$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/0c31e8b3-9186-3479-bcba-52f57503bf6e.roa File: 0c31e8b3-9186-3479-bcba-52f57503bf6e.roa (raw, json) Hash identifier: T/A8XApFgd625svcCXxCWwUvVKBoHWrdPUmkZS9lIXY= Subject key identifier: 24:CC:B5:71:F9:92:0A:52:89:37:C9:18:99:B1:62:23:90:AA:37:95 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584B80B769A1CB485BA76DA3D240 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/0c31e8b3-9186-3479-bcba-52f57503bf6e.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 33139 IP address blocks: 66.49.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:69:a1:cb:48:5b:a7:6d:a3:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=ddc59098-edfc-4d19-aa99-14fa1c642953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:74:02:5c:9f:05:5b:50:4a:ef:a8:b2:5a: 59:bd:72:00:81:0e:b8:38:0f:bd:ec:37:8f:5c:0b: 45:28:8a:87:43:dd:e4:53:0c:49:ea:fe:dd:24:f9: 1e:28:5a:06:23:e4:c2:9e:13:97:d5:75:16:b2:fb: dc:18:9d:c6:77:0e:36:3b:3a:ab:af:06:d3:bc:b8: 29:f0:8b:f8:b7:05:53:71:bc:1c:8f:13:e1:17:a8: 1e:3d:a7:da:61:07:a5:6c:32:25:24:90:73:7f:b2: 2f:92:d4:d7:fd:b6:7a:b4:4f:6f:b3:e5:cc:4b:f6: ba:a0:a4:61:69:af:7b:be:9b:e5:01:33:92:e4:9b: 0c:99:be:cd:6b:aa:43:46:f3:8e:25:37:e1:d4:7f: a2:23:be:a9:e4:e5:c8:c9:45:4e:c9:17:8d:a5:29: 75:c7:bf:1b:fb:e8:68:8d:38:6e:da:05:ce:83:39: 15:9a:79:92:eb:79:d6:96:d0:7c:b3:0c:a0:eb:2e: 71:5b:ed:d0:ce:ee:ba:4d:fd:80:0e:0e:7b:85:7c: 09:dc:6a:c4:84:b0:6b:c5:f9:48:85:a3:22:5c:cf: c0:89:7b:bc:d4:ba:4e:bb:3e:fd:96:ae:ca:1e:3e: c2:64:6a:66:79:39:b3:e1:1e:c3:2d:33:e3:38:57: ba:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CC:B5:71:F9:92:0A:52:89:37:C9:18:99:B1:62:23:90:AA:37:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/0c31e8b3-9186-3479-bcba-52f57503bf6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a5:45:ec:51:45:27:b0:63:3c:60:29:32:60:53:f1:e1:f7: aa:97:fe:c2:f4:6a:20:cd:91:5b:20:84:7e:35:01:2f:32:92: 4a:d1:92:0e:54:83:08:89:bb:f0:cc:b1:ad:8d:fc:51:57:16: 54:7d:b9:5e:07:fe:2e:74:af:e4:e1:2f:e6:b2:ab:42:d4:a4: 7d:a0:81:51:6f:ec:ff:68:9a:4a:8b:7a:e6:3c:8f:06:46:34: e9:bf:a8:f9:9b:81:20:90:3c:88:67:f7:05:c3:ec:e3:3e:33: 35:57:a0:d4:66:30:54:61:04:ca:e8:fe:08:e8:48:68:14:5a: dd:61:ed:59:06:f7:ff:fc:2a:f8:34:33:96:26:26:45:e2:e7: aa:41:da:c6:05:ad:c8:ae:b5:fd:c1:83:a6:64:1d:12:98:cc: f5:ec:74:70:ba:0b:81:2b:ed:96:8e:97:ee:2c:0e:47:43:37: ca:84:17:1e:08:6e:aa:6a:ff:4d:d5:1e:f0:35:35:30:36:34: bb:d6:29:7e:8e:9c:c2:e2:d6:25:d0:32:69:33:23:e3:69:f6: 59:27:6d:ed:ef:0f:88:43:43:9b:fe:4d:cc:9f:71:97:d4:ec: f5:43:c7:4c:7d:65:9a:30:82:8d:2c:5b:d4:d1:8b:b4:1e:f9: a5:19:be:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2mhy0hbp22j0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZGRjNTkwOTgtZWRmYy00ZDE5LWFhOTktMTRmYTFjNjQyOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi50AlyfBVtQSu+oslpZvXIAgQ64OA+97DeP XAtFKIqHQ93kUwxJ6v7dJPkeKFoGI+TCnhOX1XUWsvvcGJ3Gdw42OzqrrwbTvLgp 8Iv4twVTcbwcjxPhF6gePafaYQelbDIlJJBzf7IvktTX/bZ6tE9vs+XMS/a6oKRh aa97vpvlATOS5JsMmb7Na6pDRvOOJTfh1H+iI76p5OXIyUVOyReNpSl1x78b++ho jThu2gXOgzkVmnmS63nWltB8swyg6y5xW+3Qzu66Tf2ADg57hXwJ3GrEhLBrxflI haMiXM/AiXu81LpOuz79lq7KHj7CZGpmeTmz4R7DLTPjOFe6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTMtXH5kgpSiTfJGJmxYiOQqjeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMGMzMWU4YjMtOTE4Ni0z NDc5LWJjYmEtNTJmNTc1MDNiZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWlRexRRSewYzxgKTJgU/Hh96qX/sL0aiDNkVsghH41AS8ykkrRkg5U gwiJu/DMsa2N/FFXFlR9uV4H/i50r+ThL+ayq0LUpH2ggVFv7P9omkqLeuY8jwZG NOm/qPmbgSCQPIhn9wXD7OM+MzVXoNRmMFRhBMro/gjoSGgUWt1h7VkG9//8Kvg0 M5YmJkXi56pB2sYFrciutf3Bg6ZkHRKYzPXsdHC6C4Er7ZaOl+4sDkdDN8qEFx4I bqpq/03VHvA1NTA2NLvWKX6OnMLi1iXQMmkzI+Np9lknbe3vD4hDQ5v+TcyfcZfU 7PVDx0x9ZZowgo0sW9TRi7Qe+aUZvhQ= -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:01 2025 by rpki-client