$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa File: 72016e7f-3aa6-391b-8024-3697c967554c.roa (raw, json) Hash identifier: YvOz6VQ/Uv6ERw0ijU5cecwJX2XAtmK6uanHh7UvRh0= Subject key identifier: AA:93:81:E2:85:47:15:75:C4:60:F9:44:EC:32:78:9A:54:1E:88:0F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E66DA1D2848DF1C557DDB9DA0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 13576 IP address blocks: 66.231.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:1d:28:48:df:1c:55:7d:db:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=9b5cceca-1d74-4cde-a958-bf635fbec685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e3:7c:2e:d8:25:7e:c4:4f:60:cb:82:00:dd: ef:d4:45:80:35:4a:f5:35:32:cd:82:09:ba:a2:95: 18:34:b9:28:83:59:2b:97:19:f3:9e:e5:be:ae:59: b0:84:a5:bc:97:a4:63:8d:d6:a0:34:55:de:fa:35: 6a:30:8c:43:0a:9f:20:9a:d4:34:87:b5:49:8e:d6: 8c:71:2d:36:81:e1:53:65:4e:ae:09:c7:88:ab:37: 57:09:b7:8c:75:8c:b9:a7:c6:78:ea:0b:75:48:c3: f6:af:0f:6f:42:51:52:79:f3:2b:52:91:9a:45:09: f5:df:46:77:b9:31:1e:56:aa:08:3f:ec:eb:c5:e8: 6b:6d:50:26:cf:63:b0:b1:65:44:e4:4a:91:2a:1f: c6:42:79:6b:6e:62:d6:b9:db:3a:ef:3d:e4:1c:a9: 9c:e1:d0:12:64:34:64:03:2f:35:fc:66:f9:b8:b0: 21:8e:cd:47:b6:99:7b:7d:91:22:91:35:fd:4f:59: 79:7b:51:c5:2b:2a:b1:bc:f6:d3:a9:4e:2e:84:b8: 36:2c:24:a9:23:0d:19:7f:df:78:87:fb:05:1a:b4: 21:52:6b:b5:e7:39:cb:82:55:9f:fb:43:af:7f:9f: e2:13:02:a4:8c:aa:fb:ae:2f:39:32:58:93:93:ab: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:93:81:E2:85:47:15:75:C4:60:F9:44:EC:32:78:9A:54:1E:88:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/72016e7f-3aa6-391b-8024-3697c967554c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:53:f5:86:fa:4a:9f:2d:6e:7b:1f:38:0f:c0:8e:bb:ae:06: 8f:5e:7e:de:44:43:96:cc:73:d9:93:48:0d:1e:a1:57:87:a0: 95:ba:89:f2:f3:94:ca:c7:b2:a2:54:7e:77:88:c8:01:46:14: 6e:e8:e5:ce:47:28:5e:ee:87:77:5c:69:85:f9:41:cf:0c:17: 5c:54:bc:42:8d:0f:f3:d0:50:61:8a:40:0c:40:0b:0d:94:d3: a7:4d:e3:bd:1e:dc:dc:5a:d4:9e:81:5a:6c:58:a4:a7:b0:86: c8:2c:5f:18:db:af:db:5a:63:e1:13:e4:35:31:f7:39:38:9f: 85:11:82:81:f1:6d:f2:59:85:66:49:48:17:7b:cd:8b:e4:6e: c4:82:6a:12:a8:23:4e:ef:d2:b5:7f:04:b0:7c:5a:68:4e:9a: 16:63:1f:56:73:78:98:21:8d:3b:c0:1f:28:54:00:f1:a1:a7: b9:06:b6:51:c5:58:bd:d1:df:30:49:d9:da:e0:06:a6:b0:6c: 28:e4:1c:e6:33:df:61:a0:89:20:38:32:8b:0b:cd:d5:cc:92: 04:30:4b:a9:07:ea:80:c8:2d:a7:a1:83:fa:f0:16:3c:a5:40: c4:86:58:2a:cb:a3:3b:03:87:e4:c5:e3:f4:7d:3e:b6:39:d8: f4:33:62:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2h0oSN8cVX3bnaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk OWI1Y2NlY2EtMWQ3NC00Y2RlLWE5NTgtYmY2MzVmYmVjNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+N8LtglfsRPYMuCAN3v1EWANUr1NTLNggm6 opUYNLkog1krlxnznuW+rlmwhKW8l6RjjdagNFXe+jVqMIxDCp8gmtQ0h7VJjtaM cS02geFTZU6uCceIqzdXCbeMdYy5p8Z46gt1SMP2rw9vQlFSefMrUpGaRQn130Z3 uTEeVqoIP+zrxehrbVAmz2OwsWVE5EqRKh/GQnlrbmLWuds67z3kHKmc4dASZDRk Ay81/Gb5uLAhjs1Htpl7fZEikTX9T1l5e1HFKyqxvPbTqU4uhLg2LCSpIw0Zf994 h/sFGrQhUmu15znLglWf+0Ovf5/iEwKkjKr7ri85MliTk6vmsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqTgeKFRxV1xGD5ROwyeJpUHogPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNzIwMTZlN2YtM2FhNi0z OTFiLTgwMjQtMzY5N2M5Njc1NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5T9Yb6Sp8tbnsfOA/AjruuBo9eft5EQ5bMc9mTSA0eoVeHoJW6ifLz lMrHsqJUfneIyAFGFG7o5c5HKF7uh3dcaYX5Qc8MF1xUvEKND/PQUGGKQAxACw2U 06dN470e3Nxa1J6BWmxYpKewhsgsXxjbr9taY+ET5DUx9zk4n4URgoHxbfJZhWZJ SBd7zYvkbsSCahKoI07v0rV/BLB8WmhOmhZjH1ZzeJghjTvAHyhUAPGhp7kGtlHF WL3R3zBJ2drgBqawbCjkHOYz32GgiSA4MosLzdXMkgQwS6kH6oDILaehg/rwFjyl QMSGWCrLozsDh+TF4/R9PrY52PQzYmA= -----END CERTIFICATE-----Generated at Wed Jul 22 02:07:39 2026 by rpki-client