$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2717142-873a-380f-9204-0e0e4cb66b37.roa File: c2717142-873a-380f-9204-0e0e4cb66b37.roa (raw, json) Hash identifier: 99PaqSdd4tExk3skD446tAXRIV4/kuXURREMKLqKhlU= Subject key identifier: D4:69:D6:72:F7:FA:AB:3A:CB:89:EB:65:98:F1:09:D6:00:D8:29:58 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE5C678CDB2E0D278CB4BAC80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2717142-873a-380f-9204-0e0e4cb66b37.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 393417 IP address blocks: 66.231.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:78:cd:b2:e0:d2:78:cb:4b:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=1d8cef4e-71d8-4f6b-b0a9-329114b66f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:72:39:02:1e:fc:d8:d7:11:de:fb:dc:2e: fe:c4:aa:2d:ab:e6:31:27:13:97:f8:fb:c5:c5:a7: f4:66:d3:68:77:c6:d6:a2:bf:18:a1:bf:93:89:e5: 41:63:0d:32:72:87:17:52:7f:f3:1d:65:52:98:00: 67:1e:c6:1c:10:01:bb:70:d1:3f:e5:a8:97:a3:40: bf:e6:d2:83:8b:15:06:77:9d:06:ab:69:0d:2b:d1: 3a:03:3f:02:79:2c:84:51:e2:c6:d4:92:22:75:e4: b6:b5:99:f5:0c:7b:69:05:93:1e:46:b7:f1:83:bc: 95:55:a2:5d:70:2b:67:8b:2f:52:f7:e7:d5:d7:80: 54:c4:4d:78:34:46:fd:05:c6:c5:a1:aa:18:87:cd: 99:6f:36:71:b5:dd:20:7a:bb:33:f2:19:95:13:c8: 85:9a:01:86:3f:2f:ca:80:9e:87:3a:71:0f:18:d9: eb:a9:5a:9c:23:61:aa:59:71:ee:48:35:e9:b1:d0: a5:13:aa:e2:b8:0f:24:1d:a2:04:4d:07:3c:2a:a3: f5:f3:ba:d5:8c:39:9c:05:6e:75:26:ce:46:56:41: dc:6e:06:59:6f:9e:1e:5f:31:13:e7:81:94:3f:26: 59:2b:83:24:b6:4b:e3:9f:ce:76:18:5b:9a:6b:42: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:69:D6:72:F7:FA:AB:3A:CB:89:EB:65:98:F1:09:D6:00:D8:29:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2717142-873a-380f-9204-0e0e4cb66b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a8:b3:0e:a1:0d:9d:84:80:57:49:69:4a:c8:90:39:80:85: 35:71:db:c7:a8:f8:d1:f1:7a:15:08:38:93:da:54:86:37:f3: 9a:6c:1a:82:26:85:70:3b:5a:18:82:b1:bd:1f:66:8f:b0:51: 49:49:f2:74:6f:db:19:e4:dd:d7:74:2a:7e:de:e3:64:99:73: a4:78:e3:f4:ab:1b:30:d7:c9:b6:32:20:0c:3e:aa:ad:87:43: 14:fd:a5:27:ab:52:dc:5e:d4:0c:b0:1f:34:98:77:28:5f:d5: 7d:d6:8c:e4:37:51:fe:d3:09:eb:d2:d4:b2:1a:84:9c:1e:bf: 41:2c:86:45:9d:2f:3a:bd:a2:af:a8:8d:be:2a:df:82:19:03: 31:54:29:7c:58:8a:b7:5e:5f:36:14:97:92:e8:db:3e:0b:e4: 13:a7:89:84:0b:1b:ad:bc:e1:a6:6e:ae:14:ed:97:2d:b2:f8: ac:a3:63:a1:15:11:06:26:dd:af:a7:b0:e1:d8:e0:ae:96:16: 4d:02:5f:4f:60:29:36:f9:ad:42:11:11:78:59:56:6f:cf:58: b2:35:39:44:0b:ea:68:5c:74:58:ab:02:bc:57:f4:9b:3a:31: 05:91:22:0b:c5:20:c0:db:7b:98:59:1a:c2:95:7e:8c:e8:56: 34:f9:7c:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnjNsuDSeMtLrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MWQ4Y2VmNGUtNzFkOC00ZjZiLWIwYTktMzI5MTE0YjY2ZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wFyOQIe/NjXEd773C7+xKotq+YxJxOX+PvF xaf0ZtNod8bWor8Yob+TieVBYw0ycocXUn/zHWVSmABnHsYcEAG7cNE/5aiXo0C/ 5tKDixUGd50Gq2kNK9E6Az8CeSyEUeLG1JIideS2tZn1DHtpBZMeRrfxg7yVVaJd cCtniy9S9+fV14BUxE14NEb9BcbFoaoYh82ZbzZxtd0gersz8hmVE8iFmgGGPy/K gJ6HOnEPGNnrqVqcI2GqWXHuSDXpsdClE6riuA8kHaIETQc8KqP187rVjDmcBW51 Js5GVkHcbgZZb54eXzET54GUPyZZK4Mktkvjn852GFuaa0Lw/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRp1nL3+qs6y4nrZZjxCdYA2ClYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzI3MTcxNDItODczYS0z ODBmLTkyMDQtMGUwZTRjYjY2YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqosw6hDZ2EgFdJaUrIkDmAhTVx28eo+NHxehUIOJPaVIY385psGoIm hXA7WhiCsb0fZo+wUUlJ8nRv2xnk3dd0Kn7e42SZc6R44/SrGzDXybYyIAw+qq2H QxT9pSerUtxe1AywHzSYdyhf1X3WjOQ3Uf7TCevS1LIahJwev0EshkWdLzq9oq+o jb4q34IZAzFUKXxYirdeXzYUl5Lo2z4L5BOniYQLG6284aZurhTtly2y+KyjY6EV EQYm3a+nsOHY4K6WFk0CX09gKTb5rUIREXhZVm/PWLI1OUQL6mhcdFirArxX9Js6 MQWRIgvFIMDbe5hZGsKVfozoVjT5fKY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:51:00 2025 by rpki-client