$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa File: bc9c41e8-1663-357b-8245-e5f5e8b41114.roa (raw, json) Hash identifier: fUu9OPJv8EF3/1n59KgpcpcQP2WxFnMS7a8EuwUQdb4= Subject key identifier: 78:14:60:79:C6:15:D4:3E:DC:09:45:8F:79:23:29:07:C2:BC:30:B2 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584F119CF3A7F6445023DEA0B980 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 21743 IP address blocks: 66.248.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f3:a7:f6:44:50:23:de:a0:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9d4a74e6-7021-43d5-9a50-5a55260cb362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:41:b8:03:95:72:87:02:c7:d2:84:b6:9c:20: 2c:1c:ba:40:05:c2:9f:88:20:01:64:c4:e4:51:54: 4a:3c:26:60:85:41:20:59:85:f5:c8:18:b2:27:93: 0d:f2:2a:5f:fb:7a:77:f4:3c:48:e3:1d:69:60:54: 1f:7c:f8:dd:5f:97:1a:98:2a:97:67:57:ae:53:fb: 21:4a:1d:02:65:b4:6d:37:f0:da:51:d5:5c:f6:f8: 9d:63:d3:3f:fe:52:b7:e8:76:e7:fd:e2:b2:b1:66: 94:b4:6f:6b:56:51:f5:65:99:6e:f9:a1:c6:26:6f: b3:12:9a:37:9b:03:de:eb:b9:bd:05:32:59:b8:4f: ac:3f:35:e6:63:65:24:a5:09:bf:ff:84:c5:e2:1d: 25:5a:21:17:fc:62:1c:75:23:73:7e:86:16:c3:49: d2:2f:91:e2:c8:33:08:ff:aa:9c:f4:f5:27:4f:8b: 23:b0:96:53:0a:a9:57:d8:31:d3:ad:33:e2:08:d7: fa:27:b2:1a:d2:f5:a7:84:2b:0b:53:43:fa:cc:e6: e8:b7:2a:c5:6c:34:23:7b:8f:72:ad:94:96:b4:71: 7e:26:79:ce:be:0e:c6:8b:24:c3:8b:53:18:ce:18: a0:51:e0:cf:53:85:7f:8b:0e:4f:c9:dc:1d:8a:3e: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:14:60:79:C6:15:D4:3E:DC:09:45:8F:79:23:29:07:C2:BC:30:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6a:01:be:a5:fb:df:85:ed:db:6a:b7:66:d5:64:42:5b:af: 94:7e:16:42:dc:71:a2:4a:db:21:b7:89:19:7b:37:d4:df:32: d4:bd:75:87:7b:81:a0:38:70:b7:00:78:73:d6:77:cb:e7:ff: 1c:30:8d:49:ea:3f:cd:e2:5a:7e:c7:85:26:e2:dd:fe:5e:36: 71:3d:81:2d:4c:b1:87:3a:0a:44:79:9c:57:62:5d:fa:8a:a9: 1e:b5:6e:81:4b:2c:02:f2:da:00:93:6d:fb:ef:e5:0e:f0:0f: e3:77:43:30:97:c5:c2:c6:17:54:fe:79:a1:a4:02:c9:51:55: f0:06:73:eb:60:4e:76:8f:a7:c6:c9:8e:70:9c:b8:17:44:9a: 2a:da:02:15:de:a3:a4:88:72:b8:01:e4:af:11:0e:b8:3a:28: 46:b7:f2:c6:81:a6:a5:4a:9d:1a:12:cd:4b:c8:1b:38:0f:60: 80:55:1b:87:cb:51:74:75:5d:56:8c:1e:f7:56:9a:03:e0:92: 18:72:1b:d3:10:a2:78:c8:ba:29:40:89:cc:6d:68:42:02:55: ba:9e:d9:72:b5:64:63:0f:a7:50:e0:e6:13:f4:24:74:b2:d1: d8:7d:02:64:7f:cd:2f:ad:30:0a:b2:04:03:12:a3:f2:fc:d1: 8e:a9:fa:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPOn9kRQI96guYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWQ0YTc0ZTYtNzAyMS00M2Q1LTlhNTAtNWE1NTI2MGNiMzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEG4A5VyhwLH0oS2nCAsHLpABcKfiCABZMTk UVRKPCZghUEgWYX1yBiyJ5MN8ipf+3p39DxI4x1pYFQffPjdX5camCqXZ1euU/sh Sh0CZbRtN/DaUdVc9vidY9M//lK36Hbn/eKysWaUtG9rVlH1ZZlu+aHGJm+zEpo3 mwPe67m9BTJZuE+sPzXmY2UkpQm//4TF4h0lWiEX/GIcdSNzfoYWw0nSL5HiyDMI /6qc9PUnT4sjsJZTCqlX2DHTrTPiCNf6J7Ia0vWnhCsLU0P6zObotyrFbDQje49y rZSWtHF+JnnOvg7GiyTDi1MYzhigUeDPU4V/iw5Pydwdij4/UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgUYHnGFdQ+3AlFj3kjKQfCvDCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvYmM5YzQxZTgtMTY2My0z NTdiLTgyNDUtZTVmNWU4YjQxMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhqAb6l+9+F7dtqt2bVZEJbr5R+FkLccaJK2yG3iRl7N9TfMtS9dYd7 gaA4cLcAeHPWd8vn/xwwjUnqP83iWn7HhSbi3f5eNnE9gS1MsYc6CkR5nFdiXfqK qR61boFLLALy2gCTbfvv5Q7wD+N3QzCXxcLGF1T+eaGkAslRVfAGc+tgTnaPp8bJ jnCcuBdEmiraAhXeo6SIcrgB5K8RDrg6KEa38saBpqVKnRoSzUvIGzgPYIBVG4fL UXR1XVaMHvdWmgPgkhhyG9MQonjIuilAicxtaEICVbqe2XK1ZGMPp1Dg5hP0JHSy 0dh9AmR/zS+tMAqyBAMSo/L80Y6p+jg= -----END CERTIFICATE-----Generated at Wed Sep 16 07:34:11 2026 by rpki-client