$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a3437fe2-461a-3f03-a654-2a95ee698536.roa File: a3437fe2-461a-3f03-a654-2a95ee698536.roa (raw, json) Hash identifier: /YEu1saUZk9Je7/BxsVEMiPUgpS3Q+zKwSvBpFvMd8c= Subject key identifier: F0:31:E8:7B:B0:80:A3:60:9D:C1:03:0E:41:76:93:96:B4:53:1F:38 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B4D11E194ED3CD9574DB5ADE0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a3437fe2-461a-3f03-a654-2a95ee698536.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 401415 IP address blocks: 66.115.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e1:94:ed:3c:d9:57:4d:b5:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=5ff882af-15b1-4906-95f8-57e69c8e8be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:37:1a:a7:76:56:fe:fb:56:67:e2:19:59:37: c1:11:2d:73:2a:40:8a:d6:17:ae:33:73:e0:e0:65: ae:8c:34:9a:4d:48:44:6e:01:77:43:94:df:52:f5: a6:a9:b4:85:cd:59:9f:d6:5f:7f:19:e6:71:83:1a: ad:a0:f8:d8:95:dc:82:02:a1:5e:bc:e0:a4:1d:0c: 9c:14:61:3d:cc:04:45:3d:6a:96:40:ea:9b:29:67: 66:b7:7e:15:b7:2c:9d:27:bb:f5:54:fc:0e:95:df: 19:36:07:c0:77:44:83:4c:70:35:ba:17:88:70:19: 51:9e:d7:ec:7d:fb:e5:58:3e:0c:fd:a4:2c:62:72: 3a:c8:78:f8:22:48:56:94:d5:e3:e0:79:ac:f7:df: d8:e7:99:ba:24:94:7b:df:8e:f3:0d:46:49:58:1a: 11:80:ec:a7:4e:c2:5f:0e:4e:e0:ad:2f:ff:59:aa: e7:82:44:9b:78:86:b1:bd:14:b6:b7:6d:10:1c:3a: a0:62:e8:79:f7:66:dc:11:3f:38:0e:05:80:db:62: b6:49:01:67:72:7c:b3:0c:bc:83:da:ff:32:24:54: 75:31:d1:61:8c:f9:6e:e7:4a:90:d5:58:91:10:fe: f6:0b:8c:9b:2e:9e:54:0c:cf:df:7c:ce:98:f5:9f: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:31:E8:7B:B0:80:A3:60:9D:C1:03:0E:41:76:93:96:B4:53:1F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a3437fe2-461a-3f03-a654-2a95ee698536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fe:8b:f2:8d:b2:e2:49:9a:a2:04:13:f0:1e:78:ff:0f:af: cb:01:d6:bd:5d:78:d0:36:ec:68:e0:bc:91:07:b0:02:a6:09: fd:1d:a5:7c:54:bf:b2:13:da:8c:3e:69:42:1c:1e:b0:f3:93: 4d:9d:af:0b:5b:14:12:f5:43:d2:48:9f:3c:c5:00:00:f1:d0: 90:62:f8:22:61:aa:19:0b:78:63:b1:b0:77:69:89:c5:56:cb: 70:c8:0c:38:ba:8d:32:68:9b:09:d1:46:5b:43:d3:47:09:01: 05:8b:21:ed:cb:97:f2:47:4a:ab:f1:3e:8c:29:7a:a8:52:c6: 0b:10:9c:a6:56:55:9b:59:c8:b2:09:d5:c6:57:a5:8d:78:e6: b9:d4:73:ed:7c:16:03:53:77:5f:9c:ff:d5:d9:48:7f:8b:ae: b8:b4:c9:c8:00:93:2e:3c:96:53:a0:e4:0c:55:63:69:ca:ee: 8c:cc:d6:fb:36:b5:24:7f:36:3a:ec:51:77:19:9f:40:6f:b8: 97:44:7c:9b:1e:b2:73:12:f6:06:70:e0:58:c5:c4:68:2c:67: 60:28:45:cc:7d:0a:49:29:8f:f7:af:8f:39:b3:fd:c8:9c:8b: 9f:0f:c3:9b:59:e2:5b:76:96:9a:2f:05:0b:2a:07:54:98:12: 29:a8:b9:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEeGU7TzZV021reAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NWZmODgyYWYtMTViMS00OTA2LTk1ZjgtNTdlNjljOGU4YmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzcap3ZW/vtWZ+IZWTfBES1zKkCK1heuM3Pg 4GWujDSaTUhEbgF3Q5TfUvWmqbSFzVmf1l9/GeZxgxqtoPjYldyCAqFevOCkHQyc FGE9zARFPWqWQOqbKWdmt34VtyydJ7v1VPwOld8ZNgfAd0SDTHA1uheIcBlRntfs ffvlWD4M/aQsYnI6yHj4IkhWlNXj4Hms99/Y55m6JJR7347zDUZJWBoRgOynTsJf Dk7grS//WarngkSbeIaxvRS2t20QHDqgYuh592bcET84DgWA22K2SQFncnyzDLyD 2v8yJFR1MdFhjPlu50qQ1ViREP72C4ybLp5UDM/ffM6Y9Z8CAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAx6HuwgKNgncEDDkF2k5a0Ux84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYTM0MzdmZTItNDYxYS0z ZjAzLWE2NTQtMmE5NWVlNjk4NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP+i/KNsuJJmqIEE/AeeP8Pr8sB1r1deNA27GjgvJEHsAKmCf0dpXxU v7IT2ow+aUIcHrDzk02drwtbFBL1Q9JInzzFAADx0JBi+CJhqhkLeGOxsHdpicVW y3DIDDi6jTJomwnRRltD00cJAQWLIe3Ll/JHSqvxPowpeqhSxgsQnKZWVZtZyLIJ 1cZXpY145rnUc+18FgNTd1+c/9XZSH+Lrri0ycgAky48llOg5AxVY2nK7ozM1vs2 tSR/NjrsUXcZn0BvuJdEfJsesnMS9gZw4FjFxGgsZ2AoRcx9Ckkpj/evjzmz/cic i58Pw5tZ4lt2lpovBQsqB1SYEimoubQ= -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:24 2025 by rpki-client