$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa File: bc9c41e8-1663-357b-8245-e5f5e8b41114.roa (raw, json) Hash identifier: eTSWMM10XoGy9yXqsNNPLYK7teG5/i57hKiF65lodCg= Subject key identifier: F6:76:10:4C:86:11:78:D0:94:0B:EC:CC:A1:3C:ED:C7:7B:81:F4:BB Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584FB3A66C477ED38F86F5E12380 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 21743 IP address blocks: 66.248.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:6c:47:7e:d3:8f:86:f5:e1:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=37209891-f9aa-484a-8e69-3391a862934c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:c5:c9:f4:44:a0:12:1c:65:c3:42:de:d6: a5:88:fb:a5:b2:bc:bc:a1:99:68:c7:ed:66:25:7b: 76:23:0d:d2:9c:6a:0c:d7:80:28:7b:49:0d:85:23: e8:b8:70:42:29:bf:28:a6:92:8c:fe:6c:cf:4a:72: db:02:6a:8e:eb:d1:d1:64:f1:e2:e1:15:a6:c8:13: 7c:84:50:1c:a1:04:e5:0b:31:89:ef:cb:89:a0:4e: 11:91:9d:c5:9c:92:a3:11:83:aa:d0:00:05:9f:aa: 56:2e:a6:6f:7f:68:80:e3:e4:3e:b2:24:b5:da:48: 81:0f:5a:51:d0:f5:68:63:eb:11:78:28:27:05:f1: 5e:db:2d:e6:ba:6c:35:37:39:37:17:00:b5:3f:d9: 08:ce:32:02:c5:38:a7:e3:0a:14:48:ac:61:7f:eb: f3:19:09:87:3c:78:b7:4d:a0:a4:3d:36:82:38:84: 5d:46:3a:e8:0d:b5:28:d2:82:fa:dc:00:d5:f1:f4: ba:ac:52:50:c4:a7:c1:e2:1c:8e:0c:b6:0d:c7:94: d8:0e:8d:a5:50:10:21:74:7f:b0:e3:47:b1:1e:08: d8:93:c2:88:85:25:ae:68:04:a7:59:9a:07:1b:3f: 47:d9:dc:34:f4:a3:90:40:b0:97:84:88:8b:4d:2e: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:76:10:4C:86:11:78:D0:94:0B:EC:CC:A1:3C:ED:C7:7B:81:F4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/bc9c41e8-1663-357b-8245-e5f5e8b41114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 66.248.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:25:fa:80:16:dd:46:7a:66:10:03:79:94:5a:73:8f:51:72: 58:a6:74:82:4b:ba:33:7e:eb:5c:a5:2b:fa:b0:86:9b:41:98: b7:74:5b:65:76:7c:b3:d6:f6:4a:2e:54:d2:e1:61:7d:b1:c0: 56:33:5a:b4:28:6e:31:d9:92:1f:32:54:fb:f9:4c:59:f1:bc: 82:a0:bb:ab:6f:45:7f:98:c7:e8:89:d4:ae:77:a7:55:13:35: 43:00:a6:d1:bb:df:40:6b:81:0f:42:76:ab:b8:71:81:2e:69: d5:27:f6:9e:cf:eb:86:80:93:57:9d:97:3e:3b:4b:c4:ee:e2: 47:fb:03:a0:5c:82:06:29:ff:53:90:0c:f4:cf:b8:31:bc:13: ce:95:ad:fd:a8:5f:f9:1b:73:5e:79:3a:ff:8d:27:dc:31:40: e7:40:52:7c:75:55:46:47:53:79:c3:90:ed:16:49:62:d9:73: 1a:4d:9e:e4:4b:63:f6:b1:50:72:22:1c:86:eb:f0:33:31:d0: 3e:80:be:37:99:8c:98:a2:23:1e:2d:a9:6c:63:fd:90:2b:f2: af:c2:e3:d6:de:52:23:f9:cb:0a:5c:6c:fa:11:42:96:34:87: 41:f2:00:a3:f4:17:da:13:df:04:00:4c:f7:9a:d4:ad:ab:07: 13:f1:b8:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpmxHftOPhvXhI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MzcyMDk4OTEtZjlhYS00ODRhLThlNjktMzM5MWE4NjI5MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7/FyfREoBIcZcNC3taliPulsry8oZlox+1m JXt2Iw3SnGoM14Aoe0kNhSPouHBCKb8oppKM/mzPSnLbAmqO69HRZPHi4RWmyBN8 hFAcoQTlCzGJ78uJoE4RkZ3FnJKjEYOq0AAFn6pWLqZvf2iA4+Q+siS12kiBD1pR 0PVoY+sReCgnBfFe2y3mumw1Nzk3FwC1P9kIzjICxTin4woUSKxhf+vzGQmHPHi3 TaCkPTaCOIRdRjroDbUo0oL63ADV8fS6rFJQxKfB4hyODLYNx5TYDo2lUBAhdH+w 40exHgjYk8KIhSWuaASnWZoHGz9H2dw09KOQQLCXhIiLTS4i+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZ2EEyGEXjQlAvszKE87cd7gfS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvYmM5YzQxZTgtMTY2My0z NTdiLTgyNDUtZTVmNWU4YjQxMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvjzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQl+oAW3UZ6ZhADeZRac49RclimdIJLujN+61ylK/qwhptBmLd0W2V2 fLPW9kouVNLhYX2xwFYzWrQobjHZkh8yVPv5TFnxvIKgu6tvRX+Yx+iJ1K53p1UT NUMAptG730BrgQ9Cdqu4cYEuadUn9p7P64aAk1edlz47S8Tu4kf7A6BcggYp/1OQ DPTPuDG8E86Vrf2oX/kbc155Ov+NJ9wxQOdAUnx1VUZHU3nDkO0WSWLZcxpNnuRL Y/axUHIiHIbr8DMx0D6AvjeZjJiiIx4tqWxj/ZAr8q/C49beUiP5ywpcbPoRQpY0 h0HyAKP0F9oT3wQATPea1K2rBxPxuEQ= -----END CERTIFICATE-----Generated at Sat Nov 14 21:45:18 2026 by rpki-client