$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f86de039-b68d-34ad-8fca-d87fb2bdb186.roa File: f86de039-b68d-34ad-8fca-d87fb2bdb186.roa (raw, json) Hash identifier: er4L0ldPMVLqD7MI62UW8gDDm5Dc4VXVgsN2MkU8lMs= Subject key identifier: BB:48:BF:3C:28:C2:01:54:6D:CA:97:3B:16:47:C9:E8:E9:58:09:72 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584EA7870CF603101C2146C78F00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f86de039-b68d-34ad-8fca-d87fb2bdb186.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13576 IP address blocks: 66.231.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:0c:f6:03:10:1c:21:46:c7:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=35a20bb6-6e32-45e8-b6c9-90b49ff6afbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:f2:9f:e3:6c:3d:7f:46:d9:c0:c9:3a:9c: eb:95:ac:7a:40:08:f2:92:e6:33:44:53:bb:2b:ac: 99:2e:4b:fa:81:97:32:96:37:e6:64:2b:6f:88:4f: d9:fe:97:81:64:c9:8b:68:2f:69:fd:11:d6:8e:6e: f4:61:f8:d8:39:10:15:d3:06:e2:90:3c:03:b3:f8: 6f:bf:52:30:52:49:82:52:0e:8e:1e:9c:8f:ca:f4: ce:a2:2e:c0:77:7e:31:79:cf:b2:00:31:3c:9a:80: d3:bf:9f:6c:d9:83:f7:3d:3f:68:13:56:b2:d3:de: be:1c:a7:a9:c3:cd:f0:2c:15:99:bf:31:7e:7d:48: 1b:0b:4f:4d:3b:64:73:44:79:c9:1c:93:22:d0:d6: 36:99:5a:b5:1f:66:ee:94:3c:3a:77:fc:39:f7:59: d6:5c:20:12:1f:4c:91:d1:6a:61:54:60:fe:b4:6a: a7:af:94:4c:28:a9:97:06:2d:e4:be:f9:91:c2:d6: 5c:ea:de:58:3e:cd:58:78:44:ff:ea:7c:4b:2e:e5: 89:16:50:a2:2b:51:e8:90:22:31:be:26:84:0b:4a: 2f:4b:ea:ee:db:f4:e1:52:02:58:5f:e5:de:c5:9f: 64:9a:5a:d5:3d:95:6b:69:bd:fd:e2:ee:51:8a:47: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:48:BF:3C:28:C2:01:54:6D:CA:97:3B:16:47:C9:E8:E9:58:09:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f86de039-b68d-34ad-8fca-d87fb2bdb186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.231.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a2:51:27:9b:9e:e3:e1:01:d9:0d:73:0f:2a:48:44:0b:a7: 62:69:65:1b:ba:a8:1f:e0:1e:35:14:63:2b:a8:5c:b6:c2:ce: 8e:b5:22:71:0e:35:47:98:78:78:93:3e:17:5c:e8:be:32:01: 45:e8:dc:27:f2:18:2c:eb:a3:eb:c8:79:41:7a:cc:d9:57:91: 32:ea:5b:37:c3:10:bc:a0:68:0c:5e:6b:a8:bc:66:50:97:64: 4b:81:b8:b8:39:a9:7d:4e:0f:66:91:dd:80:2f:ed:56:17:b8: a9:57:28:35:ec:2f:24:0e:82:87:c8:2e:03:c2:cd:c3:48:64: e0:d4:e1:62:a2:60:e4:5c:c8:f8:38:38:d4:61:9d:ed:22:a2: 80:26:a3:d8:d7:30:3e:34:2e:f4:b9:dd:4c:14:85:bc:7a:49: f4:55:ea:e2:ea:be:49:ab:c7:c0:96:a4:63:01:19:97:81:b1: 27:8d:ed:12:6a:48:a4:c4:e5:eb:d8:c9:ed:d0:d1:8d:67:4c: a9:49:26:f0:14:d6:5d:fc:13:11:e1:02:70:24:1a:3e:ee:54: e0:ca:69:4d:0b:10:fb:81:79:2a:8c:fa:c7:4d:0d:9b:f4:ef: f5:77:88:b1:a4:fc:02:8c:11:ca:a5:cc:4c:4d:09:f7:5c:ec: 9d:4c:a0:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhwz2AxAcIUbHjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzVhMjBiYjYtNmUzMi00NWU4LWI2YzktOTBiNDlmZjZhZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNjyn+NsPX9G2cDJOpzrlax6QAjykuYzRFO7 K6yZLkv6gZcyljfmZCtviE/Z/peBZMmLaC9p/RHWjm70YfjYORAV0wbikDwDs/hv v1IwUkmCUg6OHpyPyvTOoi7Ad34xec+yADE8moDTv59s2YP3PT9oE1ay096+HKep w83wLBWZvzF+fUgbC09NO2RzRHnJHJMi0NY2mVq1H2bulDw6d/w591nWXCASH0yR 0WphVGD+tGqnr5RMKKmXBi3kvvmRwtZc6t5YPs1YeET/6nxLLuWJFlCiK1HokCIx viaEC0ovS+ru2/ThUgJYX+XexZ9kmlrVPZVrab394u5RikdKfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtIvzwowgFUbcqXOxZHyejpWAlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZjg2ZGUwMzktYjY4ZC0z NGFkLThmY2EtZDg3ZmIyYmRiMTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQucfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6iUSebnuPhAdkNcw8qSEQLp2JpZRu6qB/gHjUUYyuoXLbCzo61InEO NUeYeHiTPhdc6L4yAUXo3CfyGCzro+vIeUF6zNlXkTLqWzfDELygaAxea6i8ZlCX ZEuBuLg5qX1OD2aR3YAv7VYXuKlXKDXsLyQOgofILgPCzcNIZODU4WKiYORcyPg4 ONRhne0iooAmo9jXMD40LvS53UwUhbx6SfRV6uLqvkmrx8CWpGMBGZeBsSeN7RJq SKTE5evYye3Q0Y1nTKlJJvAU1l38ExHhAnAkGj7uVODKaU0LEPuBeSqM+sdNDZv0 7/V3iLGk/AKMEcqlzExNCfdc7J1MoHA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:35:26 2026 by rpki-client