$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa File: d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa (raw, json) Hash identifier: C2G8adBPdW0YspFxwCu694nlrcaHQA0xOibZayoaT3w= Subject key identifier: E8:7D:4D:51:2B:AC:81:B7:AE:10:AE:28:22:86:E2:ED:09:F2:34:30 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F4328584F6F2302FC9DFC98C8F2E78380 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 4809 IP address blocks: 66.102.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:02:fc:9d:fc:98:c8:f2:e7:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=97c412e1-beaa-47b7-8b77-9d2f770d5b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:d6:55:dd:47:e9:6e:0b:25:df:3b:78:e4: ed:45:b5:8d:55:40:af:de:53:e3:66:64:e3:e9:75: d1:77:12:a8:0b:e8:40:02:89:17:43:40:26:15:aa: 1c:01:02:8c:a1:4e:35:72:64:8b:5f:ca:71:63:46: be:01:69:86:b7:4e:8f:94:89:ac:27:fb:07:a6:5c: 1d:47:7a:31:ba:bd:71:9d:51:fa:d1:fb:42:18:68: 3a:d9:26:65:3f:39:08:48:c6:f5:f6:d5:43:ef:95: bb:d4:f0:db:40:71:9f:08:5a:ee:d3:66:b5:a2:26: 70:b0:e4:a5:33:80:b3:0a:5b:7c:f3:fc:f5:e6:b5: cc:65:09:dc:fb:7d:0d:12:f0:47:06:58:23:cb:0c: 9a:91:a5:d3:e4:fe:fb:31:79:fa:62:44:d7:24:e1: 74:d6:b4:f3:7f:bc:b4:d2:f3:4f:76:3a:39:57:a2: 87:32:8b:90:bd:6b:f8:76:93:52:8c:08:96:06:73: 75:48:0d:3a:fd:8f:d4:d9:9d:3a:49:54:72:4f:0b: a2:55:a8:af:34:8e:2c:16:20:70:cd:42:f6:00:6b: 8b:92:95:37:d8:52:b0:6f:7d:dd:04:56:95:be:71: 38:75:98:29:e0:10:49:39:b6:13:ee:f7:78:0d:13: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7D:4D:51:2B:AC:81:B7:AE:10:AE:28:22:86:E2:ED:09:F2:34:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:11:c8:1c:44:70:e3:6d:a9:d2:fd:7a:3c:6b:33:ec:0c:fc: 97:4f:1a:88:74:bc:86:2e:93:5b:93:d7:40:80:70:74:46:f8: 8d:e7:df:7c:24:90:05:ea:00:d3:63:07:d0:54:ba:d3:8e:d1: 94:09:cc:da:6b:62:dd:60:d9:48:ec:69:97:cd:05:c9:37:3b: 43:b9:61:24:8d:5f:f0:1d:ad:37:44:d7:85:83:bd:39:30:5d: 24:84:37:37:fb:3e:29:76:30:7e:c1:43:f4:c0:5d:be:5c:90: 9a:f9:e2:40:c2:b3:d5:de:c4:a3:cc:70:18:40:f6:e7:e7:2c: 3b:67:cd:87:c9:aa:80:8d:57:e2:01:4d:c5:f5:8d:5e:f6:81: d5:56:f7:7b:c8:fe:cd:cd:0c:b8:0e:c7:64:4f:b1:dd:e4:97: c5:a4:66:04:c0:a9:86:a6:13:0e:08:48:5f:ba:5f:57:ad:c0: e8:62:a2:6d:03:cc:00:a3:5f:b9:17:fd:2f:4d:e2:5b:c8:8a: ff:d3:26:6d:a0:c1:d4:ab:14:9a:c2:98:3a:45:32:3f:54:68: 81:32:88:31:ac:7b:4a:4d:d4:2c:35:ce:b0:46:c4:4b:e5:bb: c6:1a:49:a3:6d:fb:20:59:fc:21:3e:92:69:d9:4a:f7:76:ce: 77:b9:f3:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwL8nfyYyPLng4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OTdjNDEyZTEtYmVhYS00N2I3LThiNzctOWQyZjc3MGQ1YjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbfWVd1H6W4LJd87eOTtRbWNVUCv3lPjZmTj 6XXRdxKoC+hAAokXQ0AmFaocAQKMoU41cmSLX8pxY0a+AWmGt06PlImsJ/sHplwd R3oxur1xnVH60ftCGGg62SZlPzkISMb19tVD75W71PDbQHGfCFru02a1oiZwsOSl M4CzClt88/z15rXMZQnc+30NEvBHBlgjywyakaXT5P77MXn6YkTXJOF01rTzf7y0 0vNPdjo5V6KHMouQvWv4dpNSjAiWBnN1SA06/Y/U2Z06SVRyTwuiVaivNI4sFiBw zUL2AGuLkpU32FKwb33dBFaVvnE4dZgp4BBJObYT7vd4DRM9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh9TVErrIG3rhCuKCKG4u0J8jQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvZDQzMjI0M2YtYjNlMC0z NGM0LWIyZjQtNWUxM2MyMTY1YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmb5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoRyBxEcONtqdL9ejxrM+wM/JdPGoh0vIYuk1uT10CAcHRG+I3n33wk kAXqANNjB9BUutOO0ZQJzNprYt1g2UjsaZfNBck3O0O5YSSNX/AdrTdE14WDvTkw XSSENzf7Pil2MH7BQ/TAXb5ckJr54kDCs9XexKPMcBhA9ufnLDtnzYfJqoCNV+IB TcX1jV72gdVW93vI/s3NDLgOx2RPsd3kl8WkZgTAqYamEw4ISF+6X1etwOhiom0D zACjX7kX/S9N4lvIiv/TJm2gwdSrFJrCmDpFMj9UaIEyiDGse0pN1Cw1zrBGxEvl u8YaSaNt+yBZ/CE+kmnZSvd2zne580I= -----END CERTIFICATE-----Generated at Tue Oct 27 08:59:06 2026 by rpki-client