$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3f47e25a-16cf-3280-8c22-ec7b79d8289a.roa File: 3f47e25a-16cf-3280-8c22-ec7b79d8289a.roa (raw, json) Hash identifier: yBiFK0j1CYHgwuixk7MMHDOlLvNMNpE4ifwdgG8yFto= Subject key identifier: CA:03:25:A2:C4:41:A3:BF:CD:9C:E8:C6:00:D2:E8:6C:90:FD:E3:2B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE5C6786A80562CBF407CD400 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3f47e25a-16cf-3280-8c22-ec7b79d8289a.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 13576 IP address blocks: 66.231.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:78:6a:80:56:2c:bf:40:7c:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=7a942a6e-f286-48d5-84c1-b1bab493c53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:fd:0c:7b:16:66:dc:09:0e:6b:e4:19:06: dc:9d:95:33:c3:0e:fe:f7:70:bf:c1:94:49:3a:df: fd:fe:0c:62:68:c6:dd:70:ea:28:79:8c:e6:74:52: 79:28:f4:63:2b:7f:91:e9:69:72:4a:76:31:4f:ee: 57:03:c4:88:e6:f6:ae:36:d8:2c:4b:7f:51:a7:38: 68:d0:36:56:25:f4:a4:c9:e6:43:9c:dd:4c:8c:73: 84:19:7b:2c:40:d1:da:da:bb:de:b8:50:e9:94:a3: 52:2b:5c:93:9f:63:c8:f9:aa:9b:32:b9:da:e8:3e: 9e:7a:bb:4c:5c:a1:09:40:61:b6:a8:34:5d:70:e9: 0f:25:c9:88:66:a6:12:dd:74:fa:9e:a8:59:e9:aa: d7:87:ad:b9:23:6f:c4:8f:55:dd:11:0e:80:16:ee: 82:0f:78:be:82:ef:35:65:c8:fa:89:46:e9:17:90: 6a:25:99:3a:fc:c8:bf:c1:6a:4b:33:ab:b0:40:a8: dc:d6:5c:80:f8:47:ff:3e:9d:f9:91:e2:c1:ff:5f: b0:39:be:a7:65:32:16:6d:76:eb:d4:e4:e4:87:04: f2:25:14:fc:73:39:55:9d:11:15:14:d7:3d:fd:55: b6:42:63:ff:f7:c2:12:28:ac:66:fc:cd:cc:7a:67: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:03:25:A2:C4:41:A3:BF:CD:9C:E8:C6:00:D2:E8:6C:90:FD:E3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3f47e25a-16cf-3280-8c22-ec7b79d8289a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:55:32:62:6a:16:d3:75:fa:61:cb:29:b7:28:1a:68:1f:f0: 15:31:6a:29:30:5a:5f:92:ac:67:25:63:2d:d6:48:94:8b:b4: fe:09:9f:85:fe:a1:ae:fe:1e:9d:48:9f:be:de:67:54:f3:25: 1c:39:02:0c:9d:c6:89:c7:3e:96:55:15:7e:99:ef:8c:46:df: 5d:30:08:d7:89:5e:17:ba:4c:c1:4e:fa:17:d9:b2:51:5f:f2: b1:4f:22:83:2b:0f:26:f1:a1:87:22:30:4a:30:a5:0f:3a:57: 35:0e:5c:29:a8:75:fc:58:eb:7e:9e:fc:1f:00:4e:49:5b:57: b1:24:fe:08:9b:5f:17:94:e1:d6:45:21:fc:53:da:3f:80:49: 2e:d2:21:27:ec:37:92:52:76:87:cf:39:b3:52:52:99:6b:e7: 10:9a:95:0b:e3:1c:bf:f7:11:3e:62:03:c0:d6:19:29:db:0b: 5a:52:3c:b1:73:74:9c:84:3d:ad:40:17:a3:2f:80:0e:7a:84: b2:fa:8f:64:ca:e1:76:ce:5b:0b:ef:5b:da:52:53:47:55:38: c4:62:39:73:0d:39:11:64:65:f0:50:3b:22:d4:29:b4:07:d5: 16:fb:70:d0:ab:7b:fd:85:a9:9c:95:05:86:72:7c:f7:03:27: 9b:3e:ac:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnhqgFYsv0B81AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk N2E5NDJhNmUtZjI4Ni00OGQ1LTg0YzEtYjFiYWI0OTNjNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJv9DHsWZtwJDmvkGQbcnZUzww7+93C/wZRJ Ot/9/gxiaMbdcOooeYzmdFJ5KPRjK3+R6WlySnYxT+5XA8SI5vauNtgsS39Rpzho 0DZWJfSkyeZDnN1MjHOEGXssQNHa2rveuFDplKNSK1yTn2PI+aqbMrna6D6eertM XKEJQGG2qDRdcOkPJcmIZqYS3XT6nqhZ6arXh625I2/Ej1XdEQ6AFu6CD3i+gu81 Zcj6iUbpF5BqJZk6/Mi/wWpLM6uwQKjc1lyA+Ef/Pp35keLB/1+wOb6nZTIWbXbr 1OTkhwTyJRT8czlVnREVFNc9/VW2QmP/98ISKKxm/M3MemdnfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoDJaLEQaO/zZzoxgDS6GyQ/eMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2Y0N2UyNWEtMTZjZi0z MjgwLThjMjItZWM3Yjc5ZDgyODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVVMmJqFtN1+mHLKbcoGmgf8BUxaikwWl+SrGclYy3WSJSLtP4Jn4X+ oa7+Hp1In77eZ1TzJRw5AgydxonHPpZVFX6Z74xG310wCNeJXhe6TMFO+hfZslFf 8rFPIoMrDybxoYciMEowpQ86VzUOXCmodfxY636e/B8ATklbV7Ek/gibXxeU4dZF IfxT2j+ASS7SISfsN5JSdofPObNSUplr5xCalQvjHL/3ET5iA8DWGSnbC1pSPLFz dJyEPa1AF6MvgA56hLL6j2TK4XbOWwvvW9pSU0dVOMRiOXMNORFkZfBQOyLUKbQH 1Rb7cNCre/2FqZyVBYZyfPcDJ5s+rEo= -----END CERTIFICATE-----Generated at Sun Aug 24 03:47:45 2025 by rpki-client