$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa File: be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa (raw, json) Hash identifier: fxbONywlCn6kKsdJP3dK91IDasUbVwkVUEMLF38SzZw= Subject key identifier: 99:B3:13:B1:28:7B:FC:61:B3:E9:E1:85:A4:7A:00:0E:12:DB:76:1F Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584B328C3AC2334C847BE1327F00 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 393336 IP address blocks: 64.40.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3a:c2:33:4c:84:7b:e1:32:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=c8e5a80c-934b-41a2-9bac-26e38363b24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:fa:80:38:2f:57:d2:c0:2e:6d:0c:d0:4d: 97:d8:f7:c7:fe:98:57:cc:dd:cf:be:cd:d1:c3:54: 6c:75:5b:3b:a3:5f:b5:87:e9:eb:79:f5:da:92:01: b1:1f:92:91:89:07:4c:8f:ea:97:b7:64:57:c3:99: 97:84:26:c6:04:24:74:3b:8b:3e:2f:64:69:ef:b2: 29:70:69:bb:d8:30:66:92:b3:10:07:15:7d:99:b6: 0f:c8:d7:de:da:c1:2a:03:93:38:2c:a0:e7:f1:4c: 6e:a1:8e:5b:ab:5f:fd:84:1d:3d:94:3c:95:26:a6: 4c:04:dd:55:a2:9a:c8:75:33:32:03:d9:c0:3d:21: ea:1a:e9:da:87:05:03:18:c4:84:43:72:5a:98:48: b8:14:81:ed:1f:b3:3a:cd:92:2f:d9:0c:f7:0c:e5: b7:f4:c5:0f:80:a0:7d:77:21:49:8b:a6:5a:69:11: e0:b4:84:37:46:93:42:46:d0:bd:95:3b:2d:43:9d: ee:88:d3:9b:54:c2:d2:83:de:b4:1a:af:80:26:1b: 39:b7:f1:61:21:4d:9d:18:51:34:d5:97:80:22:39: a0:35:d6:9f:d4:9c:89:49:c9:a6:5b:99:f7:ad:10: 89:b0:c7:be:4a:24:4b:95:d2:a0:a9:1f:68:45:0a: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B3:13:B1:28:7B:FC:61:B3:E9:E1:85:A4:7A:00:0E:12:DB:76:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/be3cd95f-5dcc-301b-8970-aa9b7b048b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 64.40.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f8:6d:e6:57:42:c9:35:06:d7:4d:1a:0a:f1:d5:71:42:71: 45:9e:2c:5d:42:fc:18:d4:d1:bc:2f:03:32:6c:78:28:89:d9: db:05:32:7f:88:9e:df:cf:fc:40:55:fe:92:6f:71:4f:e4:d6: 29:e7:a3:69:1a:a2:35:58:c3:05:8b:a9:d5:db:7a:cb:28:7e: 67:31:bc:0d:24:4c:c3:5f:fa:4f:dd:41:9e:0d:b3:e2:04:cf: 2a:dc:50:ca:3f:3b:ba:6d:69:52:8e:d6:1a:f0:7e:dd:6c:cb: 0e:17:e3:bb:97:d5:f7:ea:6d:3e:57:9d:31:2b:cc:31:bb:55: a6:99:40:f8:71:e7:b4:01:9d:5e:91:35:aa:dd:d4:18:9f:3d: 3c:d4:67:75:c2:2b:22:f7:a5:09:f4:c7:c6:42:1d:11:c1:b0: 9e:94:b3:4f:b1:d5:34:0b:c5:97:95:14:29:b9:57:4c:ee:13: ff:7e:50:99:26:64:c1:d2:6c:3b:3c:d3:d6:8d:b7:19:de:ad: 66:ec:cc:2f:2f:b6:19:8a:84:52:b8:1b:c3:c4:55:19:2d:d8: 71:49:da:aa:23:fc:7a:24:44:9a:04:00:9b:64:b8:09:2a:eb: 6b:f3:cb:f7:a7:61:db:d7:48:a4:c8:03:73:e4:97:46:f0:40: e7:67:72:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDrCM0yEe+EyfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YzhlNWE4MGMtOTM0Yi00MWEyLTliYWMtMjZlMzgzNjNiMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLL6gDgvV9LALm0M0E2X2PfH/phXzN3Pvs3R w1RsdVs7o1+1h+nrefXakgGxH5KRiQdMj+qXt2RXw5mXhCbGBCR0O4s+L2Rp77Ip cGm72DBmkrMQBxV9mbYPyNfe2sEqA5M4LKDn8UxuoY5bq1/9hB09lDyVJqZMBN1V oprIdTMyA9nAPSHqGunahwUDGMSEQ3JamEi4FIHtH7M6zZIv2Qz3DOW39MUPgKB9 dyFJi6ZaaRHgtIQ3RpNCRtC9lTstQ53uiNObVMLSg960Gq+AJhs5t/FhIU2dGFE0 1ZeAIjmgNdaf1JyJScmmW5n3rRCJsMe+SiRLldKgqR9oRQov0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmzE7Eoe/xhs+nhhaR6AA4S23YfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmUzY2Q5NWYtNWRjYy0z MDFiLTg5NzAtYWE5YjdiMDQ4YjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCgbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf4beZXQsk1BtdNGgrx1XFCcUWeLF1C/BjU0bwvAzJseCiJ2dsFMn+I nt/P/EBV/pJvcU/k1inno2kaojVYwwWLqdXbessofmcxvA0kTMNf+k/dQZ4Ns+IE zyrcUMo/O7ptaVKO1hrwft1syw4X47uX1ffqbT5XnTErzDG7VaaZQPhx57QBnV6R Nard1BifPTzUZ3XCKyL3pQn0x8ZCHRHBsJ6Us0+x1TQLxZeVFCm5V0zuE/9+UJkm ZMHSbDs809aNtxnerWbszC8vthmKhFK4G8PEVRkt2HFJ2qoj/HokRJoEAJtkuAkq 62vzy/enYdvXSKTIA3Pkl0bwQOdncts= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:15 2025 by rpki-client