$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/939567d1-8d35-38f4-a6b9-c5035b00eb43.roa File: 939567d1-8d35-38f4-a6b9-c5035b00eb43.roa (raw, json) Hash identifier: 0LwBSpGV4DmD6xKcSQN24xN2V9gTU1n5k5USCgIX1xA= Subject key identifier: AB:7D:96:6D:58:0C:A9:0F:4B:24:F6:AE:D0:05:0E:07:24:90:53:2C Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B2E5C46EF34ED4A45AE08B100 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/939567d1-8d35-38f4-a6b9-c5035b00eb43.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 18785 IP address blocks: 66.115.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:46:ef:34:ed:4a:45:ae:08:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=9a1f2b8f-de0e-4f64-a532-9b7e01dceaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:49:2e:0a:17:7b:9a:a4:bf:d1:71:bf:94:57: ff:2c:20:55:47:a0:70:ae:22:49:48:a7:73:60:d2: 60:62:e3:4d:21:e1:c5:c1:3b:2b:e4:60:92:37:51: 06:d3:1f:e5:95:fd:60:a5:a6:99:a6:a2:a4:04:eb: db:64:1b:aa:6c:c4:2f:40:14:ae:97:73:97:13:cb: b7:c6:6d:11:52:ea:18:fa:fa:e3:5f:df:3a:6c:ad: 2b:15:c9:98:89:9b:bc:62:fb:3d:9c:e8:5c:50:94: d3:59:b9:60:aa:be:cb:28:6a:60:d3:d6:47:6d:b3: 5a:0e:fc:e9:00:af:c4:7a:ea:ad:31:21:f4:4f:3e: d5:13:cf:46:43:dd:77:0c:65:58:a6:9f:5d:de:16: 11:5d:a4:ac:3d:d2:16:8e:6a:b9:71:18:72:22:e9: 36:0c:df:91:31:7b:15:4c:6b:90:db:25:2f:10:bc: 32:30:3a:01:93:bf:81:73:1d:82:bb:44:50:88:02: cc:7e:2f:57:df:63:21:1c:1f:3c:fd:b7:97:e2:75: 44:4c:f5:6f:5b:48:1d:f7:30:71:cf:be:a5:dc:61: 72:08:56:74:12:0e:da:a3:e1:b3:83:2d:2a:b6:24: 6c:14:e7:11:92:2f:a6:39:b3:05:bc:ed:18:89:e0: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:96:6D:58:0C:A9:0F:4B:24:F6:AE:D0:05:0E:07:24:90:53:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/939567d1-8d35-38f4-a6b9-c5035b00eb43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f2:be:2c:a9:50:57:42:dd:a3:cf:ca:a7:e5:17:cf:29:73: 77:a6:96:38:b1:91:69:dc:11:59:47:54:04:0a:1b:b0:ba:c3: ed:90:8a:14:a4:b7:cb:e0:90:77:16:5d:8f:ea:6c:f6:fd:29: cf:67:db:b2:0f:7d:f0:08:72:8b:e6:e2:04:c9:b3:1e:97:fb: 74:3b:3e:75:20:cc:e4:a5:31:36:bf:29:17:a2:b0:45:a9:e7: 80:2b:33:c7:a5:9d:b6:30:14:44:21:d9:76:2e:e4:fc:6b:f5: 06:6f:29:5e:df:1a:0a:d5:b5:6f:fe:ba:e5:48:11:dd:3a:9a: 5b:4b:3b:68:0b:cd:4f:36:49:ae:20:44:07:6b:0c:9d:e9:aa: 9e:37:03:98:d0:a2:d8:b6:b4:39:0c:cd:3b:85:6c:e5:22:63: b8:d2:61:61:d1:97:c1:97:36:83:b0:12:b4:e8:d2:09:e8:8a: af:c0:ce:3a:d5:b8:e6:86:86:74:dc:a7:aa:98:f9:da:b2:e8: bf:3f:aa:26:ce:8a:83:43:9c:e9:08:2b:ad:e8:28:75:91:94: bd:52:63:87:d0:ba:cd:3c:e5:4f:12:91:96:c3:51:ff:91:81: 29:ff:2d:77:8f:5f:77:a3:2c:05:29:fa:a6:2f:78:49:e0:e2: f2:00:56:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEbvNO1KRa4IsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk OWExZjJiOGYtZGUwZS00ZjY0LWE1MzItOWI3ZTAxZGNlYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkkuChd7mqS/0XG/lFf/LCBVR6BwriJJSKdz YNJgYuNNIeHFwTsr5GCSN1EG0x/llf1gpaaZpqKkBOvbZBuqbMQvQBSul3OXE8u3 xm0RUuoY+vrjX986bK0rFcmYiZu8Yvs9nOhcUJTTWblgqr7LKGpg09ZHbbNaDvzp AK/EeuqtMSH0Tz7VE89GQ913DGVYpp9d3hYRXaSsPdIWjmq5cRhyIuk2DN+RMXsV TGuQ2yUvELwyMDoBk7+Bcx2Cu0RQiALMfi9X32MhHB88/beX4nVETPVvW0gd9zBx z76l3GFyCFZ0Eg7ao+Gzgy0qtiRsFOcRki+mObMFvO0YieDsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt9lm1YDKkPSyT2rtAFDgckkFMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvOTM5NTY3ZDEtOGQzNS0z OGY0LWE2YjktYzUwMzViMDBlYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3yviypUFdC3aPPyqflF88pc3emljixkWncEVlHVAQKG7C6w+2QihSk t8vgkHcWXY/qbPb9Kc9n27IPffAIcovm4gTJsx6X+3Q7PnUgzOSlMTa/KReisEWp 54ArM8elnbYwFEQh2XYu5Pxr9QZvKV7fGgrVtW/+uuVIEd06mltLO2gLzU82Sa4g RAdrDJ3pqp43A5jQoti2tDkMzTuFbOUiY7jSYWHRl8GXNoOwErTo0gnoiq/AzjrV uOaGhnTcp6qY+dqy6L8/qibOioNDnOkIK63oKHWRlL1SY4fQus085U8SkZbDUf+R gSn/LXePX3ejLAUp+qYveEng4vIAVss= -----END CERTIFICATE-----Generated at Wed Nov 5 09:17:26 2025 by rpki-client