$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6faab0df-c9ba-328c-8a1d-b6619355d84e.roa File: 6faab0df-c9ba-328c-8a1d-b6619355d84e.roa (raw, json) Hash identifier: JcdCN7X8KA37Edfav3eJl2P4RxRFPqFg8NKKhqZzSEQ= Subject key identifier: 59:EE:DF:5A:96:F3:C1:24:02:61:5A:A8:4D:C9:76:A4:FB:CD:A8:C9 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F9A6872737BB4D52471D334F8 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6faab0df-c9ba-328c-8a1d-b6619355d84e.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 399439 IP address blocks: 66.231.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:72:73:7b:b4:d5:24:71:d3:34:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=9cc0b7fe-4a00-462d-b026-0760fd3b25fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:2d:be:c5:b3:6e:01:ad:41:73:54:de:35: 34:9f:96:90:e1:3f:6f:81:81:03:f1:b8:5f:79:e6: bd:e8:96:53:7d:79:ad:76:c2:77:80:f8:1f:0d:3d: f2:81:d2:2e:c3:e7:8a:6b:ca:a0:53:a2:87:6b:a0: d3:93:36:c1:95:ca:73:89:ae:19:2f:6b:1d:2f:77: 4d:61:78:e4:98:c2:29:b6:40:38:a1:4a:6a:78:3d: 8d:fc:3b:81:51:c0:f0:59:de:31:d3:d5:24:97:e1: 12:39:29:66:d4:2a:48:b7:e3:98:0b:a5:42:bc:d5: fd:2e:2c:ac:85:46:a7:ac:03:f6:b0:04:13:c8:76: 1e:54:29:cf:00:e0:36:23:6a:a4:ac:d9:a3:d1:40: 97:db:0d:ad:33:a2:ed:e2:2a:c0:2a:2a:41:e3:6d: 4c:97:d8:e6:46:9c:73:9e:e7:40:46:d5:9c:7d:03: da:40:d3:6e:9e:02:af:da:45:11:26:e7:7d:61:6b: 04:a1:c8:be:7b:a5:a7:57:26:52:79:57:43:cb:a5: 3c:cc:73:93:dd:c6:90:bd:73:c6:b6:31:f4:5f:02: 5a:16:38:ec:d6:64:29:ff:53:df:6f:40:d0:25:ca: 1a:75:88:54:97:f7:c6:99:d1:ae:5e:d5:07:50:b8: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EE:DF:5A:96:F3:C1:24:02:61:5A:A8:4D:C9:76:A4:FB:CD:A8:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/6faab0df-c9ba-328c-8a1d-b6619355d84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:04:e2:d7:16:0e:99:2d:10:73:26:42:c7:66:da:4a:49:4d: c3:f4:75:b2:c8:71:a0:d9:10:c5:3f:71:eb:1e:d3:85:57:eb: 2e:94:24:6a:36:54:e3:21:d9:ea:6c:09:9f:33:0f:dd:d6:c0: af:01:2f:0e:66:7e:08:c5:5c:52:5b:bc:8f:94:dd:5a:fd:c1: 5a:a3:47:5f:d3:7e:4a:35:d4:94:66:4e:d1:5f:8f:58:04:b8: 44:c4:d3:35:e0:bb:55:aa:a9:2b:25:83:79:71:5c:fa:5c:e8: 86:51:51:35:32:5a:e8:e0:a9:ab:5f:ea:d6:04:41:75:e0:9e: 0d:60:5a:76:36:dd:4d:78:23:49:64:35:b0:fe:06:8e:3b:dc: e2:da:01:58:0a:1c:91:07:4b:34:4a:d4:6d:de:85:4d:17:50: 4a:23:8a:fb:59:50:b6:2f:a1:49:c4:46:3b:be:fa:e6:74:81: a9:96:3c:a7:2c:bc:7c:80:e0:f7:4a:2c:00:fb:e2:0f:30:f7: 8a:0a:3c:61:05:46:16:c4:c7:59:0e:c2:89:57:3c:a3:cd:50: 18:4c:d5:1b:e1:ca:ed:82:fe:9c:3b:af:bd:07:40:c5:6e:e5: 72:b9:e6:c0:e1:5a:92:64:77:0e:98:75:b8:86:88:92:26:3e: f6:ba:32:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHJze7TVJHHTNPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OWNjMGI3ZmUtNGEwMC00NjJkLWIwMjYtMDc2MGZkM2IyNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN8tvsWzbgGtQXNU3jU0n5aQ4T9vgYED8bhf eea96JZTfXmtdsJ3gPgfDT3ygdIuw+eKa8qgU6KHa6DTkzbBlcpzia4ZL2sdL3dN YXjkmMIptkA4oUpqeD2N/DuBUcDwWd4x09Ukl+ESOSlm1CpIt+OYC6VCvNX9Liys hUanrAP2sAQTyHYeVCnPAOA2I2qkrNmj0UCX2w2tM6Lt4irAKipB421Ml9jmRpxz nudARtWcfQPaQNNungKv2kURJud9YWsEoci+e6WnVyZSeVdDy6U8zHOT3caQvXPG tjH0XwJaFjjs1mQp/1Pfb0DQJcoadYhUl/fGmdGuXtUHULgCCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnu31qW88EkAmFaqE3JdqT7zajJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNmZhYWIwZGYtYzliYS0z MjhjLThhMWQtYjY2MTkzNTVkODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIE4tcWDpktEHMmQsdm2kpJTcP0dbLIcaDZEMU/cese04VX6y6UJGo2 VOMh2epsCZ8zD93WwK8BLw5mfgjFXFJbvI+U3Vr9wVqjR1/Tfko11JRmTtFfj1gE uETE0zXgu1WqqSslg3lxXPpc6IZRUTUyWujgqatf6tYEQXXgng1gWnY23U14I0lk NbD+Bo473OLaAVgKHJEHSzRK1G3ehU0XUEojivtZULYvoUnERju++uZ0gamWPKcs vHyA4PdKLAD74g8w94oKPGEFRhbEx1kOwolXPKPNUBhM1Rvhyu2C/pw7r70HQMVu 5XK55sDhWpJkdw6YdbiGiJImPva6Mpc= -----END CERTIFICATE-----Generated at Tue Oct 27 01:52:47 2026 by rpki-client