$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa File: 5af1468e-e773-37fd-8eae-6322af02b768.roa (raw, json) Hash identifier: ZeC+RV2313MOJFlvRTtL8fq+tkfK61MGooxd0Y1dd5o= Subject key identifier: C0:D8:FE:70:66:26:3D:52:06:B6:52:6D:2A:EB:48:EB:F5:27:BD:E0 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584B80B7691F22B93C7C4C320920 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 33139 IP address blocks: 66.49.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:69:1f:22:b9:3c:7c:4c:32:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=8fa79d8a-3bb9-4840-b15a-2ba9a62951a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:db:bc:bb:1d:11:c2:6d:56:bf:69:83:84: f9:ae:fb:43:55:90:05:ab:e6:14:2e:83:c7:97:61: 1b:86:e9:16:36:9d:d2:c8:97:e0:f7:b7:be:dc:27: 8b:51:92:65:4c:bc:5c:02:d1:8b:1c:91:e0:f9:8f: 71:57:56:d2:94:97:74:0b:d3:91:70:23:87:2f:29: 53:d5:c4:c8:5d:17:f7:4c:56:98:02:4d:2f:aa:a2: 49:05:41:7d:61:22:ef:1a:00:12:fd:28:c7:ff:05: 56:32:b0:d3:b7:6c:a2:d0:22:71:fb:6a:fd:76:6c: 48:8d:92:1b:c8:a4:7a:2e:8b:22:c0:d6:2f:08:71: 61:71:9f:fa:03:bc:54:7f:e8:d5:bd:fb:1f:2f:69: e9:d5:aa:8c:d1:a3:53:5e:94:77:21:cb:2e:86:8a: 62:d3:8e:95:e4:8c:6b:76:b7:3f:45:2b:e8:37:6b: f3:3a:19:fe:80:a8:a0:17:18:ce:0d:22:7e:d0:e0: 21:a2:3b:61:3d:bd:c1:25:01:ec:5a:dc:6b:6e:0a: eb:17:ac:25:7f:c6:fe:8e:79:1f:69:34:57:6c:2a: 78:36:f9:e4:43:99:8b:0c:69:0b:52:34:e8:ff:f5: b5:3d:f1:85:05:48:56:51:a6:f7:56:6c:23:2c:b7: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D8:FE:70:66:26:3D:52:06:B6:52:6D:2A:EB:48:EB:F5:27:BD:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/5af1468e-e773-37fd-8eae-6322af02b768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:eb:cf:35:ae:26:c9:fc:7d:de:84:14:79:bb:53:f0:ff:90: e7:c6:32:5d:db:73:31:c7:80:d5:6d:82:f7:68:6b:db:49:0c: 55:73:54:5f:a8:83:dc:05:0d:b3:e3:fe:e0:b2:e7:f1:e1:47: 93:d3:17:0d:b1:12:f2:6c:89:4c:7e:31:08:fa:63:df:62:b5: de:73:b0:79:72:d0:0e:cb:89:6c:08:16:61:3a:ae:a2:e1:47: bf:56:01:b7:af:2d:d6:91:02:e2:e1:d1:21:77:49:47:e3:56: 48:7a:47:6d:eb:ff:4c:06:d0:79:fd:c2:b0:90:94:f5:7e:5d: 66:35:15:42:70:98:c2:2a:f2:69:03:22:ff:09:6e:88:3b:16: 26:ef:19:46:b8:e0:9a:af:17:5e:ce:51:11:f9:52:3c:61:44: b4:38:ee:4d:02:47:0a:45:0c:52:2f:f6:fe:f3:a2:3a:28:e2: e6:f2:8f:d2:82:2b:97:c9:10:ce:1a:89:02:13:bb:4c:86:61: 36:76:27:29:11:99:ad:72:44:de:20:4a:2e:2e:f7:14:ed:bd: a1:68:b0:53:8d:80:8b:0d:d6:69:5b:88:79:a4:12:82:3c:2e: ad:3b:19:95:75:36:08:36:a8:23:d8:da:db:7c:ea:84:81:d9: f2:0a:36:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2kfIrk8fEwyCSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk OGZhNzlkOGEtM2JiOS00ODQwLWIxNWEtMmJhOWE2Mjk1MWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX7bvLsdEcJtVr9pg4T5rvtDVZAFq+YULoPH l2EbhukWNp3SyJfg97e+3CeLUZJlTLxcAtGLHJHg+Y9xV1bSlJd0C9ORcCOHLylT 1cTIXRf3TFaYAk0vqqJJBUF9YSLvGgAS/SjH/wVWMrDTt2yi0CJx+2r9dmxIjZIb yKR6LosiwNYvCHFhcZ/6A7xUf+jVvfsfL2np1aqM0aNTXpR3Icsuhopi046V5Ixr drc/RSvoN2vzOhn+gKigFxjODSJ+0OAhojthPb3BJQHsWtxrbgrrF6wlf8b+jnkf aTRXbCp4NvnkQ5mLDGkLUjTo//W1PfGFBUhWUab3VmwjLLcV8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDY/nBmJj1SBrZSbSrrSOv1J73gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvNWFmMTQ2OGUtZTc3My0z N2ZkLThlYWUtNjMyMmFmMDJiNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3rzzWuJsn8fd6EFHm7U/D/kOfGMl3bczHHgNVtgvdoa9tJDFVzVF+o g9wFDbPj/uCy5/HhR5PTFw2xEvJsiUx+MQj6Y99itd5zsHly0A7LiWwIFmE6rqLh R79WAbevLdaRAuLh0SF3SUfjVkh6R23r/0wG0Hn9wrCQlPV+XWY1FUJwmMIq8mkD Iv8Jbog7FibvGUa44JqvF17OURH5UjxhRLQ47k0CRwpFDFIv9v7zojoo4ubyj9KC K5fJEM4aiQITu0yGYTZ2JykRma1yRN4gSi4u9xTtvaFosFONgIsN1mlbiHmkEoI8 Lq07GZV1Ngg2qCPY2tt86oSB2fIKNtY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:03:43 2025 by rpki-client