$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa File: 8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa (raw, json) Hash identifier: 3CT3HT+Q35yDFEAJ6RDykkXCYDZiBjOIc07wALnJzHI= Subject key identifier: 21:88:98:35:14:A2:1B:D9:4D:DF:87:76:49:DB:67:1F:8C:0D:D5:41 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584AEE2688513DB9F7CFD4D39EA8 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 36352 IP address blocks: 66.248.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:88:51:3d:b9:f7:cf:d4:d3:9e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=43f5b05b-2802-4d8f-8212-d020700dade3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:81:e6:d3:a6:e2:0d:ef:01:49:14:6b:fe:a7: ae:88:56:08:90:a7:48:82:cc:4b:44:54:0e:c1:ac: 5c:bd:28:f6:66:a9:75:ad:f5:38:c2:5f:cb:f4:09: 8a:23:22:6d:6e:a8:93:50:ce:2b:98:08:c0:92:d6: 34:b1:67:e2:da:77:38:a4:f8:f8:27:7b:10:34:a4: 25:fb:a0:ca:65:60:2d:e0:c2:ac:72:c8:03:e1:31: 28:a4:dd:78:1e:71:16:7c:bc:8b:a3:6f:9c:c3:34: 77:30:ed:0e:13:4c:45:9a:c4:f1:7b:7d:dd:7e:84: 52:71:94:f3:e6:06:19:88:79:dc:6e:0d:73:53:0c: 91:46:78:1a:f2:e4:3d:c5:b7:9b:40:66:6c:ed:ef: d9:0d:aa:55:08:8a:48:7f:bd:16:d3:78:09:d7:66: 08:14:ae:d1:89:cc:f4:72:18:b7:4b:b9:30:66:6a: cb:d4:01:d7:d3:65:c0:9c:7e:fc:0a:9f:85:83:2c: 5c:0e:a8:33:5c:5f:ed:42:57:ee:3f:38:5a:84:8b: 69:c7:2c:77:12:75:62:bd:ac:f7:e1:70:ce:f7:79: 76:71:b3:ba:96:74:5c:7c:48:c1:66:1e:ba:4d:6a: d8:41:3d:bc:73:9d:0b:69:e1:55:62:3d:61:15:28: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:88:98:35:14:A2:1B:D9:4D:DF:87:76:49:DB:67:1F:8C:0D:D5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:72:34:4a:23:4a:f6:4f:cc:95:5e:b1:8c:68:9e:08:36:6f: 48:33:19:62:14:85:f2:a4:84:c5:43:85:9e:5b:bd:53:25:99: 59:34:7e:6f:f5:7b:c8:e1:10:0b:31:be:e6:d3:f6:7a:29:77: 2a:9f:00:b6:84:ab:7c:df:5c:ff:17:d5:13:b6:c8:1a:76:8e: bc:52:64:80:89:ee:f6:93:2e:14:2d:e2:d6:e8:32:f1:6c:92: 7a:82:a4:00:2e:92:97:77:27:67:53:f3:cc:14:66:44:65:b0: 2f:a8:db:c9:fb:3e:94:9b:78:de:24:52:06:d3:1d:38:a9:32: e8:43:61:f6:55:75:58:26:24:83:6c:8b:45:c5:b0:58:05:18: 81:ef:87:b7:7d:2c:e1:d2:f3:a2:ca:dd:08:dc:dd:a7:39:66: c1:8a:af:22:92:5b:09:93:48:da:3c:4e:22:a5:cc:d4:03:05: 95:13:52:e2:b4:5f:fe:8f:08:bb:56:30:a4:ef:61:af:62:84: 30:3c:a0:12:62:06:84:fe:a6:5b:12:77:87:9c:93:f9:ab:29: 3e:1d:50:a6:fb:a5:42:31:cd:a4:cb:40:37:a4:24:d6:b6:5e: 36:b3:65:f4:6f:ee:87:49:62:7b:00:ef:e6:32:3d:2d:f3:b8: 84:83:b9:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJohRPbn3z9TTnqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NDNmNWIwNWItMjgwMi00ZDhmLTgyMTItZDAyMDcwMGRhZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoHm06biDe8BSRRr/qeuiFYIkKdIgsxLRFQO waxcvSj2Zql1rfU4wl/L9AmKIyJtbqiTUM4rmAjAktY0sWfi2nc4pPj4J3sQNKQl +6DKZWAt4MKscsgD4TEopN14HnEWfLyLo2+cwzR3MO0OE0xFmsTxe33dfoRScZTz 5gYZiHncbg1zUwyRRnga8uQ9xbebQGZs7e/ZDapVCIpIf70W03gJ12YIFK7Ricz0 chi3S7kwZmrL1AHX02XAnH78Cp+FgyxcDqgzXF/tQlfuPzhahItpxyx3EnVivaz3 4XDO93l2cbO6lnRcfEjBZh66TWrYQT28c50LaeFVYj1hFSiFHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGImDUUohvZTd+HdknbZx+MDdVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOGJiNTRmOGMtNGMwMS0z Y2U2LTllZGQtYmFmZDdhMDNiNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERyNEojSvZPzJVesYxongg2b0gzGWIUhfKkhMVDhZ5bvVMlmVk0fm/1 e8jhEAsxvubT9nopdyqfALaEq3zfXP8X1RO2yBp2jrxSZICJ7vaTLhQt4tboMvFs knqCpAAukpd3J2dT88wUZkRlsC+o28n7PpSbeN4kUgbTHTipMuhDYfZVdVgmJINs i0XFsFgFGIHvh7d9LOHS86LK3Qjc3ac5ZsGKryKSWwmTSNo8TiKlzNQDBZUTUuK0 X/6PCLtWMKTvYa9ihDA8oBJiBoT+plsSd4eck/mrKT4dUKb7pUIxzaTLQDekJNa2 XjazZfRv7odJYnsA7+YyPS3zuISDuek= -----END CERTIFICATE-----Generated at Mon Oct 27 04:55:16 2025 by rpki-client