$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa File: cf63350e-58a3-37fa-b946-5bfd45a67c05.roa (raw, json) Hash identifier: g5azL2uTgLM70ea2dd2FOei8aIqDmiYNnUV/eWyCXt0= Subject key identifier: EB:79:30:A6:2C:E7:D0:66:A4:12:A9:F7:93:89:65:48:9D:FF:AD:0E Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B4D11E1D8BB47A9CA4810AF80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 401415 IP address blocks: 66.231.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e1:d8:bb:47:a9:ca:48:10:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=a2750c2e-18a2-4d21-a989-e2b7ef4ede01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:93:5a:c0:f3:f9:03:82:a9:c5:4a:b4:36: 95:9f:b1:24:18:0b:b5:11:5e:d2:01:f9:47:de:ac: 77:d7:e9:58:97:10:b8:a8:69:72:1d:8c:85:93:3d: d3:9a:41:3d:25:ca:40:ab:b5:d5:13:65:ad:bc:14: 8d:64:91:d8:81:77:97:5b:16:bd:c6:f4:51:35:d5: af:32:98:c5:65:83:5e:fe:2d:73:6c:6c:fe:12:07: 18:ae:20:92:eb:9c:cf:a2:62:89:41:13:a4:46:78: ed:81:06:08:d0:23:83:59:e5:75:6f:95:60:b8:5e: 98:8f:ea:3b:39:9b:10:c0:91:02:b4:cb:7a:0d:3c: ea:e6:40:7d:93:32:f7:e2:c6:ee:46:ef:95:39:bd: 2f:f4:8a:fc:4d:b4:62:ba:69:e1:f2:a5:40:c9:28: 14:c8:7e:0a:b7:93:e1:96:d6:17:f1:17:a7:ce:ee: a1:be:eb:c0:b2:70:e4:61:89:62:92:08:6e:1b:cb: c9:11:41:d1:c6:49:0a:07:2b:a6:46:5a:fa:96:7a: 9e:ca:91:30:d5:3e:4d:a2:b2:42:79:0d:f5:d9:08: d4:72:71:f8:b4:1b:1e:ef:3d:77:77:72:56:9a:05: dc:98:1c:a7:d9:91:9c:40:9f:03:b3:3a:65:da:01: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:79:30:A6:2C:E7:D0:66:A4:12:A9:F7:93:89:65:48:9D:FF:AD:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cf63350e-58a3-37fa-b946-5bfd45a67c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:42:ee:81:31:04:07:61:f7:37:65:1c:09:61:bb:f9:60:63: dc:8d:c5:9e:12:f1:0e:c6:dc:da:f4:c3:df:30:70:b1:c7:0b: d6:36:c4:98:26:96:54:fc:72:7c:78:8b:45:ba:c6:75:69:66: 5c:6c:78:7d:88:f3:98:33:1e:cf:0f:6c:22:fe:8a:bd:69:9d: d5:54:b5:ca:53:cf:e9:c8:09:60:a9:98:fd:02:a2:9d:5c:7e: 7d:84:0f:80:6c:ad:ad:3b:ae:ce:58:9d:aa:ec:ad:ec:0f:4a: fb:09:8f:02:53:40:d8:fa:4e:1a:c4:62:ee:da:99:72:dc:79: 27:5a:7c:91:e3:39:d8:f5:d5:f6:f4:66:7d:eb:f0:1c:c5:1e: d7:96:1d:8b:88:c0:6b:b5:ee:39:6c:7b:21:8c:2e:4f:97:81: 28:25:40:c6:b6:bd:b3:67:54:25:31:79:71:62:5f:bd:c6:3e: e7:a7:4a:d0:9e:96:ef:ec:8e:40:84:58:9a:c9:22:d7:f1:da: 76:df:d4:4c:42:fb:fb:1e:27:10:37:48:d3:f5:0c:f1:10:f5: 78:3c:1c:52:ea:a7:7c:6a:a0:61:12:74:5b:3b:77:d8:c2:40: a2:4d:8e:44:9b:a5:a0:fc:f2:30:08:1b:a6:54:c2:0e:6a:8d: c6:3d:a4:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEeHYu0epykgQr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YTI3NTBjMmUtMThhMi00ZDIxLWE5ODktZTJiN2VmNGVkZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4iTWsDz+QOCqcVKtDaVn7EkGAu1EV7SAflH 3qx31+lYlxC4qGlyHYyFkz3TmkE9JcpAq7XVE2WtvBSNZJHYgXeXWxa9xvRRNdWv MpjFZYNe/i1zbGz+EgcYriCS65zPomKJQROkRnjtgQYI0CODWeV1b5VguF6Yj+o7 OZsQwJECtMt6DTzq5kB9kzL34sbuRu+VOb0v9Ir8TbRiumnh8qVAySgUyH4Kt5Ph ltYX8Renzu6hvuvAsnDkYYlikghuG8vJEUHRxkkKByumRlr6lnqeypEw1T5NorJC eQ312QjUcnH4tBse7z13d3JWmgXcmByn2ZGcQJ8Dszpl2gG9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt5MKYs59BmpBKp95OJZUid/60OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2Y2MzM1MGUtNThhMy0z N2ZhLWI5NDYtNWJmZDQ1YTY3YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQucCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpC7oExBAdh9zdlHAlhu/lgY9yNxZ4S8Q7G3Nr0w98wcLHHC9Y2xJgm llT8cnx4i0W6xnVpZlxseH2I85gzHs8PbCL+ir1pndVUtcpTz+nICWCpmP0Cop1c fn2ED4Bsra07rs5YnarsrewPSvsJjwJTQNj6ThrEYu7amXLceSdafJHjOdj11fb0 Zn3r8BzFHteWHYuIwGu17jlseyGMLk+XgSglQMa2vbNnVCUxeXFiX73GPuenStCe lu/sjkCEWJrJItfx2nbf1ExC+/seJxA3SNP1DPEQ9Xg8HFLqp3xqoGESdFs7d9jC QKJNjkSbpaD88jAIG6ZUwg5qjcY9pE4= -----END CERTIFICATE-----Generated at Fri Oct 10 14:03:37 2025 by rpki-client