$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa File: ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa (raw, json) Hash identifier: ycm/qA0wHXuvTRF2WqiiITHB9frkh72n6nIPnvDFce0= Subject key identifier: 92:93:4E:8F:4E:00:BD:D3:61:C1:58:89:CD:26:EE:B8:06:B0:EB:06 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B99D79FD0F92779C9EE495F80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 6312 IP address blocks: 66.115.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:9f:d0:f9:27:79:c9:ee:49:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9f286372-0100-4801-b652-3c930f7fa7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:36:85:ff:96:ee:46:80:64:cb:cd:9a:84:70: 27:46:86:ec:13:12:dd:be:0e:5e:ab:59:65:a4:68: 4f:68:35:74:1b:ac:d6:06:e4:9e:83:94:3d:33:8d: ac:67:02:67:4b:56:43:18:18:41:18:c0:26:4f:41: 0f:95:87:a9:d7:b8:a9:05:d5:32:fe:28:2f:66:c9: e8:50:cf:3d:ea:24:da:de:c3:0a:39:5d:f1:f9:3e: a7:5b:4c:45:88:71:36:db:c8:ec:88:4c:5e:c8:b7: e9:ed:ba:10:12:76:6a:24:18:9d:a4:7c:b3:ce:15: 97:62:45:87:02:0f:b9:19:95:8f:07:1d:17:61:6d: be:b6:c2:0a:cf:24:7c:07:8c:5b:5d:ee:c0:e7:c6: 4b:b6:57:df:11:45:1d:3e:c5:3a:ab:2c:02:7e:db: a2:6b:9f:09:b5:41:78:29:7a:de:8a:cf:e0:31:b2: 14:41:a1:0e:ab:d1:10:4c:b3:f4:15:ef:0a:e2:19: 14:4a:d5:da:11:92:c3:97:11:17:cb:c8:da:36:ef: 17:41:f7:3d:9d:d2:15:4d:f2:ad:6e:2b:ce:2d:0e: 5d:ee:0a:e8:88:10:25:8a:06:99:71:a6:3c:f0:68: 39:97:c5:85:38:f3:c5:f9:46:31:1d:f4:55:e5:d3: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:93:4E:8F:4E:00:BD:D3:61:C1:58:89:CD:26:EE:B8:06:B0:EB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca521ef1-23d6-3c8e-85c6-3fde2f5042f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:1c:0f:e1:03:f6:d1:22:f7:8e:7d:1d:be:1a:9c:3b:22:b0: 48:99:1b:fb:d3:a2:3a:85:de:96:b2:3f:45:b3:4b:66:74:99: 17:08:d4:a8:d1:1e:33:c2:ef:ec:05:12:df:5d:d8:e5:8c:5f: 94:6f:4d:c4:c5:fd:f0:72:45:9b:15:05:31:9f:cb:86:b8:52: f9:77:fe:25:13:23:f7:0e:35:76:8c:c2:38:9b:75:d7:91:97: ed:75:fd:8a:34:8e:37:ad:e0:9b:12:2c:21:94:22:14:02:00: 4f:cf:ac:36:f8:0a:f5:ce:74:c7:ed:23:ee:16:24:2c:c6:b0: cb:8c:71:9a:50:80:fc:b4:65:42:1d:49:28:57:76:ac:bd:6e: 0f:84:f7:ee:9f:f7:0e:09:4a:53:4c:68:34:22:e6:e4:bc:8d: 3a:80:b1:f9:b2:62:9d:54:bb:2b:e5:0d:b2:1a:c4:dc:27:6e: 20:dd:2c:fb:7e:fc:ee:1e:5b:68:59:a6:ac:e6:ea:90:a4:1f: ec:09:e3:15:ef:d9:c8:45:ad:4b:18:10:c3:8a:0c:03:8e:23: 28:db:69:04:6b:dc:05:03:dc:e4:5c:a6:e2:c3:07:6b:cb:79: c4:71:32:e3:78:6e:bb:4a:4f:34:af:1a:62:ee:23:2c:78:f3: fb:c9:31:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15/Q+Sd5ye5JX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OWYyODYzNzItMDEwMC00ODAxLWI2NTItM2M5MzBmN2ZhN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzaF/5buRoBky82ahHAnRobsExLdvg5eq1ll pGhPaDV0G6zWBuSeg5Q9M42sZwJnS1ZDGBhBGMAmT0EPlYep17ipBdUy/igvZsno UM896iTa3sMKOV3x+T6nW0xFiHE228jsiExeyLfp7boQEnZqJBidpHyzzhWXYkWH Ag+5GZWPBx0XYW2+tsIKzyR8B4xbXe7A58ZLtlffEUUdPsU6qywCftuia58JtUF4 KXreis/gMbIUQaEOq9EQTLP0Fe8K4hkUStXaEZLDlxEXy8jaNu8XQfc9ndIVTfKt bivOLQ5d7groiBAligaZcaY88Gg5l8WFOPPF+UYxHfRV5dN0oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKTTo9OAL3TYcFYic0m7rgGsOsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2E1MjFlZjEtMjNkNi0z YzhlLTg1YzYtM2ZkZTJmNTA0MmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4cD+ED9tEi9459Hb4anDsisEiZG/vTojqF3payP0WzS2Z0mRcI1KjR HjPC7+wFEt9d2OWMX5RvTcTF/fByRZsVBTGfy4a4Uvl3/iUTI/cONXaMwjibddeR l+11/Yo0jjet4JsSLCGUIhQCAE/PrDb4CvXOdMftI+4WJCzGsMuMcZpQgPy0ZUId SShXdqy9bg+E9+6f9w4JSlNMaDQi5uS8jTqAsfmyYp1UuyvlDbIaxNwnbiDdLPt+ /O4eW2hZpqzm6pCkH+wJ4xXv2chFrUsYEMOKDAOOIyjbaQRr3AUD3ORcpuLDB2vL ecRxMuN4brtKTzSvGmLuIyx48/vJMSo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:17 2025 by rpki-client