$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f3bbcb45-8bfa-395a-9506-d5d4c2a2b7e7.roa File: f3bbcb45-8bfa-395a-9506-d5d4c2a2b7e7.roa (raw, json) Hash identifier: aqPbyJabsKCVFsi2GK50g42aErugoA7j5PvD4zvs5Ro= Subject key identifier: BF:7B:F8:86:CA:FF:54:34:F4:99:68:84:5F:DD:2F:45:28:9B:BC:4D Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584B99D7A003EDAFD9EB73B41EE0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f3bbcb45-8bfa-395a-9506-d5d4c2a2b7e7.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 6312 IP address blocks: 66.115.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a0:03:ed:af:d9:eb:73:b4:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=28dfafa0-e076-466d-ab2e-89233cc2e526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:33:e0:b3:66:99:63:65:f7:89:37:63:05: e6:98:be:5f:b0:9c:7d:58:aa:98:41:11:90:ac:fc: e5:7c:ea:f6:6f:80:9e:86:42:04:84:86:a2:73:2c: cc:4e:2c:0a:55:8f:27:47:e3:65:19:74:fc:a7:74: b4:27:bf:80:d2:37:d2:67:33:2a:54:d0:d5:a5:c8: 4f:82:56:fa:a3:93:ac:5b:68:78:52:4f:9f:c1:32: 2d:9c:3c:a2:f4:3a:bf:94:5b:5a:d5:b4:e5:d2:3c: 8c:35:a6:e1:35:61:92:ac:4f:41:50:21:b8:74:3a: 33:9c:2b:dd:84:14:69:e9:71:9b:90:98:ad:cd:7b: 04:46:1f:70:e1:86:c9:cf:d4:30:11:fd:03:0b:0b: 89:ec:f4:6a:9a:2d:94:75:ac:6c:47:29:2c:5d:3f: 74:03:58:59:b3:cf:74:b0:11:5d:7b:47:48:ac:89: 61:47:b2:e8:81:6f:88:9a:22:d8:3a:bb:63:2a:35: 8b:f8:2a:cd:47:9d:d3:d3:73:be:0b:83:ce:32:f1: 4c:aa:06:c8:ab:76:82:af:8f:6c:16:b3:b0:14:c9: 2b:52:e5:16:45:c9:e8:3c:58:3b:fa:70:db:d6:1f: 0b:dd:2e:da:9e:23:d3:02:8e:fe:95:57:3e:1a:7f: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:F8:86:CA:FF:54:34:F4:99:68:84:5F:DD:2F:45:28:9B:BC:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f3bbcb45-8bfa-395a-9506-d5d4c2a2b7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4f:78:90:9e:2a:2e:c5:0f:fa:00:44:d8:7c:f1:a0:a4:8c: ad:df:40:db:63:58:88:25:77:3a:c5:48:db:14:b4:f1:47:27: b9:01:7a:f1:e8:70:4a:ce:1e:cc:67:6f:56:d4:e5:e0:a4:d1: ca:4a:6a:fc:31:1a:1e:1c:20:7b:fd:a6:1d:5d:22:ab:58:97: 5f:34:7d:13:4b:ae:b6:a3:fe:cd:82:c4:c9:b9:80:e5:bc:40: 55:e8:01:ba:d8:10:cd:ea:89:47:02:6c:63:eb:76:ba:37:bc: 39:a3:89:35:73:ce:41:41:c8:cf:32:94:41:16:d2:98:fa:35: 55:8d:fe:cd:97:f6:01:3e:80:1c:7e:01:65:d4:04:b2:62:52: ff:0b:be:2d:82:b0:86:02:24:84:26:4d:3c:5d:3a:ea:d9:45: 08:84:be:70:a8:a7:8f:23:c6:d8:b0:c2:92:9f:e3:58:e2:4b: 46:a7:1f:a3:f0:90:de:91:42:db:16:33:78:a1:88:e1:64:58: 6e:fa:04:ed:c1:f0:a2:d5:0f:87:5d:2c:e7:39:82:0a:c7:fd: f1:d2:bb:22:70:d4:d1:89:7e:d3:fc:37:b1:08:d6:5d:9d:eb: a8:48:c6:e9:20:48:e7:50:be:eb:bb:9b:df:3c:b0:af:a8:41: 08:e1:96:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16AD7a/Z63O0HuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjhkZmFmYTAtZTA3Ni00NjZkLWFiMmUtODkyMzNjYzJlNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdEz4LNmmWNl94k3YwXmmL5fsJx9WKqYQRGQ rPzlfOr2b4CehkIEhIaicyzMTiwKVY8nR+NlGXT8p3S0J7+A0jfSZzMqVNDVpchP glb6o5OsW2h4Uk+fwTItnDyi9Dq/lFta1bTl0jyMNabhNWGSrE9BUCG4dDoznCvd hBRp6XGbkJitzXsERh9w4YbJz9QwEf0DCwuJ7PRqmi2UdaxsRyksXT90A1hZs890 sBFde0dIrIlhR7LogW+ImiLYOrtjKjWL+CrNR53T03O+C4POMvFMqgbIq3aCr49s FrOwFMkrUuUWRcnoPFg7+nDb1h8L3S7aniPTAo7+lVc+Gn8D0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL97+IbK/1Q09JlohF/dL0Uom7xNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjNiYmNiNDUtOGJmYS0z OTVhLTk1MDYtZDVkNGMyYTJiN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNPeJCeKi7FD/oARNh88aCkjK3fQNtjWIgldzrFSNsUtPFHJ7kBevHo cErOHsxnb1bU5eCk0cpKavwxGh4cIHv9ph1dIqtYl180fRNLrraj/s2CxMm5gOW8 QFXoAbrYEM3qiUcCbGPrdro3vDmjiTVzzkFByM8ylEEW0pj6NVWN/s2X9gE+gBx+ AWXUBLJiUv8Lvi2CsIYCJIQmTTxdOurZRQiEvnCop48jxtiwwpKf41jiS0anH6Pw kN6RQtsWM3ihiOFkWG76BO3B8KLVD4ddLOc5ggrH/fHSuyJw1NGJftP8N7EI1l2d 66hIxukgSOdQvuu7m988sK+oQQjhliA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:43 2025 by rpki-client