrZoTe5FOY9NHjZmg1sp+qA eoIUixpMKK2weZvaCkO4OX5bOHNw7vwM+yShbV4xDuRYdE5DezcPLA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:37 2025 by rpki-client