$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a0916aa8-19d4-305e-accf-a6aff8a1bb9b.roa File: a0916aa8-19d4-305e-accf-a6aff8a1bb9b.roa (raw, json) Hash identifier: ozVUFCUwEyiPM3XB0l3SPNrYWgRxK2OC9DR8dkvgAGg= Subject key identifier: D6:11:2A:43:BD:17:78:3A:AA:62:8E:D5:55:CD:75:90:21:47:D3:01 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584EA787088D5D17B6EC7D7DFC40 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a0916aa8-19d4-305e-accf-a6aff8a1bb9b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13576 IP address blocks: 66.115.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:08:8d:5d:17:b6:ec:7d:7d:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d385ce23-7f8f-4d1c-a111-56730f73dbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:1f:47:c3:bb:72:cf:d7:a2:27:f6:60:21: 16:cf:a4:6c:c3:7b:46:d5:ca:8d:17:97:98:b4:40: 19:8d:9a:28:12:ab:eb:57:d6:67:86:8f:10:84:d1: dd:ed:3f:05:fd:f4:49:88:e1:d9:3c:de:50:24:28: ab:27:d7:bd:ae:e6:57:cb:28:fa:da:73:a1:5f:87: 08:37:a6:0a:6f:01:96:26:ca:20:32:2c:07:f1:36: b9:68:8f:86:61:85:4f:f7:1e:8f:8a:4e:67:38:27: d1:10:4e:84:dd:f8:83:4d:04:50:e6:8a:78:ab:bb: 98:1f:51:13:d4:c1:3f:f8:f7:f5:d8:28:0e:a5:7f: f4:67:9a:51:2e:16:94:a2:df:2a:c9:57:99:b0:08: 0b:9e:ca:22:b2:5a:20:ea:8a:05:bd:88:76:19:9d: f8:26:15:34:c9:53:92:f7:47:69:98:3f:9c:c7:b0: 32:ea:36:4d:71:1d:ca:01:19:50:16:4d:db:7f:90: 15:0a:7a:11:50:f1:f4:db:81:d5:57:c2:4c:00:39: 3d:27:9e:d9:2c:fa:a4:df:5a:db:f3:55:49:b0:e4: 3b:1b:1d:e6:4d:61:b7:b9:11:34:97:a5:52:52:63: d4:ac:9f:5a:eb:41:2d:27:9b:4e:82:6f:ad:03:f2: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:11:2A:43:BD:17:78:3A:AA:62:8E:D5:55:CD:75:90:21:47:D3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/a0916aa8-19d4-305e-accf-a6aff8a1bb9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0e:5c:9e:f9:be:85:09:d6:2a:72:5d:92:88:4c:7a:dd:a0: ea:b6:66:18:24:18:bd:c6:d9:c0:8c:3f:e3:4d:64:98:ab:a5: 3d:5d:4a:3e:ca:8d:bf:44:c2:c3:6d:24:b1:3a:62:e4:8f:c9: 53:7b:3a:48:a2:bf:5e:91:7d:43:dd:4d:61:06:ec:a7:0e:5a: 51:ac:3e:5e:0e:34:f7:ed:95:f4:64:a8:5e:f3:2e:62:57:4e: 41:ae:2e:02:3b:71:5b:1c:5c:93:8f:18:9e:10:07:e6:6b:37: 5b:4a:68:70:31:9c:43:f4:ec:32:ba:55:4d:91:df:e6:1e:3f: 70:ce:ba:75:2c:b7:3a:3e:34:e9:72:15:13:97:f9:be:04:21: 83:3d:d5:5f:21:f8:65:a7:f5:5a:1e:72:5a:f5:8d:2d:8a:1f: 45:9b:76:69:cf:40:75:22:36:b2:a2:60:e1:23:b1:00:43:ed: d2:45:2f:50:e0:cd:aa:c0:51:4a:d7:46:12:75:d3:1b:e7:f2: 74:84:01:e5:ad:5c:fd:16:55:ef:0a:2f:d7:d3:9d:88:8f:d1: ce:f9:aa:9a:08:22:ae:99:9d:0a:eb:90:d6:8c:ec:94:eb:1d: 61:48:ef:b8:03:ce:56:c0:3a:94:dc:57:4d:30:70:5e:90:be: 34:2f:a1:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhwiNXRe27H19/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDM4NWNlMjMtN2Y4Zi00ZDFjLWExMTEtNTY3MzBmNzNkYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ4fR8O7cs/Xoif2YCEWz6Rsw3tG1cqNF5eY tEAZjZooEqvrV9Znho8QhNHd7T8F/fRJiOHZPN5QJCirJ9e9ruZXyyj62nOhX4cI N6YKbwGWJsogMiwH8Ta5aI+GYYVP9x6Pik5nOCfREE6E3fiDTQRQ5op4q7uYH1ET 1ME/+Pf12CgOpX/0Z5pRLhaUot8qyVeZsAgLnsoislog6ooFvYh2GZ34JhU0yVOS 90dpmD+cx7Ay6jZNcR3KARlQFk3bf5AVCnoRUPH024HVV8JMADk9J57ZLPqk31rb 81VJsOQ7Gx3mTWG3uRE0l6VSUmPUrJ9a60EtJ5tOgm+tA/K2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYRKkO9F3g6qmKO1VXNdZAhR9MBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYTA5MTZhYTgtMTlkNC0z MDVlLWFjY2YtYTZhZmY4YTFiYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgOXJ75voUJ1ipyXZKITHrdoOq2ZhgkGL3G2cCMP+NNZJirpT1dSj7K jb9EwsNtJLE6YuSPyVN7Okiiv16RfUPdTWEG7KcOWlGsPl4ONPftlfRkqF7zLmJX TkGuLgI7cVscXJOPGJ4QB+ZrN1tKaHAxnEP07DK6VU2R3+YeP3DOunUstzo+NOly FROX+b4EIYM91V8h+GWn9Voeclr1jS2KH0WbdmnPQHUiNrKiYOEjsQBD7dJFL1Dg zarAUUrXRhJ10xvn8nSEAeWtXP0WVe8KL9fTnYiP0c75qpoIIq6ZnQrrkNaM7JTr HWFI77gDzlbAOpTcV00wcF6QvjQvoTM= -----END CERTIFICATE-----Generated at Wed Jul 29 09:31:08 2026 by rpki-client