$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa File: 932614f9-93ff-322c-895f-a209b9bdba38.roa (raw, json) Hash identifier: vTtaUjQEd6nW+p6KH0DyHL//yQrf5BMNhDIBzBzc7dM= Subject key identifier: 65:4F:1C:0E:91:B0:20:71:00:27:37:37:6A:7D:87:AC:2E:DE:A4:35 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584BA0D25EE5CD77A0382FDCE340 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20014 IP address blocks: 66.115.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5e:e5:cd:77:a0:38:2f:dc:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=9992eca1-e8be-4145-8ab3-afb9927f07de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:6f:e9:52:a9:2e:27:f0:8e:af:e2:77:ef: f8:2a:63:30:00:81:c3:60:be:63:62:58:04:46:72: 3a:4f:9e:a0:ee:ae:d0:de:fa:f4:68:de:df:95:72: a7:15:16:4f:ab:94:7c:f3:8e:d8:b6:88:6c:52:72: 02:ae:98:9e:10:d7:b9:b8:1b:ab:ea:24:a6:b3:8e: a4:21:36:63:a8:e7:34:1e:ef:f8:bc:7a:0b:66:a5: 6a:d0:04:39:7f:d8:ce:b2:8e:09:4a:9f:cf:18:e7: f4:4b:24:81:8c:f6:81:1a:7c:10:ea:47:56:ec:4a: 6a:ba:c4:dc:d0:15:f2:14:23:5d:80:72:b6:85:9d: 74:1d:97:2e:43:3d:3e:1a:f3:7f:30:ce:1b:46:0f: 11:a7:ee:ac:a7:d3:d9:1c:de:0a:d8:5d:dd:18:87: 5e:a3:17:9b:c2:8b:ce:e6:c6:0e:17:bb:65:2a:4e: 31:31:e3:f6:24:c8:34:c5:02:7b:33:ef:89:46:7a: f0:08:f4:4a:e1:76:2a:2c:2e:4e:2c:7a:90:bf:e1: b7:af:64:9b:9c:c4:00:55:d2:16:25:d5:d6:e7:d8: 00:28:ca:21:67:2d:47:70:c3:30:96:7f:da:e7:90: 30:f3:5c:e2:08:02:6d:cc:3c:54:2e:8e:32:cc:62: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4F:1C:0E:91:B0:20:71:00:27:37:37:6A:7D:87:AC:2E:DE:A4:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:45:11:65:fa:66:2d:0b:3c:db:00:4b:1b:2e:cc:e2:61:a8: 9b:6f:e0:6a:d2:df:82:36:fd:75:7d:9a:3a:5c:52:92:f1:b9: 90:72:ed:4c:05:f0:26:0d:c5:ee:40:3f:33:d7:78:cc:65:b0: fa:c4:5d:a2:49:f3:82:72:09:91:69:a2:98:13:3f:78:04:bc: 52:2a:03:c7:5d:fd:d1:39:92:57:c3:5a:17:4d:6a:df:26:6c: 12:df:21:e7:61:9d:a9:a8:26:d5:a8:c7:a9:36:9b:bf:d6:11: 46:bd:a7:56:8f:91:8b:22:2e:b8:46:b1:ca:10:eb:c2:6d:91: 2a:a8:ae:c8:3c:72:f2:92:d5:b1:e4:ac:6b:5c:05:4a:29:66: 39:2f:a5:4a:41:71:23:ae:c4:fc:38:e1:11:81:36:4c:33:cc: f5:bc:70:82:a8:81:88:d4:a1:71:b5:1f:66:ab:42:59:4d:95: 1e:6b:94:44:ff:b3:ce:6a:97:b3:49:62:4c:05:43:6b:be:03: 36:31:e3:0d:d2:4c:5a:d3:e2:77:01:d9:7c:90:5a:3f:ab:12: 04:02:a0:b1:10:82:91:d1:3f:50:b5:24:e1:9f:a2:33:9d:f5: 00:95:4f:19:39:79:80:5f:7e:ab:f7:66:91:8c:90:a1:d1:da: ac:de:38:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0l7lzXegOC/c40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OTk5MmVjYTEtZThiZS00MTQ1LThhYjMtYWZiOTkyN2YwN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi31v6VKpLifwjq/id+/4KmMwAIHDYL5jYlgE RnI6T56g7q7Q3vr0aN7flXKnFRZPq5R8847YtohsUnICrpieENe5uBur6iSms46k ITZjqOc0Hu/4vHoLZqVq0AQ5f9jOso4JSp/PGOf0SySBjPaBGnwQ6kdW7EpqusTc 0BXyFCNdgHK2hZ10HZcuQz0+GvN/MM4bRg8Rp+6sp9PZHN4K2F3dGIdeoxebwovO 5sYOF7tlKk4xMeP2JMg0xQJ7M++JRnrwCPRK4XYqLC5OLHqQv+G3r2SbnMQAVdIW JdXW59gAKMohZy1HcMMwln/a55Aw81ziCAJtzDxULo4yzGLNJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVPHA6RsCBxACc3N2p9h6wu3qQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOTMyNjE0ZjktOTNmZi0z MjJjLTg5NWYtYTIwOWI5YmRiYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5FEWX6Zi0LPNsASxsuzOJhqJtv4GrS34I2/XV9mjpcUpLxuZBy7UwF 8CYNxe5APzPXeMxlsPrEXaJJ84JyCZFpopgTP3gEvFIqA8dd/dE5klfDWhdNat8m bBLfIedhnamoJtWox6k2m7/WEUa9p1aPkYsiLrhGscoQ68JtkSqorsg8cvKS1bHk rGtcBUopZjkvpUpBcSOuxPw44RGBNkwzzPW8cIKogYjUoXG1H2arQllNlR5rlET/ s85ql7NJYkwFQ2u+AzYx4w3STFrT4ncB2XyQWj+rEgQCoLEQgpHRP1C1JOGfojOd 9QCVTxk5eYBffqv3ZpGMkKHR2qzeOL0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:17:46 2025 by rpki-client