$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa File: bf09cbe5-0f95-3715-878d-025c118cc3f1.roa (raw, json) Hash identifier: tK6qaih5anK8+xjQ4/VS+M6yMGwtN95KzF8IDb5QtIs= Subject key identifier: E5:8F:28:2F:77:C7:6D:DE:45:03:A1:C1:85:27:27:D5:B3:34:C7:46 Certificate issuer: /CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Certificate serial: 010D0C9F4328584BAEC7C3AA11F29F357BE2E980 Authority key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 18779 IP address blocks: 66.154.117.0/24 maxlen: 24 66.154.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c3:aa:11:f2:9f:35:7b:e2:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=57ba8a39-2951-4345-8309-fc3d0d8299ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:9c:57:5f:53:7a:76:10:2b:31:c5:91:c2: a8:0b:c0:c4:bb:45:82:ec:29:ab:a5:e5:ee:8f:c4: 91:12:f0:9a:c2:07:14:7b:ad:ce:a8:f7:38:72:62: 57:69:31:17:70:eb:98:9b:6f:e2:85:fa:8e:57:ef: 66:8d:2e:89:79:e8:44:19:2d:69:80:a6:0e:34:a4: 0c:58:4e:84:e8:fd:bd:7b:f7:ab:7f:6f:5a:89:71: 75:08:78:f1:7e:f0:b4:e2:ed:e7:39:44:a8:fb:38: ab:7b:df:d7:49:1b:c1:a9:cd:1f:f2:26:3a:42:04: 5c:3e:16:bd:b0:5b:9c:71:18:f0:ee:e2:25:89:88: 40:16:90:47:a4:3c:48:5e:31:af:a0:24:b7:94:d7: 34:40:62:2e:ac:b1:f5:b5:e5:3f:fd:53:b9:9a:e4: 08:c2:bd:e0:ae:f7:59:e1:09:4a:25:a2:51:78:6b: 27:c3:cb:61:51:d7:1b:62:91:89:c5:54:d9:9b:53: e5:36:27:4d:e3:c4:b2:03:65:68:a6:e5:1e:dd:3e: 53:f5:8c:49:16:58:d1:e6:88:dd:6c:70:af:30:92: be:a4:f7:74:73:21:8f:50:7a:53:66:ca:9d:ea:73: 1d:fc:8c:07:6f:7f:73:00:70:ca:22:03:41:43:6d: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:28:2F:77:C7:6D:DE:45:03:A1:C1:85:27:27:D5:B3:34:C7:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl X509v3 Authority Key Identifier: keyid:E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer sbgp-ipAddrBlock: critical IPv4: 66.154.117.0/24 66.154.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:30:9b:18:6d:ef:51:c2:0b:d0:47:f6:10:27:fb:21:b5:13: 7a:3a:1e:b3:86:b4:85:db:e9:59:1d:53:46:27:19:d5:b9:9d: 88:0f:e1:b1:2f:28:81:88:a3:3d:75:8c:e0:97:13:c5:a1:5e: c7:70:b6:36:80:ee:d0:4a:8e:8b:90:52:85:d6:f9:9c:e8:db: 4d:94:c0:a2:b6:e6:c4:bf:60:94:07:a3:e4:ae:ef:bc:b3:80: d6:0b:f6:47:e3:a1:0d:81:a5:f8:9e:db:91:e7:f2:90:a6:53: d9:ce:07:9c:ca:0b:c7:5b:7f:64:33:f6:19:f1:aa:40:ff:10: 2f:f5:57:56:cc:cc:5c:4b:c2:ab:9b:36:f3:8c:a2:e8:e5:9a: 93:3f:ec:58:ce:18:d2:a4:4b:6b:83:e4:41:d8:35:4f:37:2a: 00:4c:f4:38:2d:aa:7e:9f:0d:81:04:d9:c4:13:35:a2:ea:7e: 30:e6:6f:4d:52:57:43:3d:5d:49:a5:de:2e:fc:73:e9:02:80: c2:d7:90:be:00:5b:9d:0e:9a:39:73:70:cc:23:ab:e2:d3:4a: 98:5f:43:3e:b3:af:fc:ca:ef:3b:92:91:15:2b:d4:f7:19:03: 66:d1:f7:30:05:c2:56:6e:f8:d7:86:39:f0:88:e9:71:45:ce: 1d:3c:4d:42 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuux8OqEfKfNXvi6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4NGI1MzktODQwOC00ZjJjLThlODEtMDVmN2ExYjcz Njg2MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NTdiYThhMzktMjk1MS00MzQ1LTgzMDktZmMzZDBkODI5OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYacV19TenYQKzHFkcKoC8DEu0WC7CmrpeXu j8SREvCawgcUe63OqPc4cmJXaTEXcOuYm2/ihfqOV+9mjS6JeehEGS1pgKYONKQM WE6E6P29e/erf29aiXF1CHjxfvC04u3nOUSo+zire9/XSRvBqc0f8iY6QgRcPha9 sFuccRjw7uIliYhAFpBHpDxIXjGvoCS3lNc0QGIurLH1teU//VO5muQIwr3grvdZ 4QlKJaJReGsnw8thUdcbYpGJxVTZm1PlNidN48SyA2VopuUe3T5T9YxJFljR5ojd bHCvMJK+pPd0cyGPUHpTZsqd6nMd/IwHb39zAHDKIgNBQ20I+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOWPKC93x23eRQOhwYUnJ9WzNMdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kZTg0 YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3YTFiNzM2ODYvYmYwOWNiZTUtMGY5NS0z NzE1LTg3OGQtMDI1YzExOGNjM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGU4NGI1MzktODQwOC00ZjJjLThl ODEtMDVmN2ExYjczNjg2L2RlODRiNTM5LTg0MDgtNGYyYy04ZTgxLTA1ZjdhMWI3 MzY4Ni5jcmwwHwYDVR0jBBgwFoAU4NkfWb9QMeGWd8J4jCCThQXrHxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kZTg0YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3 YTFiNzM2ODYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQpp1AwQA Qpp5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACcwmxht71HCC9BH9hAn+yG1E3o6HrOGtIXb6VkdU0YnGdW5 nYgP4bEvKIGIoz11jOCXE8WhXsdwtjaA7tBKjouQUoXW+Zzo202UwKK25sS/YJQH o+Su77yzgNYL9kfjoQ2Bpfie25Hn8pCmU9nOB5zKC8dbf2Qz9hnxqkD/EC/1V1bM zFxLwqubNvOMoujlmpM/7FjOGNKkS2uD5EHYNU83KgBM9Dgtqn6fDYEE2cQTNaLq fjDmb01SV0M9XUml3i78c+kCgMLXkL4AW50OmjlzcMwjq+LTSphfQz6zr/zK7zuS kRUr1PcZA2bR9zAFwlZu+NeGOfCI6XFFzh08TUI= -----END CERTIFICATE-----Generated at Mon Nov 3 08:54:30 2025 by rpki-client