$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b9d9bbd-f3e3-345f-a51a-7ad229f4db9c.roa File: 0b9d9bbd-f3e3-345f-a51a-7ad229f4db9c.roa (raw, json) Hash identifier: k0Hfk7OKaiouZ+QZpqlgWgcS7kTN869g6r8BIOrgqq0= Subject key identifier: 14:39:98:F3:7B:ED:DD:17:B6:44:71:C3:70:61:73:E3:34:DD:89:B2 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B0B76B698D6D8D66AFD6A9730 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b9d9bbd-f3e3-345f-a51a-7ad229f4db9c.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 66.115.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b6:98:d6:d8:d6:6a:fd:6a:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=9e44dcb4-82f6-4611-98ca-fb4691c09596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:6b:45:6f:af:d9:3a:93:2f:eb:22:2f:2f: e9:09:52:ba:88:a8:2f:29:04:b8:83:6f:a4:6c:82: d5:8b:80:3e:f0:7a:be:0e:d0:5c:4e:58:d7:df:34: ac:47:50:a3:67:b0:2d:31:67:ff:dd:ea:1c:2a:70: c4:5f:14:7b:39:0b:96:50:bc:8a:6b:fb:5e:fd:47: 3c:df:81:76:81:0a:9c:73:2f:88:ca:ed:d4:79:0a: 61:2d:6c:f0:ad:ff:85:48:d6:13:7f:81:e3:03:f9: 8c:5e:31:ab:02:74:8e:3a:2e:fa:c7:0a:bc:66:d1: 46:1d:6c:1b:3a:ec:fb:cc:2b:e0:c8:e6:4d:f9:69: 85:f5:1c:71:db:0f:ea:fe:49:90:10:1c:26:de:86: ff:ad:c3:e7:b0:33:a2:05:0b:8c:01:fe:34:ae:84: 42:16:75:6e:98:9f:18:c4:55:ad:b6:66:24:3c:13: 5a:6e:d1:ac:f4:ee:6f:b6:43:2e:6a:1a:a2:97:32: 34:46:e9:cc:1f:58:24:df:f1:1d:93:98:78:a2:15: f8:19:d1:55:25:a6:5a:b8:4b:f4:24:73:56:2f:af: b5:13:20:25:3f:37:b6:b5:f7:63:7e:12:2a:7b:b1: df:8a:f5:c5:fe:be:7d:d8:2a:79:2e:1e:39:14:1c: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:39:98:F3:7B:ED:DD:17:B6:44:71:C3:70:61:73:E3:34:DD:89:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0b9d9bbd-f3e3-345f-a51a-7ad229f4db9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fa:22:99:de:7c:71:7a:76:e6:34:eb:5d:ae:68:54:41:3e: 03:b2:7e:c4:cc:67:50:b1:06:42:fe:ac:8b:4a:bd:9b:7d:05: 8a:fb:2b:79:ff:a8:27:f2:23:7b:4e:b9:a7:f8:99:0d:f3:75: e3:5d:b6:8b:87:5b:dd:8f:1b:c7:6e:13:8b:6d:0b:5b:f1:6b: 6d:e9:1a:84:1d:11:cb:7e:e1:6a:62:f4:2b:77:0c:d8:f1:cd: 64:e2:65:bb:c3:19:0c:49:b5:f7:a8:fa:f7:02:ce:95:9a:d1: 02:a7:d2:ad:8c:ab:4f:68:fa:0b:b2:d1:e4:af:b2:01:2a:9c: 42:ad:65:63:11:be:a5:35:d1:27:1b:74:2f:97:90:e9:a3:14: 6d:95:92:0c:ca:b2:52:4e:e4:43:28:bf:66:6f:af:85:f1:5f: d5:68:5d:2f:57:5c:c7:13:bc:47:92:c2:93:93:04:50:1d:ab: 87:5a:91:f6:e4:77:c3:c7:f3:46:6a:ab:f0:ac:d0:9e:6b:a1: e8:80:ff:66:c0:99:cc:c8:f8:81:f4:0f:78:2e:71:a1:6b:26: bf:56:dd:49:eb:19:78:23:40:6e:1d:ed:ae:59:85:7b:1b:0d: 5d:66:ae:cf:9d:93:e7:93:10:f0:b4:5a:96:ca:3d:e2:3d:48: e6:eb:18:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdraY1tjWav1qlzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OWU0NGRjYjQtODJmNi00NjExLTk4Y2EtZmI0NjkxYzA5NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1prRW+v2TqTL+siLy/pCVK6iKgvKQS4g2+k bILVi4A+8Hq+DtBcTljX3zSsR1CjZ7AtMWf/3eocKnDEXxR7OQuWULyKa/te/Uc8 34F2gQqccy+Iyu3UeQphLWzwrf+FSNYTf4HjA/mMXjGrAnSOOi76xwq8ZtFGHWwb Ouz7zCvgyOZN+WmF9Rxx2w/q/kmQEBwm3ob/rcPnsDOiBQuMAf40roRCFnVumJ8Y xFWttmYkPBNabtGs9O5vtkMuahqilzI0RunMH1gk3/Edk5h4ohX4GdFVJaZauEv0 JHNWL6+1EyAlPze2tfdjfhIqe7HfivXF/r592Cp5Lh45FByl2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ5mPN77d0XtkRxw3Bhc+M03YmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGI5ZDliYmQtZjNlMy0z NDVmLWE1MWEtN2FkMjI5ZjRkYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb6IpnefHF6duY0612uaFRBPgOyfsTMZ1CxBkL+rItKvZt9BYr7K3n/ qCfyI3tOuaf4mQ3zdeNdtouHW92PG8duE4ttC1vxa23pGoQdEct+4Wpi9Ct3DNjx zWTiZbvDGQxJtfeo+vcCzpWa0QKn0q2Mq09o+guy0eSvsgEqnEKtZWMRvqU10Scb dC+XkOmjFG2VkgzKslJO5EMov2Zvr4XxX9VoXS9XXMcTvEeSwpOTBFAdq4dakfbk d8PH80Zqq/Cs0J5roeiA/2bAmczI+IH0D3gucaFrJr9W3UnrGXgjQG4d7a5ZhXsb DV1mrs+dk+eTEPC0WpbKPeI9SObrGOE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:29:57 2025 by rpki-client