$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0fb121c6-9aef-3d03-8591-b2f0be1977b9.roa File: 0fb121c6-9aef-3d03-8591-b2f0be1977b9.roa (raw, json) Hash identifier: u8Qncreqqjz/jEvB4c1blFa3Bz4W4gXm10vX8llbCQM= Subject key identifier: D2:40:AF:3A:2F:BD:BD:AA:CA:A6:3A:EE:E6:54:28:26:81:13:25:DC Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584BB2F7BD89485EEFA6E9E66F00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0fb121c6-9aef-3d03-8591-b2f0be1977b9.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 13576 IP address blocks: 66.128.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:bd:89:48:5e:ef:a6:e9:e6:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=7eed56a7-90b4-4e53-aee0-7458d5d73ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:af:01:7e:ab:d6:e1:48:74:eb:8f:c2:c2: 80:09:e6:13:a2:6f:52:56:98:44:89:51:0b:99:32: 6f:0c:0a:e9:21:38:f1:83:ff:22:be:f1:9d:05:0c: ac:65:44:4b:e4:2a:5f:4b:62:d9:56:ce:61:a3:cf: e5:01:3d:2e:19:ef:d1:fc:d9:a0:0b:68:fe:0c:1b: cd:04:06:1e:35:28:12:56:19:21:92:2f:24:63:3b: 8a:a3:65:5f:33:0b:11:ec:98:c9:30:fa:9c:56:db: 42:c6:47:21:8d:67:28:f9:14:f2:66:25:f7:b7:72: db:b6:60:d8:74:50:cd:8b:22:58:4b:d0:12:36:39: 87:7b:7d:80:37:cf:dc:8e:f2:cb:c6:40:ad:95:72: 31:6e:f5:2c:46:5b:08:3b:b3:43:e3:b7:70:99:97: d6:93:b3:06:25:bd:04:65:9e:cc:87:00:e6:72:59: 5c:31:37:2d:9a:01:de:0f:f6:29:d8:33:1d:ea:d0: 0f:82:83:c6:c4:7f:6b:0f:6f:a5:a8:9b:12:13:ea: f5:07:46:8d:eb:43:5c:af:29:f4:53:38:fe:e6:db: 55:47:15:56:19:a0:34:07:16:1d:f4:48:79:e3:1d: 7d:0e:38:2a:ad:cb:cf:e2:6f:39:fa:0c:79:60:f7: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:40:AF:3A:2F:BD:BD:AA:CA:A6:3A:EE:E6:54:28:26:81:13:25:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0fb121c6-9aef-3d03-8591-b2f0be1977b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:dc:72:12:4e:cc:26:95:81:78:65:c0:2d:7c:4a:61:57:ba: 9a:50:3d:c3:d8:1e:57:af:cb:1d:9f:8c:78:5d:42:e0:27:ff: ce:b2:15:2e:86:d2:e9:b9:e1:4d:77:a4:a2:5c:5d:58:cd:74: bf:f6:34:fb:be:21:f4:94:a1:03:91:f9:26:1c:57:dc:3b:e8: 36:36:41:f6:ab:15:24:b8:1e:b6:0f:95:7e:b2:c5:2d:b4:f3: f4:4d:9d:03:e2:01:44:15:85:31:ce:3a:f3:f4:93:98:47:58: 97:90:35:70:b6:d5:f5:15:64:63:da:93:a0:3b:ab:f5:bc:90: ce:43:e2:8c:fa:bb:ce:ce:00:84:68:b3:c1:98:9d:94:0b:5b: 58:86:ac:14:99:7c:34:22:71:25:fc:fa:4d:30:80:9b:0c:b8: 95:65:40:a2:ce:c6:7e:a2:39:23:30:03:d2:9d:23:51:c0:66: 09:bd:89:24:cd:42:71:cf:e1:32:9b:4e:db:67:51:6c:8a:f4: 1c:c3:1c:02:df:ab:26:72:56:aa:f0:03:e7:68:b4:1a:c4:fc: 07:b8:bb:bc:1e:ba:cb:68:bb:67:46:94:94:fc:89:e0:d3:25: 89:79:17:41:5c:5a:42:46:6a:e1:84:35:65:c6:66:7e:aa:14: 4e:5c:49:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy972JSF7vpunmbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk N2VlZDU2YTctOTBiNC00ZTUzLWFlZTAtNzQ1OGQ1ZDczZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+WvAX6r1uFIdOuPwsKACeYTom9SVphEiVEL mTJvDArpITjxg/8ivvGdBQysZURL5CpfS2LZVs5ho8/lAT0uGe/R/NmgC2j+DBvN BAYeNSgSVhkhki8kYzuKo2VfMwsR7JjJMPqcVttCxkchjWco+RTyZiX3t3LbtmDY dFDNiyJYS9ASNjmHe32AN8/cjvLLxkCtlXIxbvUsRlsIO7ND47dwmZfWk7MGJb0E ZZ7MhwDmcllcMTctmgHeD/Yp2DMd6tAPgoPGxH9rD2+lqJsSE+r1B0aN60Ncryn0 Uzj+5ttVRxVWGaA0BxYd9Eh54x19DjgqrcvP4m85+gx5YPeRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJArzovvb2qyqY67uZUKCaBEyXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMGZiMTIxYzYtOWFlZi0z ZDAzLTg1OTEtYjJmMGJlMTk3N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbcchJOzCaVgXhlwC18SmFXuppQPcPYHlevyx2fjHhdQuAn/86yFS6G 0um54U13pKJcXVjNdL/2NPu+IfSUoQOR+SYcV9w76DY2QfarFSS4HrYPlX6yxS20 8/RNnQPiAUQVhTHOOvP0k5hHWJeQNXC21fUVZGPak6A7q/W8kM5D4oz6u87OAIRo s8GYnZQLW1iGrBSZfDQicSX8+k0wgJsMuJVlQKLOxn6iOSMwA9KdI1HAZgm9iSTN QnHP4TKbTttnUWyK9BzDHALfqyZyVqrwA+dotBrE/Ae4u7weustou2dGlJT8ieDT JYl5F0FcWkJGauGENWXGZn6qFE5cSVU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:10 2025 by rpki-client