$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b206cf3-6a53-384d-8c8d-dd4409257f33.roa File: 7b206cf3-6a53-384d-8c8d-dd4409257f33.roa (raw, json) Hash identifier: igwfSxjv1ngdP28tJwmuzgkrWMO/khiyEQSuK+EfcDk= Subject key identifier: 12:3D:C7:FD:9B:26:22:C5:86:DF:20:C7:7F:0F:58:EE:48:55:F6:CF Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F2EED19CF8B14BF3401AB6880 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b206cf3-6a53-384d-8c8d-dd4409257f33.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 13576 IP address blocks: 66.115.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:19:cf:8b:14:bf:34:01:ab:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=b489af9e-47a2-49b2-901f-99193eecbd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:99:7f:74:f0:a8:7f:e0:42:48:33:d6:73: b4:fd:ff:b2:ee:18:73:b3:92:ce:75:52:aa:1e:cf: b3:0f:47:15:45:af:a5:1b:f5:6d:23:a5:88:5f:0b: 28:86:bf:0c:ff:fd:1e:57:ef:2f:7c:ba:1e:cc:6c: bc:b6:d9:db:e1:96:88:31:40:00:ef:6d:46:4a:db: 47:ed:22:ba:a2:0a:67:95:e4:c5:10:e4:40:62:b4: 94:1e:0c:df:72:4b:ee:1d:6d:a5:16:37:fc:a1:b8: d1:af:b0:93:de:b7:3e:66:40:02:2f:71:22:a0:0b: 39:9f:4e:c1:31:3a:e1:aa:b9:d1:cd:3e:20:96:f1: 4d:62:c2:e4:0a:b9:54:67:0c:b3:dd:45:4c:3d:2b: 84:65:73:bc:6b:cd:9a:53:86:f9:92:55:bd:d3:c8: 72:8d:ec:64:4d:66:9b:c1:40:61:d4:da:45:3d:77: 64:26:27:4c:92:83:da:f6:8a:0c:46:09:08:5e:03: af:28:82:3e:8a:1e:e1:84:6d:9b:43:80:ce:5b:99: db:a1:81:e2:82:ad:2d:10:cf:82:e1:09:1f:61:47: 17:58:42:57:d8:51:a3:43:0d:ce:1d:72:65:ad:76: d1:d4:4c:dd:a6:e3:6a:49:93:d0:b0:c4:d2:7d:37: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:C7:FD:9B:26:22:C5:86:DF:20:C7:7F:0F:58:EE:48:55:F6:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7b206cf3-6a53-384d-8c8d-dd4409257f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9f:06:b8:7d:d6:04:70:26:34:28:5a:68:45:eb:5b:81:01: 01:6f:a3:f7:2a:fe:ad:70:01:d4:7b:7b:7c:ab:c9:f0:75:e9: 86:f4:eb:d3:2e:6d:27:60:8f:2d:8e:d0:cc:f5:ab:45:0d:76: 9f:61:ae:8d:f3:de:70:16:f7:4b:40:f3:f0:50:d2:41:95:bb: cb:37:b8:f4:9c:a3:b7:24:af:e6:d1:4b:2f:41:70:c8:cb:ef: 49:55:e6:59:1e:51:ca:1b:21:f7:74:dc:c5:96:e8:ee:6e:6f: 8a:32:51:4c:9f:0c:ab:5d:fc:3e:92:f8:e6:ae:33:50:c9:48: dc:c1:be:c9:91:76:50:71:cb:0c:6e:8a:e5:fe:58:26:9d:48: 3b:96:18:87:33:f1:12:12:8a:ee:c3:92:ee:c5:ce:df:88:ba: 95:5c:1d:d5:22:5d:42:f3:f8:48:9d:3c:de:6b:74:fb:2b:91: 7f:b8:a0:1c:c9:82:87:bf:e0:12:13:c2:06:b6:16:2c:a9:d7: 33:ba:3f:a5:9b:5f:72:5a:77:ef:41:24:f8:34:3e:57:67:f2: ba:60:f0:d2:5c:95:94:54:1f:3d:58:9d:32:50:56:cb:45:9f: c0:9f:2f:39:d5:55:89:30:01:74:4a:15:c8:a4:02:c1:ea:06: 49:1e:b2:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RnPixS/NAGraIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YjQ4OWFmOWUtNDdhMi00OWIyLTkwMWYtOTkxOTNlZWNiZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RGZf3TwqH/gQkgz1nO0/f+y7hhzs5LOdVKq Hs+zD0cVRa+lG/VtI6WIXwsohr8M//0eV+8vfLoezGy8ttnb4ZaIMUAA721GSttH 7SK6ogpnleTFEORAYrSUHgzfckvuHW2lFjf8objRr7CT3rc+ZkACL3EioAs5n07B MTrhqrnRzT4glvFNYsLkCrlUZwyz3UVMPSuEZXO8a82aU4b5klW908hyjexkTWab wUBh1NpFPXdkJidMkoPa9ooMRgkIXgOvKII+ih7hhG2bQ4DOW5nboYHigq0tEM+C 4QkfYUcXWEJX2FGjQw3OHXJlrXbR1EzdpuNqSZPQsMTSfTd7DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI9x/2bJiLFht8gx38PWO5IVfbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvN2IyMDZjZjMtNmE1My0z ODRkLThjOGQtZGQ0NDA5MjU3ZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSfBrh91gRwJjQoWmhF61uBAQFvo/cq/q1wAdR7e3yryfB16Yb069Mu bSdgjy2O0Mz1q0UNdp9hro3z3nAW90tA8/BQ0kGVu8s3uPSco7ckr+bRSy9BcMjL 70lV5lkeUcobIfd03MWW6O5ub4oyUUyfDKtd/D6S+OauM1DJSNzBvsmRdlBxywxu iuX+WCadSDuWGIcz8RISiu7Dku7Fzt+IupVcHdUiXULz+EidPN5rdPsrkX+4oBzJ goe/4BITwga2Fiyp1zO6P6WbX3Jad+9BJPg0Pldn8rpg8NJclZRUHz1YnTJQVstF n8CfLznVVYkwAXRKFcikAsHqBkkesuQ= -----END CERTIFICATE-----Generated at Tue Sep 22 21:10:29 2026 by rpki-client