$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/a9a5a9f9-8a59-333d-91e4-284e3e2db0a8.roa File: a9a5a9f9-8a59-333d-91e4-284e3e2db0a8.roa (raw, json) Hash identifier: lDOVKY4/Bh6Mu4PyL6gbtpFSxjTISHGUZt4ANgHEaVU= Subject key identifier: 8B:3E:1D:84:CE:D6:BE:B5:48:38:A5:CA:C9:E8:56:91:6F:1F:82:D8 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F4328584B970CD44111B1F1B94E8D61B0 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/a9a5a9f9-8a59-333d-91e4-284e3e2db0a8.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 36678 IP address blocks: 66.102.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d4:41:11:b1:f1:b9:4e:8d:61:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=5c4236c6-48b3-42d0-8d2f-26b7923959f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d4:f2:d5:2b:d9:e6:15:cf:d1:61:e5:6b:73: 95:d8:c2:b8:93:d1:8d:23:41:a5:da:00:55:c8:49: 3b:c5:10:bc:0d:22:64:85:4e:b0:e4:37:04:c3:53: 20:b0:1f:63:e6:4a:a8:16:74:97:fb:69:b1:25:47: 9a:f1:81:41:45:d9:b5:98:a5:04:8d:80:54:c9:15: f9:8d:08:f6:d3:b4:22:ae:24:84:20:54:b0:d7:65: 6e:1d:d1:23:cb:3a:57:f9:c5:cf:bd:ab:2b:79:e9: 19:54:ca:2c:10:7b:de:6a:3e:ab:72:48:64:50:d2: 40:62:13:e6:b4:cc:d3:00:db:3d:e6:02:3e:17:61: e0:19:46:0a:21:2f:7b:3a:aa:ef:08:03:05:b0:f0: 0d:11:aa:77:9e:2e:09:78:4f:75:77:6f:e1:5a:dd: af:32:f3:ad:6b:ce:a3:22:00:5d:56:b4:47:6a:2b: 04:94:c4:34:ea:d0:56:4a:3a:80:46:ad:0f:c0:2a: 63:ff:c0:7f:7f:8a:65:39:9c:51:02:2a:5f:50:e7: d1:5a:17:14:48:32:92:55:8b:23:57:ef:6b:3d:c5: 54:2e:59:21:a1:44:60:6c:ae:f2:f5:65:57:ba:e1: cf:13:09:e0:83:f7:a1:0f:b5:c9:ea:9c:03:67:44: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3E:1D:84:CE:D6:BE:B5:48:38:A5:CA:C9:E8:56:91:6F:1F:82:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/a9a5a9f9-8a59-333d-91e4-284e3e2db0a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:72:9e:1d:f2:d9:2d:6a:b5:71:b7:9f:1e:b4:e5:d2:c1:39: 06:6b:0f:d7:f3:c2:0d:d4:d0:15:2b:85:bc:9c:62:a8:11:ab: c6:2c:aa:e5:75:3b:57:a5:5c:98:d6:a8:37:bf:38:78:7a:3c: bc:b5:2c:b3:34:2e:fc:a6:64:d1:8a:88:4a:f7:11:d2:90:bd: 17:78:10:dc:73:ab:ec:81:9c:36:13:2c:3a:5e:47:e0:a7:b1: a3:0b:a4:02:95:ac:1a:ec:77:a2:fa:b2:77:65:3e:73:1a:d5: 2a:20:af:20:2c:1e:7f:f2:80:7d:9f:ae:dc:24:28:90:a7:d8: 5d:f8:54:2c:08:50:96:e6:b0:b3:23:74:82:dc:e4:f7:c5:72: 8c:e4:e2:10:96:dc:8a:4a:db:0d:a6:b8:08:61:52:76:91:df: 23:39:8f:a5:56:9a:0c:4b:9b:ea:b8:95:f4:33:be:07:2e:a8: a5:1a:ab:3d:37:27:7f:e0:1b:29:bf:94:fe:cc:ed:65:ee:40: 61:54:bd:83:e6:28:b1:49:de:78:1b:c9:20:e3:19:96:31:e4: 27:dd:30:48:3c:3d:bf:1c:85:0d:cd:af:a0:8f:e1:b5:34:4f: 7a:ef:0f:12:02:b6:f1:38:68:b9:57:53:3c:26:99:83:4a:de: 06:d6:24:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNRBEbHxuU6NYbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NWM0MjM2YzYtNDhiMy00MmQwLThkMmYtMjZiNzkyMzk1OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtTy1SvZ5hXP0WHla3OV2MK4k9GNI0Gl2gBV yEk7xRC8DSJkhU6w5DcEw1MgsB9j5kqoFnSX+2mxJUea8YFBRdm1mKUEjYBUyRX5 jQj207QiriSEIFSw12VuHdEjyzpX+cXPvasreekZVMosEHveaj6rckhkUNJAYhPm tMzTANs95gI+F2HgGUYKIS97OqrvCAMFsPANEap3ni4JeE91d2/hWt2vMvOta86j IgBdVrRHaisElMQ06tBWSjqARq0PwCpj/8B/f4plOZxRAipfUOfRWhcUSDKSVYsj V+9rPcVULlkhoURgbK7y9WVXuuHPEwngg/ehD7XJ6pwDZ0Te+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs+HYTO1r61SDilysnoVpFvH4LYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvYTlhNWE5ZjktOGE1OS0z MzNkLTkxZTQtMjg0ZTNlMmRiMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpynh3y2S1qtXG3nx605dLBOQZrD9fzwg3U0BUrhbycYqgRq8YsquV1 O1elXJjWqDe/OHh6PLy1LLM0LvymZNGKiEr3EdKQvRd4ENxzq+yBnDYTLDpeR+Cn saMLpAKVrBrsd6L6sndlPnMa1SogryAsHn/ygH2frtwkKJCn2F34VCwIUJbmsLMj dILc5PfFcozk4hCW3IpK2w2muAhhUnaR3yM5j6VWmgxLm+q4lfQzvgcuqKUaqz03 J3/gGym/lP7M7WXuQGFUvYPmKLFJ3ngbySDjGZYx5CfdMEg8Pb8chQ3Nr6CP4bU0 T3rvDxICtvE4aLlXUzwmmYNK3gbWJJo= -----END CERTIFICATE-----Generated at Wed Nov 5 23:39:22 2025 by rpki-client