$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b0ddb97-2d06-3017-8171-694d49f3415e.roa File: 7b0ddb97-2d06-3017-8171-694d49f3415e.roa (raw, json) Hash identifier: ACt8s5Cgu0J3JjSUjyAfUWoRxUtlpl0G2HJGs4im0Ww= Subject key identifier: EF:63:D6:E7:43:80:ED:E7:3F:FE:AC:D0:48:1C:FE:61:0D:3F:9D:5A Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F857873353A63E2F892834280 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b0ddb97-2d06-3017-8171-694d49f3415e.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 399439 IP address blocks: 66.115.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:73:35:3a:63:e2:f8:92:83:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=83272a3d-808a-40eb-b981-62228675fba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:d8:32:85:44:c5:17:38:90:07:eb:a9:45: 3c:95:fd:62:fb:d9:dd:aa:8c:eb:d8:3a:49:2d:45: f3:da:fe:0a:90:41:1c:9a:ae:61:7d:cc:8f:03:54: 4f:63:aa:22:f1:dc:30:37:d2:29:b3:04:a0:fc:2d: 20:c4:63:c8:76:63:b0:53:31:1b:a8:20:6f:ad:38: 65:a5:fb:e5:67:91:cb:cd:2e:f2:6c:e7:a8:57:45: 82:d5:65:5b:b8:56:03:03:d9:35:65:aa:5d:90:65: a9:da:bc:fe:04:ba:ee:61:b4:2d:63:1e:38:25:00: 1d:a5:40:2f:55:8e:6b:06:35:2c:de:96:66:6c:49: 60:6c:d2:57:8f:e8:ab:54:21:27:e5:d5:6f:80:51: 0d:95:79:5c:08:d7:23:b2:1d:36:90:34:5b:f3:02: 6a:76:76:38:72:b6:91:b1:f2:9b:d9:ef:99:d0:f3: d9:36:31:98:a8:b0:13:7a:0d:ac:23:52:82:c8:90: c9:a3:14:14:04:55:b1:d2:b6:6f:c1:85:e0:ae:74: 8a:28:6d:cf:a6:64:0f:7b:17:71:62:b9:f2:5f:ae: ce:a7:22:2f:4a:9f:e9:63:66:4e:30:fc:09:e2:0c: 35:c3:95:2e:5a:f5:b9:0e:d2:24:c5:95:b7:2a:db: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:63:D6:E7:43:80:ED:E7:3F:FE:AC:D0:48:1C:FE:61:0D:3F:9D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b0ddb97-2d06-3017-8171-694d49f3415e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:a2:bc:6d:06:c7:7f:21:d7:7c:8c:77:75:c3:5f:9a:32:4b: b7:a5:2d:a0:97:c6:3a:ae:91:23:6d:55:bd:ad:69:16:81:d5: 74:b1:76:48:77:e8:73:e7:bb:9e:bc:2a:5f:a2:e1:ad:b4:25: 3b:78:23:df:ec:df:3d:c4:90:3f:6a:73:3a:96:32:e7:90:82: 21:ae:ce:29:8d:0f:16:2e:6a:c3:c6:e3:37:f9:e4:7e:4b:63: 8e:d6:26:8c:d2:71:2f:93:1e:24:1d:bf:05:40:fe:3c:2e:39: 72:d4:3c:8d:68:15:a5:44:53:a0:e5:d7:6f:21:ac:32:14:2e: ec:09:5e:c1:cf:c9:d1:72:00:34:21:7b:df:2a:a9:66:ea:00: b4:2a:41:e5:4d:31:99:ae:82:0f:b1:f4:dc:33:1a:3f:fd:ae: a6:6d:a3:32:c1:8d:7c:e9:29:a9:88:70:81:07:bf:26:a2:75: ef:bb:a4:5e:14:34:6b:38:fb:c8:b3:f8:ae:46:9b:7d:cd:0b: 80:34:76:c4:df:df:69:7f:27:a9:8a:ba:7e:cf:0d:24:11:b4: 8b:20:16:85:3f:d0:78:8f:e1:5b:e2:be:17:e5:b7:a4:ce:be: 12:20:b4:29:13:0d:e3:e0:c4:9b:2c:89:ce:28:0e:49:45:ac: fb:65:16:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHM1OmPi+JKDQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk ODMyNzJhM2QtODA4YS00MGViLWI5ODEtNjIyMjg2NzVmYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliLYMoVExRc4kAfrqUU8lf1i+9ndqozr2DpJ LUXz2v4KkEEcmq5hfcyPA1RPY6oi8dwwN9IpswSg/C0gxGPIdmOwUzEbqCBvrThl pfvlZ5HLzS7ybOeoV0WC1WVbuFYDA9k1ZapdkGWp2rz+BLruYbQtYx44JQAdpUAv VY5rBjUs3pZmbElgbNJXj+irVCEn5dVvgFENlXlcCNcjsh02kDRb8wJqdnY4craR sfKb2e+Z0PPZNjGYqLATeg2sI1KCyJDJoxQUBFWx0rZvwYXgrnSKKG3PpmQPexdx YrnyX67OpyIvSp/pY2ZOMPwJ4gw1w5UuWvW5DtIkxZW3KtvqdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9j1udDgO3nP/6s0Egc/mENP51aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2IwZGRiOTctMmQwNi0z MDE3LTgxNzEtNjk0ZDQ5ZjM0MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOivG0Gx38h13yMd3XDX5oyS7elLaCXxjqukSNtVb2taRaB1XSxdkh3 6HPnu568Kl+i4a20JTt4I9/s3z3EkD9qczqWMueQgiGuzimNDxYuasPG4zf55H5L Y47WJozScS+THiQdvwVA/jwuOXLUPI1oFaVEU6Dl128hrDIULuwJXsHPydFyADQh e98qqWbqALQqQeVNMZmugg+x9NwzGj/9rqZtozLBjXzpKamIcIEHvyaide+7pF4U NGs4+8iz+K5Gm33NC4A0dsTf32l/J6mKun7PDSQRtIsgFoU/0HiP4Vvivhflt6TO vhIgtCkTDePgxJssic4oDklFrPtlFpk= -----END CERTIFICATE-----Generated at Sun Oct 25 06:40:55 2026 by rpki-client