$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa File: 7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa (raw, json) Hash identifier: jpKgdvnla2nxaYXL1iGurDr9egPT9hQsdTbx+e3HmL0= Subject key identifier: B2:A1:73:A8:3E:EE:72:75:2F:39:C8:81:DA:B5:3F:DD:72:AA:7A:72 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B0B76B6EA2F4895E89E728480 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 66.115.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b6:ea:2f:48:95:e8:9e:72:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=e541cb4c-53df-402f-89e8-74ba36f4364f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:34:37:0d:aa:0f:0f:42:fc:94:cb:1c:a7: 92:d5:63:f4:26:14:c0:00:e4:12:0b:c6:b9:90:b2: 09:5e:3f:ba:52:cf:a7:4f:80:3f:87:84:dc:93:9d: 96:09:99:49:36:70:80:3c:5f:19:bd:24:5e:57:ac: a3:c9:6b:c6:6b:25:1f:90:23:ca:52:71:e4:b2:19: ed:b3:5d:eb:5a:88:e8:28:43:2f:28:7f:96:ab:f9: ec:43:0c:f3:be:81:a8:1d:47:ab:3c:2a:54:d8:f6: 2b:a3:dc:05:ca:13:a3:4c:78:4c:6f:88:1e:cf:cd: d5:a9:60:c8:1a:65:e7:36:fd:2f:cf:8c:08:77:be: ac:44:2c:ec:5e:0c:50:4f:fb:18:31:fc:b4:ac:cc: ee:96:bd:53:85:32:54:87:f7:08:ac:08:46:ed:3a: 5b:0e:7b:a7:59:7d:d4:cd:ef:7a:ac:a5:f6:14:1c: 29:6e:cb:1b:63:aa:c0:d3:5b:63:9d:e8:7d:cf:4f: 17:75:06:63:4d:53:84:74:d9:95:b4:aa:c3:66:be: 72:ef:fb:18:1b:68:0a:64:01:26:96:6f:72:41:49: 21:81:a0:39:9b:47:74:37:81:bb:3f:03:22:8b:40: 5b:a9:56:af:18:08:6a:28:05:cf:e8:b9:6d:b8:db: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A1:73:A8:3E:EE:72:75:2F:39:C8:81:DA:B5:3F:DD:72:AA:7A:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7911e7cb-e060-30df-85a8-f8c9b70ceb74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:c0:81:d6:f0:8d:57:fb:f6:d9:25:1c:ad:16:f2:fc:17:bb: 58:2e:3a:fa:66:2d:72:db:8c:07:88:a8:88:df:a5:e7:93:f7: 92:59:df:05:69:60:ae:bb:ae:fe:19:fb:33:4c:61:e4:a1:07: fb:54:8c:89:af:7c:4d:9c:3e:83:cb:00:4f:3c:75:c0:fd:83: 8a:b6:9d:80:e2:2b:53:03:06:03:b6:39:29:17:c7:5b:b8:c5: 8f:da:74:a7:cd:73:7f:51:ea:ba:ae:f7:69:18:71:86:db:cc: f1:54:33:80:ad:6a:63:fe:98:48:7d:3f:19:a0:4b:dc:81:f1: 86:23:de:9c:ec:da:e9:24:ba:2e:6f:9f:f2:f2:ba:d1:18:bc: f0:28:7d:76:38:bc:36:24:dc:3c:dc:82:86:7c:99:01:27:55: 43:ec:bb:4c:26:2b:a0:ea:78:e7:42:5b:75:f5:ac:c9:b2:81: 5e:86:df:18:2b:8b:c9:9d:f6:ef:62:d6:69:86:3b:27:0a:94: f5:cc:8d:c9:a1:40:c7:09:f5:47:cc:33:5d:33:64:a8:df:25: 60:da:32:f2:82:74:24:9a:6c:ab:b8:d2:fd:e7:90:2a:57:6d: 6c:6b:de:d8:62:39:85:6b:b6:40:66:a2:c5:27:09:d6:90:9d: cc:32:72:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrbqL0iV6J5yhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZTU0MWNiNGMtNTNkZi00MDJmLTg5ZTgtNzRiYTM2ZjQzNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIs0Nw2qDw9C/JTLHKeS1WP0JhTAAOQSC8a5 kLIJXj+6Us+nT4A/h4Tck52WCZlJNnCAPF8ZvSReV6yjyWvGayUfkCPKUnHkshnt s13rWojoKEMvKH+Wq/nsQwzzvoGoHUerPCpU2PYro9wFyhOjTHhMb4gez83VqWDI GmXnNv0vz4wId76sRCzsXgxQT/sYMfy0rMzulr1ThTJUh/cIrAhG7TpbDnunWX3U ze96rKX2FBwpbssbY6rA01tjneh9z08XdQZjTVOEdNmVtKrDZr5y7/sYG2gKZAEm lm9yQUkhgaA5m0d0N4G7PwMii0BbqVavGAhqKAXP6LltuNtBAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKhc6g+7nJ1LznIgdq1P91yqnpyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzkxMWU3Y2ItZTA2MC0z MGRmLTg1YTgtZjhjOWI3MGNlYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM3AgdbwjVf79tklHK0W8vwXu1guOvpmLXLbjAeIqIjfpeeT95JZ3wVp YK67rv4Z+zNMYeShB/tUjImvfE2cPoPLAE88dcD9g4q2nYDiK1MDBgO2OSkXx1u4 xY/adKfNc39R6rqu92kYcYbbzPFUM4CtamP+mEh9PxmgS9yB8YYj3pzs2ukkui5v n/LyutEYvPAofXY4vDYk3DzcgoZ8mQEnVUPsu0wmK6DqeOdCW3X1rMmygV6G3xgr i8md9u9i1mmGOycKlPXMjcmhQMcJ9UfMM10zZKjfJWDaMvKCdCSabKu40v3nkCpX bWxr3thiOYVrtkBmosUnCdaQncwyct0= -----END CERTIFICATE-----Generated at Fri Oct 10 14:03:47 2025 by rpki-client