$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ff42de0e-df88-38ef-85e5-9dcf1f7120e6.roa File: ff42de0e-df88-38ef-85e5-9dcf1f7120e6.roa (raw, json) Hash identifier: o4dxcS0pgY0QVchWWJq98ouz6Uqs2TFtH1ARfhStMTs= Subject key identifier: 4F:56:57:28:68:CA:FE:5B:2C:6D:B9:90:43:6F:4E:98:B8:2A:9B:26 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AD23BBFE4DD5BC7FCE1691780 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ff42de0e-df88-38ef-85e5-9dcf1f7120e6.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 399439 IP address blocks: 66.231.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:bf:e4:dd:5b:c7:fc:e1:69:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=22c70449-1b57-4b71-bbac-dd2e88b137b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fe:80:f5:76:0c:57:63:de:eb:ec:f9:8d:b1: e2:80:9f:99:1c:ef:18:82:d0:d0:be:e6:7b:1e:4e: 04:c9:0d:87:60:e5:74:57:65:5f:3a:ac:7d:31:86: 8b:0a:1f:ba:56:fc:e5:8f:85:91:fd:81:0e:78:ae: 92:ff:c9:65:0f:a1:1b:29:f3:45:cc:a7:f7:9e:4b: 69:eb:35:1b:b1:c8:39:5f:22:88:09:ec:2a:0a:2a: 0a:07:91:26:06:d2:f9:b7:6f:bd:ba:26:8b:3a:60: a6:7d:a6:26:5b:83:38:86:a6:24:bf:3c:27:e0:94: 94:51:f2:f9:4c:a1:8d:12:36:a1:38:b1:95:3c:02: 89:ec:05:70:10:9f:a4:b8:05:ce:b7:cf:5d:ae:d3: 14:9d:f6:cb:39:bd:ab:79:6c:32:40:76:72:46:02: 2b:fb:50:4f:73:e2:b5:ea:7a:43:aa:0f:30:73:6e: 68:68:81:cd:9b:92:b6:b9:ea:ce:3f:54:6d:28:0e: 90:fd:a3:39:de:96:0d:54:09:a1:40:b9:41:20:c7: af:eb:87:16:9b:d8:11:a1:a9:79:1e:d7:d5:97:d2: f7:29:bc:6c:4f:7f:a3:0f:0e:7f:8f:12:e5:17:b2: 39:e7:33:f0:b6:a1:62:63:fb:da:40:32:a3:95:fb: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:56:57:28:68:CA:FE:5B:2C:6D:B9:90:43:6F:4E:98:B8:2A:9B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ff42de0e-df88-38ef-85e5-9dcf1f7120e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:bc:24:3e:93:84:f2:f0:b3:c9:45:d3:5e:d6:17:d5:cb:80: fb:73:dd:c7:c7:03:2a:b9:f2:39:ab:51:66:50:f8:73:d4:cb: 08:bd:a2:15:47:5b:88:05:4c:88:9c:3b:ce:0a:c2:0e:1e:7e: 20:7f:57:01:42:f4:95:80:42:24:d6:17:2d:9c:dd:61:65:ff: c2:af:31:78:f7:79:cc:1b:69:53:fb:5f:03:6f:14:cb:ae:03: 07:ce:53:11:f5:cd:f2:49:6f:69:f6:29:c4:9a:07:a4:19:d2: 8f:4f:8b:40:6f:47:d4:ad:96:09:14:54:73:c2:5c:76:16:fa: f2:e9:18:6a:f4:f5:46:b5:2f:9c:25:88:d7:32:ee:ac:41:91: 97:65:27:aa:5b:01:63:40:f3:eb:c4:88:b7:86:9c:91:4b:25: ad:b7:83:e2:99:29:7a:8d:6d:94:1e:21:46:07:f2:97:87:b5: a3:82:a6:37:e1:10:c0:ed:3e:08:30:51:1c:38:05:06:ce:f4: 3a:88:4f:53:2b:11:ea:b9:a4:44:b4:fc:e9:f3:d2:54:9a:39: ce:a1:1a:02:8e:2f:d7:17:f0:c2:7d:75:f4:b2:2c:68:0d:2a: 62:60:b6:48:65:58:f3:dc:41:b1:e8:03:20:f7:36:5a:a2:a9: 7d:60:ee:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7/k3VvH/OFpF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjJjNzA0NDktMWI1Ny00YjcxLWJiYWMtZGQyZTg4YjEzN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf6A9XYMV2Pe6+z5jbHigJ+ZHO8YgtDQvuZ7 Hk4EyQ2HYOV0V2VfOqx9MYaLCh+6Vvzlj4WR/YEOeK6S/8llD6EbKfNFzKf3nktp 6zUbscg5XyKICewqCioKB5EmBtL5t2+9uiaLOmCmfaYmW4M4hqYkvzwn4JSUUfL5 TKGNEjahOLGVPAKJ7AVwEJ+kuAXOt89drtMUnfbLOb2reWwyQHZyRgIr+1BPc+K1 6npDqg8wc25oaIHNm5K2uerOP1RtKA6Q/aM53pYNVAmhQLlBIMev64cWm9gRoal5 HtfVl9L3KbxsT3+jDw5/jxLlF7I55zPwtqFiY/vaQDKjlft1swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9WVyhoyv5bLG25kENvTpi4KpsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZmY0MmRlMGUtZGY4OC0z OGVmLTg1ZTUtOWRjZjFmNzEyMGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC8JD6ThPLws8lF017WF9XLgPtz3cfHAyq58jmrUWZQ+HPUywi9ohVH W4gFTIicO84Kwg4efiB/VwFC9JWAQiTWFy2c3WFl/8KvMXj3ecwbaVP7XwNvFMuu AwfOUxH1zfJJb2n2KcSaB6QZ0o9Pi0BvR9StlgkUVHPCXHYW+vLpGGr09Ua1L5wl iNcy7qxBkZdlJ6pbAWNA8+vEiLeGnJFLJa23g+KZKXqNbZQeIUYH8peHtaOCpjfh EMDtPggwURw4BQbO9DqIT1MrEeq5pES0/Onz0lSaOc6hGgKOL9cX8MJ9dfSyLGgN KmJgtkhlWPPcQbHoAyD3NlqiqX1g7vg= -----END CERTIFICATE-----Generated at Sun Aug 24 03:48:46 2025 by rpki-client