$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa File: bf09cbe5-0f95-3715-878d-025c118cc3f1.roa (raw, json) Hash identifier: P7PeD8PFppErHWF6hjFRa+Cv6uOGRByQoA9Q4SH8TVc= Subject key identifier: 5B:77:44:CA:13:6F:7E:63:F0:38:2D:66:9A:63:67:73:A4:D4:90:31 Certificate issuer: /CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Certificate serial: 010D0C9F4328584ACE0BA5F03EEA803525EE5900 Authority key identifier: E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 18779 IP address blocks: 66.154.117.0/24 maxlen: 24 66.154.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a5:f0:3e:ea:80:35:25:ee:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de84b539-8408-4f2c-8e81-05f7a1b73686 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=2d166542-cce3-4327-bf11-1efcb1a0bf1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0a:a7:9c:db:ec:fa:72:07:59:7f:98:24:ea: ed:7f:2d:36:0b:50:90:14:1c:21:fa:33:09:e6:10: 55:eb:7a:88:0c:4b:4a:4e:3d:8a:7c:cf:ac:64:96: 11:3a:c5:c9:2e:7c:e8:7d:6a:c4:6f:93:cb:a3:ee: ba:52:63:3d:db:1d:fa:f7:5d:4d:c6:32:df:5c:26: 96:61:0f:e7:38:61:f8:96:aa:b5:d7:9e:c9:f2:63: f8:29:fa:ab:29:c0:d0:4d:ea:7d:c9:c8:dc:53:b4: 89:34:a9:23:85:6b:51:d6:8d:39:f1:af:8b:f9:d2: e9:df:ef:84:c4:b4:32:ba:5b:b4:c7:6c:7a:4a:c4: 0d:b3:a8:c9:c1:a4:98:9c:1c:7f:59:8e:15:6a:27: 0e:34:cc:c0:69:08:20:65:e9:89:9a:ad:e6:5c:ff: 41:d8:ee:8d:9d:be:41:cb:a2:75:f7:28:5c:6a:a9: d0:3a:a5:e7:48:1c:75:8c:af:d6:06:7b:2d:88:ec: 59:19:81:1c:23:86:cf:b5:60:d8:38:20:b5:58:d4: e5:0e:3d:d7:b2:8d:96:34:25:9a:c4:05:02:78:81: 45:43:12:42:a8:0b:5c:0e:f6:f5:54:7b:09:0c:6c: 7d:7d:0d:7a:e2:69:d2:8e:25:af:e8:06:25:6e:84: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:77:44:CA:13:6F:7E:63:F0:38:2D:66:9A:63:67:73:A4:D4:90:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/bf09cbe5-0f95-3715-878d-025c118cc3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686/de84b539-8408-4f2c-8e81-05f7a1b73686.crl X509v3 Authority Key Identifier: keyid:E0:D9:1F:59:BF:50:31:E1:96:77:C2:78:8C:20:93:85:05:EB:1F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/de84b539-8408-4f2c-8e81-05f7a1b73686.cer sbgp-ipAddrBlock: critical IPv4: 66.154.117.0/24 66.154.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1b:3e:a5:d3:52:90:45:a8:99:a2:8f:a6:53:53:aa:f9:cb: 07:93:28:0a:65:12:5b:e0:af:ae:1f:aa:fa:7a:28:6b:29:ea: 84:88:89:6c:69:47:db:4a:2f:b6:63:9b:42:e3:05:28:64:32: b0:4e:9b:f9:70:54:51:6d:c5:17:18:19:4a:f5:e7:9e:9c:9d: 1c:43:47:ac:98:18:7a:ad:e7:7d:1f:94:58:d1:1c:aa:09:12: 4f:38:50:d7:db:27:c6:8e:b6:ca:3b:f1:47:5f:86:e6:27:d9: 42:59:b9:0d:34:c7:5f:66:e7:c0:0c:80:d5:e6:70:44:50:f3: b8:c0:bd:20:12:54:87:be:fa:86:17:5d:4e:99:1c:8e:ac:f6: 14:7b:47:8a:28:e2:a2:83:0b:bd:2e:3b:ba:f4:3b:d2:74:87: 18:4e:fa:67:82:55:8b:9b:28:ac:83:09:70:8d:7c:d8:7a:5e: f9:86:b2:ed:27:83:5a:14:56:01:8d:9b:3d:d3:2d:50:b4:78: 35:d5:58:b2:2b:9f:0a:a2:dc:d7:0a:b0:4b:c6:7a:97:ef:1b: ab:bd:1f:54:bf:a7:dd:3a:e0:ce:78:b9:f1:cc:ec:ae:59:6b: 19:93:36:9a:62:8a:7d:92:98:44:e5:4e:f8:f6:b0:90:ce:2e: 74:49:9d:dd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErOC6XwPuqANSXuWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4NGI1MzktODQwOC00ZjJjLThlODEtMDVmN2ExYjcz Njg2MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MmQxNjY1NDItY2NlMy00MzI3LWJmMTEtMWVmY2IxYTBiZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQqnnNvs+nIHWX+YJOrtfy02C1CQFBwh+jMJ 5hBV63qIDEtKTj2KfM+sZJYROsXJLnzofWrEb5PLo+66UmM92x36911NxjLfXCaW YQ/nOGH4lqq1157J8mP4KfqrKcDQTep9ycjcU7SJNKkjhWtR1o058a+L+dLp3++E xLQyulu0x2x6SsQNs6jJwaSYnBx/WY4VaicONMzAaQggZemJmq3mXP9B2O6Nnb5B y6J19yhcaqnQOqXnSBx1jK/WBnstiOxZGYEcI4bPtWDYOCC1WNTlDj3Xso2WNCWa xAUCeIFFQxJCqAtcDvb1VHsJDGx9fQ164mnSjiWv6AYlboSDDQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFt3RMoTb35j8DgtZppjZ3Ok1JAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kZTg0 YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3YTFiNzM2ODYvYmYwOWNiZTUtMGY5NS0z NzE1LTg3OGQtMDI1YzExOGNjM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGU4NGI1MzktODQwOC00ZjJjLThl ODEtMDVmN2ExYjczNjg2L2RlODRiNTM5LTg0MDgtNGYyYy04ZTgxLTA1ZjdhMWI3 MzY4Ni5jcmwwHwYDVR0jBBgwFoAU4NkfWb9QMeGWd8J4jCCThQXrHxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kZTg0YjUzOS04NDA4LTRmMmMtOGU4MS0wNWY3 YTFiNzM2ODYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQpp1AwQA Qpp5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHgbPqXTUpBFqJmij6ZTU6r5yweTKAplElvgr64fqvp6KGsp 6oSIiWxpR9tKL7Zjm0LjBShkMrBOm/lwVFFtxRcYGUr1556cnRxDR6yYGHqt530f lFjRHKoJEk84UNfbJ8aOtso78UdfhuYn2UJZuQ00x19m58AMgNXmcERQ87jAvSAS VIe++oYXXU6ZHI6s9hR7R4oo4qKDC70uO7r0O9J0hxhO+meCVYubKKyDCXCNfNh6 XvmGsu0ng1oUVgGNmz3TLVC0eDXVWLIrnwqi3NcKsEvGepfvG6u9H1S/p9064M54 ufHM7K5ZaxmTNppiin2SmETlTvj2sJDOLnRJnd0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:37:22 2025 by rpki-client