$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/43906a98-cbae-386a-b6f2-631356abab54.roa File: 43906a98-cbae-386a-b6f2-631356abab54.roa (raw, json) Hash identifier: 3Y1PJ+gzkzXooQbL/ApQDFf/1CM5gC0BDPiTZlJ/oag= Subject key identifier: CE:25:03:63:D8:CE:D2:26:9C:A1:57:51:FE:DD:94:5B:D9:77:DC:EE Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E921FACD8E29D5207225417C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/43906a98-cbae-386a-b6f2-631356abab54.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 63172 IP address blocks: 66.231.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ac:d8:e2:9d:52:07:22:54:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=7abdc205-bb64-4e41-bb03-89482bd453ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:62:ac:62:71:e5:6c:92:eb:f5:69:c3:de: 29:a6:37:bf:0a:bc:d5:57:1e:b2:7a:d7:8f:fb:4f: e0:3f:c8:38:b7:63:34:d1:97:dd:1c:83:35:82:45: 7c:a0:84:7d:9d:de:3a:64:c4:a6:11:b2:45:a9:25: cc:f4:02:c1:34:09:dd:77:9e:0c:fa:56:c8:a0:f4: 05:87:6c:6a:fe:b7:dd:0a:d2:3b:e8:b7:97:77:2f: 48:9a:e0:ae:c5:c9:44:60:86:5e:66:7d:c1:48:3f: 1c:a1:19:8d:c3:83:90:e3:34:52:cb:57:9a:1a:44: 97:27:a9:47:67:6c:42:a9:1b:e0:cd:21:c3:80:72: 54:4b:1c:0f:c9:a4:a4:88:21:fc:81:a4:6d:78:a6: 15:ca:69:06:db:b6:e8:1d:19:e7:2f:01:b1:14:a9: 52:75:3f:77:ef:9a:45:8f:b2:99:93:f4:3c:31:43: 4c:cc:b1:dc:72:ea:f2:d5:79:1e:d3:53:db:60:0b: a5:67:b2:1e:e6:10:80:fc:7e:b1:ab:93:a4:65:ab: fb:10:43:2f:d0:98:f6:14:58:c7:03:57:38:44:6e: 50:89:5b:b0:25:fa:bf:1e:11:dd:1d:ef:fe:1b:75: 82:34:8d:b7:8c:2a:79:36:a5:be:7f:50:3e:0e:0d: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:03:63:D8:CE:D2:26:9C:A1:57:51:FE:DD:94:5B:D9:77:DC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/43906a98-cbae-386a-b6f2-631356abab54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:a5:d8:72:42:be:c1:d1:fa:e9:4f:a1:ca:37:c2:41:ce:7e: 62:cc:dd:d8:06:e7:39:1e:a5:24:76:31:f7:16:70:b0:12:86: fc:6b:82:74:92:eb:46:da:5a:00:c9:01:8d:db:8c:95:66:8a: 38:d6:d7:4f:30:26:13:09:6a:cc:db:2e:17:ba:18:11:97:49: fa:5c:66:a6:40:9e:14:87:1c:66:7c:64:f4:32:fa:54:02:45: fc:31:29:d4:63:b5:2c:73:a8:73:b9:af:51:1e:37:50:d6:0c: 5e:fa:89:fd:b2:56:4b:51:bf:d6:9c:c5:77:f7:0e:42:82:8b: 41:2e:21:36:bd:d9:6d:6d:29:9a:64:98:57:db:d1:bb:43:af: c3:03:55:1d:ba:22:77:36:fc:16:56:0e:d3:a9:bd:85:60:36: 64:7c:ce:82:b2:22:db:56:4b:4a:f5:36:48:23:70:dc:e2:41: 07:c8:06:72:4c:06:e6:1c:9d:16:c4:e1:9e:69:4e:cf:6a:a7: 2d:cc:69:56:d1:92:48:63:87:e6:c7:b8:4d:c3:7a:80:50:4b: b8:e0:59:7d:49:f8:dd:1e:d2:f9:27:84:63:46:20:23:37:99: 59:ad:01:48:80:ab:10:46:91:ea:3b:1d:d6:f5:de:ee:87:f5: 73:34:4f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6zY4p1SByJUF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk N2FiZGMyMDUtYmI2NC00ZTQxLWJiMDMtODk0ODJiZDQ1M2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9hirGJx5WyS6/Vpw94ppje/CrzVVx6yeteP +0/gP8g4t2M00ZfdHIM1gkV8oIR9nd46ZMSmEbJFqSXM9ALBNAndd54M+lbIoPQF h2xq/rfdCtI76LeXdy9ImuCuxclEYIZeZn3BSD8coRmNw4OQ4zRSy1eaGkSXJ6lH Z2xCqRvgzSHDgHJUSxwPyaSkiCH8gaRteKYVymkG27boHRnnLwGxFKlSdT9375pF j7KZk/Q8MUNMzLHccury1Xke01PbYAulZ7Ie5hCA/H6xq5OkZav7EEMv0Jj2FFjH A1c4RG5QiVuwJfq/HhHdHe/+G3WCNI23jCp5NqW+f1A+Dg2qwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4lA2PYztImnKFXUf7dlFvZd9zuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDM5MDZhOTgtY2JhZS0z ODZhLWI2ZjItNjMxMzU2YWJhYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQuceMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANul2HJCvsHR+ulPoco3wkHOfmLM3dgG5zkepSR2MfcWcLAShvxrgnSS 60baWgDJAY3bjJVmijjW108wJhMJaszbLhe6GBGXSfpcZqZAnhSHHGZ8ZPQy+lQC RfwxKdRjtSxzqHO5r1EeN1DWDF76if2yVktRv9acxXf3DkKCi0EuITa92W1tKZpk mFfb0btDr8MDVR26Inc2/BZWDtOpvYVgNmR8zoKyIttWS0r1NkgjcNziQQfIBnJM BuYcnRbE4Z5pTs9qpy3MaVbRkkhjh+bHuE3DeoBQS7jgWX1J+N0e0vknhGNGICM3 mVmtAUiAqxBGkeo7Hdb13u6H9XM0T+0= -----END CERTIFICATE-----Generated at Wed Jul 22 01:16:18 2026 by rpki-client