$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa File: 8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa (raw, json) Hash identifier: 3OF+LK8kS8fMlFmzkTZeT9jEB9UGr9VvkO4IcxonRKU= Subject key identifier: BD:CB:C8:9D:C3:64:5D:BF:71:02:1E:5E:A5:D1:07:4E:ED:62:13:D8 Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Certificate serial: 010D0C9F4328584B0E414DB8253F36C9D4445CD0 Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 36175 IP address blocks: 66.43.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4d:b8:25:3f:36:c9:d4:44:5c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=72927107-d5ff-443a-a5fa-a70040add8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:a9:2c:29:88:66:77:8b:7c:81:90:c5:18: 7d:1d:a3:60:a1:ae:1d:85:38:95:20:17:01:e4:ff: f0:a2:a1:da:9d:6a:e9:6b:54:32:7e:71:bf:ed:74: 36:e7:c5:c6:8d:ea:94:43:a9:34:16:84:ca:9c:53: b6:f7:94:bb:c6:f3:ec:7d:8b:c2:7b:13:4f:ef:ff: 47:74:f9:bc:99:b6:50:9c:87:c2:22:f3:13:71:62: 1e:bf:d1:74:b9:7e:13:ed:20:16:45:cb:8f:57:3d: 62:e8:58:d7:4a:25:c5:b8:bc:b6:2b:49:35:b5:3f: 04:a5:1d:2f:2e:16:30:61:22:34:83:12:d1:06:87: 7e:50:d2:47:14:e7:8d:c1:f7:b9:69:49:dc:76:2a: 3a:de:55:71:43:0a:f1:17:19:51:43:38:0e:da:26: 6f:f2:2e:c0:99:dd:51:61:08:8b:4d:f3:d7:ac:de: 6d:18:7f:8e:bb:36:8c:f9:e0:27:37:bf:01:3b:3a: 61:78:4a:60:72:be:2f:b9:5b:df:6a:b0:14:5e:aa: 64:20:c6:40:f5:f9:04:80:4e:3d:94:b6:69:20:70: 97:fe:a4:7d:20:77:16:c9:a0:1e:65:0e:ef:64:f4: ff:d8:82:89:1a:f7:c1:72:44:dd:fe:1a:e8:30:d6: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CB:C8:9D:C3:64:5D:BF:71:02:1E:5E:A5:D1:07:4E:ED:62:13:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/8d7929c6-072b-3b3c-8f4f-ad1a026a59ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl X509v3 Authority Key Identifier: keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer sbgp-ipAddrBlock: critical IPv4: 66.43.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c2:e4:4c:2a:28:8a:35:9c:6d:f3:ef:72:d1:c1:e7:15:5c: 33:69:34:c2:0a:7d:c1:78:75:c9:a1:eb:c1:68:6d:9e:d9:af: e2:8b:22:a8:43:eb:b5:27:4b:36:1c:26:b6:10:7f:d7:13:8d: 5b:17:7b:6e:b1:8c:3f:2e:2c:27:ab:28:48:05:c2:ad:99:e8: c0:03:28:24:5a:07:c4:01:0d:12:79:4d:8d:03:3f:34:db:d5: 08:70:85:34:db:39:90:3c:bd:21:fd:c5:e8:6d:a4:e6:f7:76: d0:b4:1f:77:98:99:a0:a2:16:13:43:43:71:a2:41:6e:cf:39: 00:35:b1:f7:9a:de:6a:e8:4f:56:30:89:a7:16:06:13:db:7e: c2:0c:df:7d:4e:15:fa:b0:84:05:55:6f:4d:e4:68:4b:74:35: b8:c6:01:e5:ed:c3:ba:5f:a6:4b:eb:12:6c:4a:e8:e2:84:48: c1:ca:ad:a3:6c:7e:70:f2:c3:d5:a7:80:52:6d:10:06:22:f3: f3:6d:6e:dc:3a:ed:68:3e:da:eb:49:28:af:0a:21:cb:25:d4: 99:3d:6f:38:80:d4:73:48:89:d4:bc:f4:d9:4b:be:ee:5a:4c: d2:ec:87:bd:d6:6f:7d:a6:6e:b0:37:4b:04:41:7f:55:07:e1: 74:77:61:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU24JT82ydREXNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0ODNmMmYtY2JhYS00YzJiLWE5ZTQtOGFmM2MwZjg2 OTA3MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzI5MjcxMDctZDVmZi00NDNhLWE1ZmEtYTcwMDQwYWRkOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzepLCmIZneLfIGQxRh9HaNgoa4dhTiVIBcB 5P/woqHanWrpa1QyfnG/7XQ258XGjeqUQ6k0FoTKnFO295S7xvPsfYvCexNP7/9H dPm8mbZQnIfCIvMTcWIev9F0uX4T7SAWRcuPVz1i6FjXSiXFuLy2K0k1tT8EpR0v LhYwYSI0gxLRBod+UNJHFOeNwfe5aUncdio63lVxQwrxFxlRQzgO2iZv8i7Amd1R YQiLTfPXrN5tGH+OuzaM+eAnN78BOzpheEpgcr4vuVvfarAUXqpkIMZA9fkEgE49 lLZpIHCX/qR9IHcWyaAeZQ7vZPT/2IKJGvfBckTd/hroMNagFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3LyJ3DZF2/cQIeXqXRB07tYhPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4 M2YyZi1jYmFhLTRjMmItYTllNC04YWYzYzBmODY5MDcvOGQ3OTI5YzYtMDcyYi0z YjNjLThmNGYtYWQxYTAyNmE1OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmU0ODNmMmYtY2JhYS00YzJiLWE5 ZTQtOGFmM2MwZjg2OTA3L2JlNDgzZjJmLWNiYWEtNGMyYi1hOWU0LThhZjNjMGY4 NjkwNy5jcmwwHwYDVR0jBBgwFoAUTmq1lDv9BWbGGz6WTJWAGkgd3sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4M2YyZi1jYmFhLTRjMmItYTllNC04YWYz YzBmODY5MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQisYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3C5EwqKIo1nG3z73LRwecVXDNpNMIKfcF4dcmh68FobZ7Zr+KLIqhD 67UnSzYcJrYQf9cTjVsXe26xjD8uLCerKEgFwq2Z6MADKCRaB8QBDRJ5TY0DPzTb 1QhwhTTbOZA8vSH9xehtpOb3dtC0H3eYmaCiFhNDQ3GiQW7POQA1sfea3mroT1Yw iacWBhPbfsIM331OFfqwhAVVb03kaEt0NbjGAeXtw7pfpkvrEmxK6OKESMHKraNs fnDyw9WngFJtEAYi8/Ntbtw67Wg+2utJKK8KIcsl1Jk9bziA1HNIidS89NlLvu5a TNLsh73Wb32mbrA3SwRBf1UH4XR3YZI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:33:49 2025 by rpki-client