$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8e74bc09-e4cb-34f4-995b-15865641087b.roa File: 8e74bc09-e4cb-34f4-995b-15865641087b.roa (raw, json) Hash identifier: zZ62hK1GM5FLt660Oxa1EtEoTHpz7q2f95gyNuOhtvc= Subject key identifier: 39:8C:F4:23:F6:3A:2D:AC:D1:5B:E8:B9:3C:B0:2F:93:9E:A9:8E:29 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584E6574B039F708FA80526FEE00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8e74bc09-e4cb-34f4-995b-15865641087b.roa Signing time: Sun 05 Jul 2026 09:00:13 +0000 ROA not before: Sun 05 Jul 2026 09:00:13 +0000 ROA not after: Sat 03 Oct 2026 09:00:13 +0000 asID: 17203 IP address blocks: 66.231.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:65:74:b0:39:f7:08:fa:80:52:6f:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 5 09:00:13 2026 GMT Not After : Oct 3 09:00:13 2026 GMT Subject: CN=ba1ddaf6-b8e1-4262-b2a8-145549e0f9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:6f:56:9f:ff:f4:9d:2a:4c:42:0f:5e:54: c6:1a:67:3a:f3:a4:c2:d2:ea:51:d1:9e:ab:4a:5d: 7a:29:cd:19:fa:e6:2b:58:a9:69:7a:25:e5:fa:06: e7:f0:39:57:1e:23:33:f1:9a:bd:e2:b6:89:74:05: e5:fa:d9:98:54:94:98:a4:89:04:c4:64:32:c2:1e: 90:88:89:ff:39:ea:71:aa:91:75:56:76:93:7e:10: 4c:54:9d:da:fc:83:e5:f6:37:c1:37:68:e1:d7:99: 51:21:90:a4:1a:ac:39:1a:e8:b4:81:3c:41:9e:56: 0c:b5:e0:55:2f:b3:20:c9:9f:82:9c:3c:cb:36:b7: 98:76:6b:97:9d:d7:20:18:03:e9:18:0d:35:3a:9a: e1:aa:51:03:9b:21:63:b4:42:82:8a:08:dd:e3:78: b3:79:34:c3:f4:9e:7f:af:73:aa:06:05:59:1a:ca: 4a:b7:06:9a:ec:4e:01:73:29:31:f3:f6:95:30:08: 09:db:d7:a5:50:d8:1e:de:ae:fe:97:17:09:8d:9f: 4c:96:7b:31:03:1c:17:cd:de:2b:02:ac:b2:fc:3b: 25:3f:39:2a:9e:61:bb:09:22:65:f0:67:b8:03:fb: 3e:50:81:68:b6:93:49:4c:d0:70:82:94:c7:8d:a3: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8C:F4:23:F6:3A:2D:AC:D1:5B:E8:B9:3C:B0:2F:93:9E:A9:8E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8e74bc09-e4cb-34f4-995b-15865641087b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:87:cf:57:2f:c3:34:cb:4f:40:ec:f6:f2:5a:db:ca:2e:1a: b7:1e:3d:5b:65:91:4f:4a:24:35:2e:3d:b4:0f:ac:99:1a:e9: 78:11:3e:24:d1:68:6a:56:f9:c6:e3:f1:cc:bd:50:98:e5:3d: 62:15:b2:46:5c:2f:71:af:38:ba:85:04:70:4d:83:27:51:cf: 24:99:61:16:b9:d8:a1:7a:39:ff:7f:4b:c8:e1:e6:49:fc:df: cd:58:98:08:7d:b1:83:2f:36:ca:9e:98:5f:bb:1f:20:6f:c7: fe:e5:fd:50:f1:3d:f7:25:19:00:ce:f7:ff:cc:c1:bc:ac:7a: 78:44:20:9d:79:e3:a9:bd:e3:9a:9d:46:ea:32:f1:33:5c:38: bb:df:64:dc:01:8e:b3:1d:21:b4:fa:ce:a7:9b:65:b6:dc:35: fa:63:6f:a0:54:85:2b:6e:38:21:a5:59:37:31:3f:e3:2b:a2: 32:4b:a2:b4:16:e9:d4:d9:13:46:8d:6c:9f:36:94:d9:47:ca: 48:7d:15:ec:7d:1a:06:f7:9a:c3:bc:96:9d:83:fb:44:5d:07: 7a:72:91:88:27:41:7b:54:5e:50:fc:a2:28:65:28:cd:9a:7a: c1:14:a4:d4:d1:33:ca:f3:36:05:bb:df:12:09:4b:01:19:fd: a9:df:6a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ldLA59wj6gFJv7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcwNTA5MDAxM1oXDTI2MTAwMzA5MDAxM1owLzEtMCsGA1UEAxMk YmExZGRhZjYtYjhlMS00MjYyLWIyYTgtMTQ1NTQ5ZTBmOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKhvVp//9J0qTEIPXlTGGmc686TC0upR0Z6r Sl16Kc0Z+uYrWKlpeiXl+gbn8DlXHiMz8Zq94raJdAXl+tmYVJSYpIkExGQywh6Q iIn/OepxqpF1VnaTfhBMVJ3a/IPl9jfBN2jh15lRIZCkGqw5Gui0gTxBnlYMteBV L7MgyZ+CnDzLNreYdmuXndcgGAPpGA01OprhqlEDmyFjtEKCigjd43izeTTD9J5/ r3OqBgVZGspKtwaa7E4Bcykx8/aVMAgJ29elUNge3q7+lxcJjZ9MlnsxAxwXzd4r Aqyy/DslPzkqnmG7CSJl8Ge4A/s+UIFotpNJTNBwgpTHjaOrmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmM9CP2Oi2s0VvouTywL5OeqY4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOGU3NGJjMDktZTRjYi0z NGY0LTk5NWItMTU4NjU2NDEwODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuHz1cvwzTLT0Ds9vJa28ouGrcePVtlkU9KJDUuPbQPrJka6XgRPiTR aGpW+cbj8cy9UJjlPWIVskZcL3GvOLqFBHBNgydRzySZYRa52KF6Of9/S8jh5kn8 381YmAh9sYMvNsqemF+7HyBvx/7l/VDxPfclGQDO9//MwbysenhEIJ1546m945qd Ruoy8TNcOLvfZNwBjrMdIbT6zqebZbbcNfpjb6BUhStuOCGlWTcxP+MrojJLorQW 6dTZE0aNbJ82lNlHykh9Fex9Ggb3msO8lp2D+0RdB3pykYgnQXtUXlD8oihlKM2a esEUpNTRM8rzNgW73xIJSwEZ/anfalQ= -----END CERTIFICATE-----Generated at Wed Jul 22 01:14:14 2026 by rpki-client