$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa File: ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa (raw, json) Hash identifier: OKisSdynRVvQf3OaJmrwomKHP0CYAvHsZXZlsajXrBc= Subject key identifier: BB:51:45:BA:3D:62:C7:E5:0C:E6:5D:7B:45:06:E1:BE:96:40:0C:7A Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584F2EED198426557E13C7ECCDA0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 13576 IP address blocks: 66.115.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:19:84:26:55:7e:13:c7:ec:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=7b81b428-042b-468e-babd-3b355709e824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:af:03:56:75:5a:40:a0:d2:2b:a6:9b:95: bc:90:f6:b0:63:ff:82:a9:4c:c0:cd:d2:14:f2:d2: 99:1a:41:04:0b:85:7e:47:6f:04:8a:ec:f7:79:e9: 63:00:1c:99:c3:71:6a:bc:60:9d:19:02:2c:82:f9: 74:03:e2:4f:0d:3c:3a:44:15:4b:b3:47:ea:a0:a4: 5a:59:cf:0a:ad:ea:4c:9b:b4:ee:83:bd:2b:55:a0: 60:13:90:59:45:59:25:74:a6:91:17:9e:7f:ae:04: 44:36:2b:fe:92:4b:b0:51:33:64:67:be:8d:70:c5: 63:2c:18:f4:24:5f:62:69:25:a4:ad:17:9f:27:0c: 54:de:75:17:86:0d:9d:9d:57:4e:31:46:b0:5b:61: a6:4f:4f:a2:72:41:64:8f:2c:f4:2c:b5:45:b9:66: c8:d2:b9:91:1b:6c:24:57:ad:54:5b:c2:54:c6:d0: f1:d5:ff:d5:bf:dc:42:02:87:25:f2:7f:90:29:9b: a9:bd:63:9b:c5:a4:2d:76:31:4a:c7:42:8c:a0:07: 3b:af:09:93:dc:b4:a0:87:3f:6a:ad:51:bb:82:51: 9c:a1:6d:97:62:3b:3b:50:ad:a3:77:e8:45:87:75: aa:2e:84:2f:f2:fa:65:52:9d:f2:a3:a4:55:44:8a: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:51:45:BA:3D:62:C7:E5:0C:E6:5D:7B:45:06:E1:BE:96:40:0C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:1a:7c:ad:72:bb:d5:c4:2a:4e:d1:5a:59:a7:92:cb:e1:d0: be:5f:04:7b:50:51:a6:9e:70:b7:f3:30:9c:bb:56:8c:de:19: bd:db:9e:53:18:ca:40:cb:62:54:60:3a:2e:78:f7:dc:60:8d: 2a:f1:02:b1:f4:cf:16:a1:9a:e9:64:8f:cb:4f:af:42:60:66: 6c:1d:d0:60:74:90:4c:9e:bd:86:2b:2e:6e:3f:a3:8a:42:67: 28:3b:54:57:50:57:5d:d2:2b:5a:bc:3c:4b:00:5b:36:07:da: 3b:a9:18:e0:ac:a1:a4:4e:77:cd:84:22:03:47:3b:fa:62:c3: 65:62:d1:89:44:2a:43:4b:ba:f9:07:a0:99:e6:43:57:e2:45: 65:b3:1f:e5:56:b1:b3:28:7e:0b:c5:a8:63:fc:af:0f:46:9c: af:1a:0e:81:b7:1c:df:2c:3f:4c:8d:97:c1:0c:50:28:e5:06: 89:71:d8:a7:dd:4a:8a:94:c2:c8:0f:1d:db:5a:d0:78:60:36: f7:0b:1b:7f:df:63:6f:7c:79:f3:46:7b:44:de:a7:b2:1a:0e: 10:d6:20:a8:76:98:1e:a7:da:0a:4c:74:c7:d5:40:2f:5b:91: 5a:04:db:8e:03:0d:bf:7f:b8:af:e0:62:54:7f:e7:f2:12:cb: cc:87:34:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RmEJlV+E8fszaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk N2I4MWI0MjgtMDQyYi00NjhlLWJhYmQtM2IzNTU3MDllODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7WvA1Z1WkCg0iumm5W8kPawY/+CqUzAzdIU 8tKZGkEEC4V+R28Eiuz3eeljAByZw3FqvGCdGQIsgvl0A+JPDTw6RBVLs0fqoKRa Wc8KrepMm7Tug70rVaBgE5BZRVkldKaRF55/rgRENiv+kkuwUTNkZ76NcMVjLBj0 JF9iaSWkrRefJwxU3nUXhg2dnVdOMUawW2GmT0+ickFkjyz0LLVFuWbI0rmRG2wk V61UW8JUxtDx1f/Vv9xCAocl8n+QKZupvWObxaQtdjFKx0KMoAc7rwmT3LSghz9q rVG7glGcoW2XYjs7UK2jd+hFh3WqLoQv8vplUp3yo6RVRIri7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtRRbo9YsflDOZde0UG4b6WQAx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2UwZTllZWYtZmY4Yy0z OGZhLWEzYWYtNWUzNjc4Y2FlOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQafK1yu9XEKk7RWlmnksvh0L5fBHtQUaaecLfzMJy7VozeGb3bnlMY ykDLYlRgOi5499xgjSrxArH0zxahmulkj8tPr0JgZmwd0GB0kEyevYYrLm4/o4pC Zyg7VFdQV13SK1q8PEsAWzYH2jupGOCsoaROd82EIgNHO/piw2Vi0YlEKkNLuvkH oJnmQ1fiRWWzH+VWsbMofgvFqGP8rw9GnK8aDoG3HN8sP0yNl8EMUCjlBolx2Kfd SoqUwsgPHdta0HhgNvcLG3/fY298efNGe0Tep7IaDhDWIKh2mB6n2gpMdMfVQC9b kVoE244DDb9/uK/gYlR/5/ISy8yHNDs= -----END CERTIFICATE-----Generated at Thu Sep 24 11:58:41 2026 by rpki-client