$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa File: ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa (raw, json) Hash identifier: cf3yHAJkC8iFTCGzq2TZ0nvRU4LJ8yacxOjwtGmakQs= Subject key identifier: 78:0C:83:AC:9C:D1:53:11:CF:02:E2:4C:5F:1E:19:5A:B5:85:DD:72 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584B80B769B20DB4DBFD04906D80 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 33139 IP address blocks: 66.49.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:69:b2:0d:b4:db:fd:04:90:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=51bf7481-14c7-4775-a638-de61d646dffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:08:1c:6f:09:66:5c:f0:1c:7c:c4:08:e5: 17:40:50:99:94:5a:3d:ff:4d:f0:11:fa:63:09:77: f8:1d:03:5d:32:ae:99:71:dd:75:13:c8:5d:89:be: 28:07:76:7b:aa:71:42:13:a3:2f:03:ce:45:1e:51: a1:84:41:eb:f2:04:87:73:d3:11:12:52:6c:bf:70: 3b:ad:69:c9:73:f9:5c:77:ed:f8:1b:68:e1:3a:be: 85:78:03:01:38:8f:5b:74:2d:44:b4:b5:89:2a:ff: ea:65:09:09:40:7f:60:24:f5:99:38:a6:73:69:3d: fe:6f:51:8f:3d:c0:79:d2:e3:04:f9:f0:63:50:c4: 8e:dc:96:d2:30:c8:03:e8:b5:f1:cb:f2:e9:80:9e: b1:9f:20:f2:8b:22:1f:12:f1:b2:f8:ac:ea:2e:83: 53:05:83:c6:05:4d:d6:07:4a:74:86:bc:fc:46:fc: c5:14:8c:39:8d:7e:6b:26:84:99:79:23:82:a5:f5: 5c:30:da:31:99:1e:8a:c0:5b:0c:d7:9c:c7:31:52: 8d:96:e2:71:39:22:f9:1d:ba:fa:65:ba:26:a2:e3: f1:80:bb:1e:7b:79:ab:aa:40:4a:0b:23:4f:66:97: 20:e9:48:30:fe:6b:71:7b:13:c2:65:34:c9:1c:d6: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0C:83:AC:9C:D1:53:11:CF:02:E2:4C:5F:1E:19:5A:B5:85:DD:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ae:43:3e:f4:1b:be:f0:e8:91:c4:60:34:be:6c:7f:36:c8: 56:a2:b2:45:b0:8a:78:40:e0:3f:4f:4f:90:2a:da:f4:a3:5e: 38:38:75:0e:91:ea:06:ed:b9:d6:27:ee:22:a7:e1:bc:c7:d4: 09:11:31:20:5b:9a:54:a7:e5:e7:30:ee:d6:75:ee:ec:1d:c5: c9:1c:08:9b:66:09:b0:31:9d:12:5e:0b:2d:2c:c7:5d:6d:de: 6e:0c:b8:32:1d:5d:6a:c5:03:9a:92:df:1f:26:04:9f:27:0e: 93:c6:4a:bc:91:90:22:7f:7f:76:ab:9e:79:18:19:1c:28:49: 35:18:0f:87:19:f9:e1:3d:56:b1:33:71:d1:94:6c:71:15:21: 46:11:7e:fe:db:64:f2:1f:9c:4f:7a:74:fe:11:d5:23:ee:77: 97:1f:fb:c3:78:91:d6:09:85:fa:44:0a:cc:11:b0:ec:a9:3b: b8:46:fc:2b:36:ac:88:46:0e:e4:35:e6:ae:f5:b4:27:93:7f: 92:53:e1:a9:02:9b:62:a5:8e:9e:df:98:9a:e4:10:c5:b7:ee: 3b:ac:a5:2e:d2:f0:e2:52:62:13:e3:9e:5a:a7:64:d7:79:7e: 00:7b:60:90:5c:80:33:3c:90:6c:17:e6:87:62:d3:38:a3:bc: c0:0a:2a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2myDbTb/QSQbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NTFiZjc0ODEtMTRjNy00Nzc1LWE2MzgtZGU2MWQ2NDZkZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6gIHG8JZlzwHHzECOUXQFCZlFo9/03wEfpj CXf4HQNdMq6Zcd11E8hdib4oB3Z7qnFCE6MvA85FHlGhhEHr8gSHc9MRElJsv3A7 rWnJc/lcd+34G2jhOr6FeAMBOI9bdC1EtLWJKv/qZQkJQH9gJPWZOKZzaT3+b1GP PcB50uME+fBjUMSO3JbSMMgD6LXxy/LpgJ6xnyDyiyIfEvGy+KzqLoNTBYPGBU3W B0p0hrz8RvzFFIw5jX5rJoSZeSOCpfVcMNoxmR6KwFsM15zHMVKNluJxOSL5Hbr6 ZbomouPxgLsee3mrqkBKCyNPZpcg6Ugw/mtxexPCZTTJHNaO3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgMg6yc0VMRzwLiTF8eGVq1hd1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvY2U3YzBjNTgtOTg4YS0z NTFhLTlkMDItNGMxMzVhZDcyYjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6uQz70G77w6JHEYDS+bH82yFaiskWwinhA4D9PT5Aq2vSjXjg4dQ6R 6gbtudYn7iKn4bzH1AkRMSBbmlSn5ecw7tZ17uwdxckcCJtmCbAxnRJeCy0sx11t 3m4MuDIdXWrFA5qS3x8mBJ8nDpPGSryRkCJ/f3arnnkYGRwoSTUYD4cZ+eE9VrEz cdGUbHEVIUYRfv7bZPIfnE96dP4R1SPud5cf+8N4kdYJhfpECswRsOypO7hG/Cs2 rIhGDuQ15q71tCeTf5JT4akCm2Kljp7fmJrkEMW37juspS7S8OJSYhPjnlqnZNd5 fgB7YJBcgDM8kGwX5odi0zijvMAKKrA= -----END CERTIFICATE-----Generated at Sun Oct 19 17:51:14 2025 by rpki-client