$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4b8ce488-24c9-37f0-89a2-d9d79d91a401.roa File: 4b8ce488-24c9-37f0-89a2-d9d79d91a401.roa (raw, json) Hash identifier: 1J1nMxc7cgDfzr1SPfHkPAiwBKgUDbRGJ6jj8PsepRE= Subject key identifier: 47:A7:73:59:9A:7C:75:04:0A:51:59:A7:B5:5A:27:84:00:5F:DD:B0 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B08ABF1209C96043E5A221880 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4b8ce488-24c9-37f0-89a2-d9d79d91a401.roa Signing time: Sun 31 Aug 2025 01:00:33 +0000 ROA not before: Sun 31 Aug 2025 01:00:33 +0000 ROA not after: Sat 29 Nov 2025 02:00:33 +0000 asID: 394437 IP address blocks: 66.60.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:ab:f1:20:9c:96:04:3e:5a:22:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Aug 31 01:00:33 2025 GMT Not After : Nov 29 02:00:33 2025 GMT Subject: CN=364a59c0-6cdb-4fe7-8f42-308c83cbf184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:02:20:0b:a2:4b:b8:28:05:38:d4:79:f7:2e: 5a:e9:29:59:e2:a3:8c:e7:2a:dc:fe:cf:9a:14:e6: 4c:64:e5:23:aa:54:5a:9b:a5:1e:fe:33:71:56:7a: 55:ea:ea:76:3f:8b:34:b6:05:c2:92:32:72:b3:87: 35:ee:09:36:72:ea:19:25:31:9d:0c:ad:09:fc:93: af:fe:bd:3f:a1:7b:70:65:08:ea:fb:02:9a:41:5e: 1c:eb:98:2b:e4:7f:d5:70:ca:de:65:2a:cf:d2:ec: fc:6c:6c:d8:8b:e7:18:e3:30:2b:50:c6:4a:12:d5: cb:6b:c3:12:bd:df:fe:48:b5:34:11:45:6f:1f:25: 85:ef:51:e4:87:8f:53:bc:36:c7:04:d6:03:40:2d: 4d:7d:6f:aa:86:6f:25:44:ac:c4:a8:de:7f:4c:87: 87:3f:18:cd:c9:3b:ed:06:a2:69:9c:87:62:ef:c6: 71:f0:42:22:4b:53:77:31:65:2d:b2:36:73:6e:b4: a2:a8:da:26:f3:6a:a2:96:f8:7c:8e:7f:20:29:f7: 26:85:44:3e:a5:f5:80:59:1d:9a:71:b7:b1:ca:d6: b2:9e:f1:b8:39:96:37:f3:1e:a0:68:6b:83:91:13: 6e:bf:03:80:fa:31:6c:4d:78:cf:25:23:18:dd:96: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A7:73:59:9A:7C:75:04:0A:51:59:A7:B5:5A:27:84:00:5F:DD:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4b8ce488-24c9-37f0-89a2-d9d79d91a401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 66.60.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:5a:f9:82:38:58:2a:2f:0d:07:5b:df:43:0e:ed:6c:12:ab: 74:6f:6d:0c:26:f8:92:7c:10:4b:b6:90:8a:95:cf:0f:1e:57: cb:e6:31:4b:b7:71:0c:32:e3:cb:2e:3a:af:53:03:ca:ea:d7: a1:39:76:66:c0:67:29:fb:76:8b:51:e6:db:9b:02:cf:80:e1: 5e:fb:f2:0a:a9:12:25:8c:a8:48:d9:ea:4b:3a:8c:b4:ba:c2: 3d:94:7d:ff:9c:3e:a5:3d:68:29:ce:b3:7c:5b:e5:dc:b8:c9: 68:d3:27:20:f5:95:9c:f1:22:01:02:b8:d4:80:97:85:bd:c0: 53:d8:ad:7c:70:a4:ee:6e:a7:8a:73:52:d5:01:46:9c:f3:d8: 65:4b:f3:62:5d:29:28:53:5c:3f:00:44:2a:21:88:98:64:33: c8:06:c2:80:c8:50:83:c7:da:c5:91:34:b0:7b:c2:b9:34:f6: 27:64:cb:21:d5:b2:4c:7c:86:f3:4e:b6:bf:56:34:3f:7c:87: e6:b8:61:a5:2d:97:e5:6b:0c:ab:a5:82:3e:62:d8:28:5c:3c: 1c:f3:df:96:a9:74:2a:53:b3:b4:26:14:55:79:97:af:7c:7c: 10:1a:f8:71:f6:20:5d:06:eb:a1:cc:66:53:99:fe:a0:0c:38: 99:0b:a3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsIq/EgnJYEPloiGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk MzY0YTU5YzAtNmNkYi00ZmU3LThmNDItMzA4YzgzY2JmMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAIgC6JLuCgFONR59y5a6SlZ4qOM5yrc/s+a FOZMZOUjqlRam6Ue/jNxVnpV6up2P4s0tgXCkjJys4c17gk2cuoZJTGdDK0J/JOv /r0/oXtwZQjq+wKaQV4c65gr5H/VcMreZSrP0uz8bGzYi+cY4zArUMZKEtXLa8MS vd/+SLU0EUVvHyWF71Hkh49TvDbHBNYDQC1NfW+qhm8lRKzEqN5/TIeHPxjNyTvt BqJpnIdi78Zx8EIiS1N3MWUtsjZzbrSiqNom82qilvh8jn8gKfcmhUQ+pfWAWR2a cbexytaynvG4OZY38x6gaGuDkRNuvwOA+jFsTXjPJSMY3ZZgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEenc1mafHUEClFZp7VaJ4QAX92wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNGI4Y2U0ODgtMjRjOS0z N2YwLTg5YTItZDlkNzlkOTFhNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjz1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVa+YI4WCovDQdb30MO7WwSq3RvbQwm+JJ8EEu2kIqVzw8eV8vmMUu3 cQwy48suOq9TA8rq16E5dmbAZyn7dotR5tubAs+A4V778gqpEiWMqEjZ6ks6jLS6 wj2Uff+cPqU9aCnOs3xb5dy4yWjTJyD1lZzxIgECuNSAl4W9wFPYrXxwpO5up4pz UtUBRpzz2GVL82JdKShTXD8ARCohiJhkM8gGwoDIUIPH2sWRNLB7wrk09idkyyHV skx8hvNOtr9WND98h+a4YaUtl+VrDKulgj5i2ChcPBzz35apdCpTs7QmFFV5l698 fBAa+HH2IF0G66HMZlOZ/qAMOJkLo/Q= -----END CERTIFICATE-----Generated at Sat Oct 11 05:07:09 2025 by rpki-client