$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f709664b-3074-3bc2-ab1b-dcf1a96c23e7.roa File: f709664b-3074-3bc2-ab1b-dcf1a96c23e7.roa (raw, json) Hash identifier: 426I409rz8hf9s1dBBWMNbsZqZbL2eJ3OGFY6WaZRaU= Subject key identifier: 3A:E7:6A:6B:CF:81:65:C6:33:9F:21:1A:6A:C8:F7:F5:70:D9:79:7B Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584CB33CAD92A1017B32808F6C80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f709664b-3074-3bc2-ab1b-dcf1a96c23e7.roa Signing time: Fri 30 Jan 2026 20:06:35 +0000 ROA not before: Fri 30 Jan 2026 20:06:35 +0000 ROA not after: Thu 30 Apr 2026 19:06:35 +0000 asID: 402159 IP address blocks: 66.115.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:3c:ad:92:a1:01:7b:32:80:8f:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jan 30 20:06:35 2026 GMT Not After : Apr 30 19:06:35 2026 GMT Subject: CN=581fa631-dfe6-4a31-9725-e02b149613e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:3d:6c:25:45:f1:56:91:d4:f0:26:d4:0d: ba:ff:53:c8:66:5f:64:e2:88:6d:ed:a6:ae:fc:ea: f4:3c:44:2b:d1:58:9c:11:b4:fd:fc:ea:0d:d1:06: 6d:f2:e2:e3:90:9e:34:02:be:bb:ad:8e:eb:6f:73: 7d:7a:57:a9:53:e0:05:a6:58:e3:33:35:30:77:55: 65:e5:1a:63:2e:53:3a:87:d6:c2:13:74:04:58:a5: 23:04:ac:ee:3c:98:94:6e:5f:cc:b8:0a:b6:bf:a4: 32:04:8e:42:03:a4:50:3d:c2:5d:d6:38:c1:04:d0: 0c:25:da:53:d3:f9:28:73:5d:78:1c:27:82:92:67: c0:14:e3:e4:29:1f:d3:e2:77:66:68:e0:ae:b7:c1: 05:f3:91:f9:78:46:9d:b4:68:a8:ad:a1:60:bb:25: 4a:84:a1:9b:9b:34:53:b9:b3:5e:92:76:1a:43:8c: 07:bf:c5:06:95:00:aa:2f:70:14:f7:e3:5f:95:0e: b3:40:9c:4a:00:31:1b:df:cd:97:f4:09:b7:94:6b: c5:95:65:8c:7b:95:8a:0f:e2:5e:9a:db:93:45:84: ce:c8:e2:be:6f:4b:3e:91:8b:67:17:46:a1:01:d0: de:c8:56:da:be:b0:43:30:1f:ed:e1:47:42:a9:48: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E7:6A:6B:CF:81:65:C6:33:9F:21:1A:6A:C8:F7:F5:70:D9:79:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f709664b-3074-3bc2-ab1b-dcf1a96c23e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f1:cb:d5:00:7d:43:25:70:1e:da:78:c9:31:f8:7d:1d:04: bb:97:6c:0b:75:fa:7a:bd:57:99:72:a0:65:1b:5b:23:ac:e7: 43:23:2d:da:47:07:3c:0b:d0:3c:87:4d:0c:30:09:77:6c:5f: 53:fb:e0:dd:c6:61:17:62:1b:4c:19:84:0b:49:04:e5:27:27: 64:3d:a7:ed:ea:66:db:36:6e:b1:fb:a8:21:74:c2:bc:cb:6a: d1:bd:3d:9c:3e:40:77:c3:66:40:f7:74:56:af:34:ee:00:81: df:bd:6f:d9:75:fb:94:2e:05:53:a3:e1:24:c3:53:5f:d7:67: ff:f2:0b:0c:a5:cf:91:cc:67:90:03:c3:ba:cd:b7:b6:51:96: 1a:f8:f7:17:c0:b5:c0:67:22:86:bb:9f:2b:44:e7:f5:58:03: 97:ac:a0:40:5b:0d:a0:ee:8b:37:0d:de:5c:f9:06:00:41:8e: 34:3f:a8:0f:a8:84:88:5a:5d:2c:6f:6f:9b:3e:58:03:7c:8a: 5d:70:c0:ce:9d:92:3b:77:c5:e2:3d:6b:ce:10:5a:b6:6d:39: df:3c:84:9b:9c:e7:a3:c3:6d:18:8b:ae:2e:ff:fc:8a:4e:f1: 65:11:af:70:21:1a:be:74:46:0d:f7:52:2b:8c:d9:c3:3d:d4: 2c:81:3c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyzPK2SoQF7MoCPbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDEzMDIwMDYzNVoXDTI2MDQzMDE5MDYzNVowLzEtMCsGA1UEAxMk NTgxZmE2MzEtZGZlNi00YTMxLTk3MjUtZTAyYjE0OTYxM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwM9bCVF8VaR1PAm1A26/1PIZl9k4oht7aau /Or0PEQr0VicEbT9/OoN0QZt8uLjkJ40Ar67rY7rb3N9elepU+AFpljjMzUwd1Vl 5RpjLlM6h9bCE3QEWKUjBKzuPJiUbl/MuAq2v6QyBI5CA6RQPcJd1jjBBNAMJdpT 0/koc114HCeCkmfAFOPkKR/T4ndmaOCut8EF85H5eEadtGioraFguyVKhKGbmzRT ubNeknYaQ4wHv8UGlQCqL3AU9+NflQ6zQJxKADEb382X9Am3lGvFlWWMe5WKD+Je mtuTRYTOyOK+b0s+kYtnF0ahAdDeyFbavrBDMB/t4UdCqUhFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrnamvPgWXGM58hGmrI9/Vw2Xl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjcwOTY2NGItMzA3NC0z YmMyLWFiMWItZGNmMWE5NmMyM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/xy9UAfUMlcB7aeMkx+H0dBLuXbAt1+nq9V5lyoGUbWyOs50MjLdpH BzwL0DyHTQwwCXdsX1P74N3GYRdiG0wZhAtJBOUnJ2Q9p+3qZts2brH7qCF0wrzL atG9PZw+QHfDZkD3dFavNO4Agd+9b9l1+5QuBVOj4STDU1/XZ//yCwylz5HMZ5AD w7rNt7ZRlhr49xfAtcBnIoa7nytE5/VYA5esoEBbDaDuizcN3lz5BgBBjjQ/qA+o hIhaXSxvb5s+WAN8il1wwM6dkjt3xeI9a84QWrZtOd88hJuc56PDbRiLri7//IpO 8WURr3AhGr50Rg33UiuM2cM91CyBPIA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:05:30 2026 by rpki-client