$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a6675c8-6417-35b8-85a7-596abd53023b.roa File: 3a6675c8-6417-35b8-85a7-596abd53023b.roa (raw, json) Hash identifier: 5P2yUwMuU4BnMn0gpKnbBs9j+/t9ai5ps2q+fFzBxek= Subject key identifier: 74:F3:F0:D3:B9:78:2A:64:8E:04:45:14:FB:37:BF:C4:6D:66:7D:4C Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584D59EA6F66E8A61B0B8AC4D300 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a6675c8-6417-35b8-85a7-596abd53023b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 6312 IP address blocks: 66.231.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:6f:66:e8:a6:1b:0b:8a:c4:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=621828cc-ece0-4384-aaea-8077cdc1e0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:8a:32:31:13:2d:67:98:e2:ac:86:dd:48: 5f:06:2e:55:08:f9:d8:8b:94:36:02:cb:3f:c5:a2: b2:83:31:ad:08:d1:2c:46:28:f7:d0:18:55:f7:a4: 9a:4c:bf:36:2f:8b:8a:b1:f2:52:e5:d1:34:2b:ce: 8c:b6:f0:14:6c:c1:3d:b7:17:4a:d2:a1:7c:e1:aa: 0f:9a:1f:76:ea:ae:48:c6:5c:18:ea:f6:42:b9:9f: 2e:14:ea:1f:6b:ce:38:0b:bf:27:86:ad:d4:c9:5e: 4e:0b:7c:a9:97:f2:5c:ee:a4:ea:e5:5f:60:8b:aa: 9a:af:e0:fa:4b:bb:bf:17:30:49:35:65:d1:80:e1: 57:ed:c2:36:79:07:ce:00:09:96:1d:42:49:54:b6: 16:ee:59:15:c5:e8:7d:de:69:ca:93:ef:e2:b9:f1: 32:ce:33:37:e3:95:38:0c:af:f8:ba:28:f8:50:9c: d2:ad:16:fb:fb:96:1c:4a:b9:b7:23:4b:4a:41:84: fb:50:4f:e4:a6:84:f4:c5:6a:b6:99:f2:f3:42:89: ed:2d:1b:33:63:70:8e:c0:f1:2c:42:88:97:df:be: ea:7d:6b:a8:ac:dc:f7:b0:49:52:d8:4a:0c:7b:0e: 5a:47:16:55:60:c9:0d:0a:36:26:b3:04:11:84:c9: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F3:F0:D3:B9:78:2A:64:8E:04:45:14:FB:37:BF:C4:6D:66:7D:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3a6675c8-6417-35b8-85a7-596abd53023b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:39:ec:3d:80:6a:3f:ea:af:4f:3a:d5:a8:f2:03:d7:92:01: be:15:7a:35:64:df:2e:a2:c8:51:4e:75:31:f2:da:3d:6b:ab: 7d:54:4b:b8:af:8a:71:0b:ee:f5:12:9e:9b:a5:62:e9:4f:a3: cf:78:ac:d1:c6:d4:72:84:f8:20:7a:b7:a8:f0:df:51:88:fb: c2:f9:89:36:a8:36:c4:8c:c8:66:8c:cc:77:8f:f9:4c:c8:3c: 94:f7:24:f7:a0:be:06:8b:8f:1f:5d:1c:91:bd:ed:c9:66:a1: 7d:8b:c4:b8:7f:ab:86:39:0a:0a:46:70:ea:50:6a:04:86:45: 27:11:cb:b7:83:b5:e2:5d:13:2e:51:a1:f2:c0:8b:51:0c:5f: 5a:1a:65:05:a5:d3:40:33:a3:fa:07:cd:a1:2d:cc:49:c2:9e: 28:2e:2c:40:e4:c2:89:7e:ab:29:90:b9:53:3f:34:3b:24:21: db:22:a2:84:c4:1d:f2:a6:0e:3c:2f:c5:20:c7:b6:8c:5a:8e: e2:2e:4c:dd:0a:4e:24:d9:4b:12:a7:25:15:7e:2c:31:8e:b2: 26:c7:6d:b2:41:c9:8f:7e:ef:6b:6a:0b:54:2d:5a:f9:7b:87: d0:2f:09:ff:7a:10:7b:fd:77:64:24:21:aa:ce:01:c5:d9:82: 17:8f:30:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6m9m6KYbC4rE0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NjIxODI4Y2MtZWNlMC00Mzg0LWFhZWEtODA3N2NkYzFlMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkreKMjETLWeY4qyG3UhfBi5VCPnYi5Q2Ass/ xaKygzGtCNEsRij30BhV96SaTL82L4uKsfJS5dE0K86MtvAUbME9txdK0qF84aoP mh926q5IxlwY6vZCuZ8uFOofa844C78nhq3UyV5OC3ypl/Jc7qTq5V9gi6qar+D6 S7u/FzBJNWXRgOFX7cI2eQfOAAmWHUJJVLYW7lkVxeh93mnKk+/iufEyzjM345U4 DK/4uij4UJzSrRb7+5YcSrm3I0tKQYT7UE/kpoT0xWq2mfLzQontLRszY3COwPEs QoiX377qfWuorNz3sElS2EoMew5aRxZVYMkNCjYmswQRhMkJYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTz8NO5eCpkjgRFFPs3v8RtZn1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvM2E2Njc1YzgtNjQxNy0z NWI4LTg1YTctNTk2YWJkNTMwMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM857D2Aaj/qr0861ajyA9eSAb4VejVk3y6iyFFOdTHy2j1rq31US7iv inEL7vUSnpulYulPo894rNHG1HKE+CB6t6jw31GI+8L5iTaoNsSMyGaMzHeP+UzI PJT3JPegvgaLjx9dHJG97clmoX2LxLh/q4Y5CgpGcOpQagSGRScRy7eDteJdEy5R ofLAi1EMX1oaZQWl00Azo/oHzaEtzEnCniguLEDkwol+qymQuVM/NDskIdsiooTE HfKmDjwvxSDHtoxajuIuTN0KTiTZSxKnJRV+LDGOsibHbbJByY9+72tqC1QtWvl7 h9AvCf96EHv9d2QkIarOAcXZghePMNw= -----END CERTIFICATE-----Generated at Sat Apr 18 01:08:49 2026 by rpki-client