$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/95f91c65-3a7c-3b42-97c4-17a70e3dad02.roa File: 95f91c65-3a7c-3b42-97c4-17a70e3dad02.roa (raw, json) Hash identifier: 5+A5XHViAqlsNudbkstLQwOJTrnJXWuIWyqxJoFh6Uc= Subject key identifier: 15:95:BB:4F:05:69:EC:A0:F5:70:B2:58:18:90:C0:5C:6D:3B:71:E0 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F4328584AAB2652BBDAC24C1E69D2E080 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/95f91c65-3a7c-3b42-97c4-17a70e3dad02.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 4134 IP address blocks: 66.102.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:52:bb:da:c2:4c:1e:69:d2:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=b6093a5c-cbb6-4496-95f0-e7e69d00d678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ac:41:80:e9:dc:d8:5a:6f:d8:be:a1:e0:68: 28:eb:ec:ff:78:11:dd:ef:9f:e5:0a:d1:98:c6:57: 34:4d:49:b6:fe:00:1d:5e:b4:c2:18:e6:23:fb:d1: 42:5e:7e:70:01:d6:5f:bc:1f:50:38:b9:1c:86:6b: 55:ac:29:d9:f7:53:86:f5:a0:cb:a8:f0:22:a4:48: 2f:1b:8e:b6:f8:f8:b1:b0:36:f2:39:40:25:07:4d: 71:0a:c3:14:12:4e:66:06:0c:9c:80:68:bf:98:9d: 7e:6b:71:65:04:85:81:5f:6c:40:6c:0a:a7:53:31: d2:73:ee:6f:b9:05:ca:3c:15:59:de:0e:da:7a:f3: 39:9e:a9:d9:34:f7:29:4e:7e:94:78:3c:b5:e7:a6: f9:d7:d5:f5:e9:31:e9:98:ed:7e:96:bd:e2:64:78: ce:0b:a8:11:a5:e5:da:b8:85:81:1b:68:19:6f:75: 3d:09:67:6a:f5:bd:f2:ea:7c:30:3d:d5:bf:3e:fd: 21:3a:24:5b:88:09:09:b4:23:79:55:2e:be:af:de: 59:af:83:9d:77:5d:67:0f:d7:61:48:a7:6d:77:4b: 4b:b0:d1:a0:67:01:5e:62:24:b3:ec:12:d8:e2:2b: 2b:9f:77:41:c0:ad:7a:49:33:71:5a:7f:85:5d:ea: 46:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:95:BB:4F:05:69:EC:A0:F5:70:B2:58:18:90:C0:5C:6D:3B:71:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/95f91c65-3a7c-3b42-97c4-17a70e3dad02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:ba:32:05:02:49:a2:7b:b8:0d:b1:82:da:2b:7e:85:d6:13: e9:bc:b0:3d:60:71:40:10:d8:3e:ff:27:eb:5b:ad:12:ee:32: b1:d8:fb:a8:d2:24:87:25:b5:66:49:3b:a3:f0:09:76:13:1d: 8b:3d:e6:0d:fe:58:8d:81:02:9a:fa:da:44:12:ec:a1:16:24: 38:b6:ec:83:4d:ab:63:2b:3b:86:fa:58:49:c9:f7:d4:c6:09: 15:c3:94:30:8a:ab:16:23:d6:c5:45:7b:c4:03:e0:b1:ee:7b: 3b:0c:03:0d:95:4d:93:0a:37:27:60:09:48:a5:24:61:51:b0: 7f:a4:82:ca:5f:3a:2a:c1:ad:50:40:48:78:4b:63:a4:05:d6: ca:4a:a8:e8:0f:ca:53:ce:3e:2f:df:b9:00:57:78:3b:9a:64: c5:22:de:c9:51:68:23:0f:e5:72:6d:bf:3c:94:7a:1f:f3:b2: b7:b6:39:35:3a:99:77:ee:d1:3f:d9:f1:5b:2e:4a:3f:97:47: d5:9d:7e:60:c9:cd:56:29:62:10:5a:46:9f:ee:00:bd:16:b3: ec:c1:5e:bd:e1:73:f4:ab:d6:b2:a3:8d:e7:c8:b6:27:0a:7b: 63:04:61:7a:a7:69:1f:6b:e5:d3:38:cf:43:9c:e1:eb:08:56: 08:97:32:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlK72sJMHmnS4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk YjYwOTNhNWMtY2JiNi00NDk2LTk1ZjAtZTdlNjlkMDBkNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaxBgOnc2Fpv2L6h4Ggo6+z/eBHd75/lCtGY xlc0TUm2/gAdXrTCGOYj+9FCXn5wAdZfvB9QOLkchmtVrCnZ91OG9aDLqPAipEgv G462+PixsDbyOUAlB01xCsMUEk5mBgycgGi/mJ1+a3FlBIWBX2xAbAqnUzHSc+5v uQXKPBVZ3g7aevM5nqnZNPcpTn6UeDy156b519X16THpmO1+lr3iZHjOC6gRpeXa uIWBG2gZb3U9CWdq9b3y6nwwPdW/Pv0hOiRbiAkJtCN5VS6+r95Zr4Odd11nD9dh SKdtd0tLsNGgZwFeYiSz7BLY4isrn3dBwK16STNxWn+FXepGeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWVu08Faeyg9XCyWBiQwFxtO3HgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvOTVmOTFjNjUtM2E3Yy0z YjQyLTk3YzQtMTdhNzBlM2RhZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMS6MgUCSaJ7uA2xgtorfoXWE+m8sD1gcUAQ2D7/J+tbrRLuMrHY+6jS JIcltWZJO6PwCXYTHYs95g3+WI2BApr62kQS7KEWJDi27INNq2MrO4b6WEnJ99TG CRXDlDCKqxYj1sVFe8QD4LHuezsMAw2VTZMKNydgCUilJGFRsH+kgspfOirBrVBA SHhLY6QF1spKqOgPylPOPi/fuQBXeDuaZMUi3slRaCMP5XJtvzyUeh/zsre2OTU6 mXfu0T/Z8VsuSj+XR9WdfmDJzVYpYhBaRp/uAL0Ws+zBXr3hc/Sr1rKjjefIticK e2MEYXqnaR9r5dM4z0Oc4esIVgiXMiM= -----END CERTIFICATE-----Generated at Mon Aug 4 13:58:40 2025 by rpki-client