$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa File: a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa (raw, json) Hash identifier: d9ESepPn91YtcsPhZ+43G9fx6r+lPlphaLTQzm0gKXk= Subject key identifier: 5F:57:6E:71:F5:0B:88:BC:44:52:A4:22:5E:1F:BD:84:D1:1B:FB:27 Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Certificate serial: 010D0C9F4328584B0E414DE49E9751E6610D8800 Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 36175 IP address blocks: 66.43.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4d:e4:9e:97:51:e6:61:0d:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=5758f383-4bf6-4409-b8eb-83ed688eddd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:9e:b2:56:ac:94:e3:11:33:1b:11:43:d6: d8:de:15:06:67:d8:62:57:b3:0e:2f:69:b0:de:c6: ee:79:46:46:e0:64:b3:e0:a0:53:ab:5a:63:4e:4f: a5:15:53:be:6a:b1:81:5f:46:65:98:b9:ac:e3:cf: 26:72:b4:b7:07:8f:fd:42:ad:dd:6a:48:02:af:3e: 47:9b:0c:b0:3f:ba:ff:be:36:79:1f:90:39:88:ea: 80:b6:aa:80:f7:68:ac:11:a7:02:7d:81:ef:fe:ac: a6:b4:63:7e:66:20:74:93:74:c7:98:e9:d7:36:6c: a0:0a:9c:e2:07:cf:70:74:2c:ee:b3:b7:45:66:b2: 8e:f1:90:ae:62:19:5f:6b:06:5d:da:d2:2d:a0:bc: 29:fc:c9:00:60:94:03:a8:12:f5:c4:2c:e6:0d:98: d4:66:cf:0b:e0:3f:ec:38:84:2e:8c:9f:76:b0:53: 96:0a:4a:4b:ac:51:99:e1:35:42:3f:5f:3f:6a:eb: 5c:16:b5:c7:68:47:3d:fc:46:82:de:71:04:8d:12: 93:e6:d6:33:d4:9c:17:d3:83:f0:c1:63:85:98:79: c4:77:fd:bd:27:de:85:fe:61:09:5f:d8:e9:4a:7e: eb:5b:ee:a5:82:9e:04:e9:e8:97:ad:b2:55:62:56: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:57:6E:71:F5:0B:88:BC:44:52:A4:22:5E:1F:BD:84:D1:1B:FB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl X509v3 Authority Key Identifier: keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer sbgp-ipAddrBlock: critical IPv4: 66.43.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5d:71:56:95:39:5e:12:eb:d7:cc:ec:5f:c4:b7:e6:91:17: f6:e6:8a:9b:ea:4e:eb:99:63:22:d7:8d:b1:4e:87:3f:2a:ed: 9a:c2:81:14:5f:c3:be:ca:44:38:0f:c0:3f:28:05:fa:e7:76: 16:e5:31:42:04:84:5c:12:86:ad:e5:5a:2d:d6:44:58:53:54: e0:88:ba:2a:5f:c4:59:49:4c:30:7b:b3:7b:f5:55:3e:21:87: 14:d4:b3:91:b5:ae:9a:e4:eb:48:3c:a1:86:78:c3:20:3b:57: d6:2b:f8:cb:fc:35:ad:bb:34:6a:01:37:1e:8b:1e:74:ea:a7: 20:96:92:7c:ec:8a:af:fb:de:76:dc:c6:68:cc:d4:82:cb:f5: cc:80:6f:d2:f0:93:6a:a3:0d:25:54:06:16:76:91:9d:da:50: 00:31:bd:76:cc:cc:ed:11:e1:e9:81:4d:ba:d8:c6:ea:83:24: 63:73:ee:cf:a6:2e:af:26:83:79:07:99:d8:38:f9:9b:1c:11: 03:1d:dd:fd:c6:ce:8e:63:7f:5c:cf:dc:68:8f:31:2b:e1:fb: 2a:55:05:a8:4e:41:a6:06:18:6e:ac:15:d4:aa:8a:f7:04:0e: 76:75:57:3f:68:d8:55:5b:ce:52:b9:47:5a:d7:65:7d:bd:20: f5:ef:79:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU3knpdR5mENiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0ODNmMmYtY2JhYS00YzJiLWE5ZTQtOGFmM2MwZjg2 OTA3MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTc1OGYzODMtNGJmNi00NDA5LWI4ZWItODNlZDY4OGVkZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol+eslaslOMRMxsRQ9bY3hUGZ9hiV7MOL2mw 3sbueUZG4GSz4KBTq1pjTk+lFVO+arGBX0ZlmLms488mcrS3B4/9Qq3dakgCrz5H mwywP7r/vjZ5H5A5iOqAtqqA92isEacCfYHv/qymtGN+ZiB0k3THmOnXNmygCpzi B89wdCzus7dFZrKO8ZCuYhlfawZd2tItoLwp/MkAYJQDqBL1xCzmDZjUZs8L4D/s OIQujJ92sFOWCkpLrFGZ4TVCP18/autcFrXHaEc9/EaC3nEEjRKT5tYz1JwX04Pw wWOFmHnEd/29J96F/mEJX9jpSn7rW+6lgp4E6eiXrbJVYlZp1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9XbnH1C4i8RFKkIl4fvYTRG/snMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4 M2YyZi1jYmFhLTRjMmItYTllNC04YWYzYzBmODY5MDcvYTA0NjdiNGUtNWQzMy0z ZWJiLWE4ZDItM2Y5MDhjMmExY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmU0ODNmMmYtY2JhYS00YzJiLWE5 ZTQtOGFmM2MwZjg2OTA3L2JlNDgzZjJmLWNiYWEtNGMyYi1hOWU0LThhZjNjMGY4 NjkwNy5jcmwwHwYDVR0jBBgwFoAUTmq1lDv9BWbGGz6WTJWAGkgd3sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4M2YyZi1jYmFhLTRjMmItYTllNC04YWYz YzBmODY5MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQisQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBdcVaVOV4S69fM7F/Et+aRF/bmipvqTuuZYyLXjbFOhz8q7ZrCgRRf w77KRDgPwD8oBfrndhblMUIEhFwShq3lWi3WRFhTVOCIuipfxFlJTDB7s3v1VT4h hxTUs5G1rprk60g8oYZ4wyA7V9Yr+Mv8Na27NGoBNx6LHnTqpyCWknzsiq/73nbc xmjM1ILL9cyAb9Lwk2qjDSVUBhZ2kZ3aUAAxvXbMzO0R4emBTbrYxuqDJGNz7s+m Lq8mg3kHmdg4+ZscEQMd3f3Gzo5jf1zP3GiPMSvh+ypVBahOQaYGGG6sFdSqivcE DnZ1Vz9o2FVbzlK5R1rXZX29IPXveU4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:39:10 2025 by rpki-client