$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/153c4df0-efbf-39d3-b4bc-b27a5332b766.roa File: 153c4df0-efbf-39d3-b4bc-b27a5332b766.roa (raw, json) Hash identifier: nRv5jHuLnOrd6Z3OZU9iMngvI0HbClmSN2cTRTWskgA= Subject key identifier: DD:62:F0:AB:59:50:3D:B3:26:DE:5E:E0:3C:43:DC:13:80:B8:B8:C8 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584BB2F7BDAD9F1AFB06B962C880 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/153c4df0-efbf-39d3-b4bc-b27a5332b766.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 13576 IP address blocks: 66.128.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:bd:ad:9f:1a:fb:06:b9:62:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a47a2376-179c-4ae3-a4d4-9a92c51cde35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6a:f3:2a:20:ea:96:f1:f0:e5:81:8f:a5:50: a3:80:8c:58:08:87:a3:a7:1f:ec:65:31:8b:c5:74: 86:c2:bc:22:d5:4c:32:ad:c4:b2:d6:0c:45:8f:0f: 63:79:b8:2b:f6:46:1f:79:a6:9e:31:aa:c2:e6:d1: cd:27:99:21:e9:cc:03:9d:7b:80:95:9c:aa:9e:cc: 74:95:25:cf:6f:d9:0e:1b:03:ee:b5:a9:72:42:97: 37:55:e3:84:1c:0b:be:0a:a8:2f:ac:bc:b6:04:8b: bd:10:3b:dd:5e:79:4f:d2:50:d1:3e:0a:6e:6a:ff: 3b:2f:91:61:cf:4b:6f:05:84:f0:46:42:7a:44:34: 5a:9b:7b:66:35:92:76:be:64:c2:14:0e:9e:d0:cf: 36:e9:27:70:46:59:cf:6c:3b:86:dc:ef:a5:39:29: bd:f6:ab:71:42:16:ee:47:93:de:f3:67:80:fd:0e: ed:16:ca:06:ad:6a:fa:f3:5e:db:72:4b:07:9a:b9: 04:64:97:1c:ad:23:c7:5e:e0:78:8c:d1:f8:ed:80: 63:85:29:94:06:6f:11:b6:ba:7a:54:da:31:32:24: 96:bd:9c:a3:dd:31:e2:59:3c:b1:91:95:20:ff:55: 86:76:10:a8:12:32:fd:c1:2f:32:ab:64:16:f4:43: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:62:F0:AB:59:50:3D:B3:26:DE:5E:E0:3C:43:DC:13:80:B8:B8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/153c4df0-efbf-39d3-b4bc-b27a5332b766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:5a:4c:5f:25:32:ab:67:75:b2:b0:71:23:a7:49:6a:52:3a: 92:e6:9a:95:b3:fa:25:a6:1f:37:c0:42:c9:2f:0d:68:2e:6a: 48:47:8d:52:04:a6:ad:33:8b:d5:ce:34:f0:f1:ff:a0:b8:8f: fb:3d:30:98:3e:cc:c8:6e:56:6f:16:f1:60:1f:cc:a4:2d:43: 56:aa:86:be:d2:df:13:b5:28:a6:57:22:1b:6a:16:4a:ac:3b: bf:c0:04:45:81:45:5f:95:00:51:2d:21:19:28:fe:34:66:cf: 90:b5:05:58:ca:fc:70:9e:30:22:a8:78:0d:4d:52:4a:e6:3e: af:a5:9d:a0:37:a9:5d:44:4d:d4:de:7b:6c:14:89:dd:59:47: fb:fb:e7:d5:c6:30:08:ed:a5:b4:a2:6b:dc:bf:e0:1b:fd:62: e6:3c:f5:f3:fc:b6:6f:ad:42:dc:57:9d:fe:5d:44:4a:9c:80: f8:a9:80:dd:b2:5f:03:a1:59:b2:0e:9c:d0:65:99:24:01:c2: 68:45:e1:97:3a:9d:cf:ec:16:4f:a8:ca:ef:1a:31:f7:59:c9: 49:41:95:81:72:61:ad:29:42:65:8a:69:f9:5e:fb:98:6c:c2: df:b4:44:48:11:90:0a:4e:d4:82:07:90:fb:ba:29:3f:75:d9: f4:33:e7:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy972tnxr7BrliyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTQ3YTIzNzYtMTc5Yy00YWUzLWE0ZDQtOWE5MmM1MWNkZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32rzKiDqlvHw5YGPpVCjgIxYCIejpx/sZTGL xXSGwrwi1UwyrcSy1gxFjw9jebgr9kYfeaaeMarC5tHNJ5kh6cwDnXuAlZyqnsx0 lSXPb9kOGwPutalyQpc3VeOEHAu+CqgvrLy2BIu9EDvdXnlP0lDRPgpuav87L5Fh z0tvBYTwRkJ6RDRam3tmNZJ2vmTCFA6e0M826SdwRlnPbDuG3O+lOSm99qtxQhbu R5Pe82eA/Q7tFsoGrWr6817bcksHmrkEZJccrSPHXuB4jNH47YBjhSmUBm8Rtrp6 VNoxMiSWvZyj3THiWTyxkZUg/1WGdhCoEjL9wS8yq2QW9EP/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1i8KtZUD2zJt5e4DxD3BOAuLjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTUzYzRkZjAtZWZiZi0z OWQzLWI0YmMtYjI3YTUzMzJiNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1aTF8lMqtndbKwcSOnSWpSOpLmmpWz+iWmHzfAQskvDWguakhHjVIE pq0zi9XONPDx/6C4j/s9MJg+zMhuVm8W8WAfzKQtQ1aqhr7S3xO1KKZXIhtqFkqs O7/ABEWBRV+VAFEtIRko/jRmz5C1BVjK/HCeMCKoeA1NUkrmPq+lnaA3qV1ETdTe e2wUid1ZR/v759XGMAjtpbSia9y/4Bv9YuY89fP8tm+tQtxXnf5dREqcgPipgN2y XwOhWbIOnNBlmSQBwmhF4Zc6nc/sFk+oyu8aMfdZyUlBlYFyYa0pQmWKafle+5hs wt+0REgRkApO1IIHkPu6KT912fQz55g= -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:11 2025 by rpki-client