$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/768515db-d68f-37e8-942f-cb1febad880b.roa File: 768515db-d68f-37e8-942f-cb1febad880b.roa (raw, json) Hash identifier: 9+oTl8LnWLBhwLNCSptNZ0uoYwnXEtfxK0HFxRWz33s= Subject key identifier: EF:D6:B2:D2:C9:03:05:83:39:7F:6F:A8:80:8C:ED:5A:EE:AA:38:B8 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F4328584B8BE217EE04342EC12C32E780 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/768515db-d68f-37e8-942f-cb1febad880b.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 4134 IP address blocks: 66.102.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:17:ee:04:34:2e:c1:2c:32:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=97f069b7-049c-4ea7-83ac-5f28623251e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:fe:a4:f4:ce:c1:82:e1:bb:72:ce:b2:54: c0:b5:21:07:f5:24:01:8a:50:9c:f0:ad:53:8d:b2: aa:d8:40:c0:98:48:0b:70:59:6b:5b:ba:d9:dc:b0: 55:c0:ba:40:ad:65:6d:74:cd:d0:9c:19:4d:2e:f0: d9:8f:71:40:eb:cb:79:10:93:c2:5f:b6:db:e1:d2: e2:0b:19:45:93:e1:53:9e:ed:6c:32:d2:bc:3b:df: 2f:6a:d3:64:fa:17:30:4a:43:46:a4:95:ec:df:ed: ae:6d:5a:cf:1f:da:ed:34:9a:e4:96:30:ac:97:af: 49:57:ef:8b:40:aa:b6:c4:3e:4a:13:5e:a5:5b:46: 91:98:03:73:6b:03:fb:dd:20:74:fc:cb:1b:6c:6a: 48:d0:24:d3:9f:38:25:f6:97:32:e8:cf:34:bf:28: 20:66:2d:8c:48:d4:e8:3e:cd:0d:0f:fe:11:90:ab: 8f:bc:d8:a3:bc:30:30:96:32:3c:e4:b8:ac:27:dc: b1:80:6c:84:ac:41:ad:ba:f1:5b:9a:da:84:11:2c: 62:b7:8d:7d:bc:3e:f7:12:44:cd:5e:8a:a0:4d:0c: a0:ce:ec:39:79:db:6a:d4:2d:6a:b5:97:87:e0:36: cc:fd:43:89:55:d6:e8:1d:53:60:9f:d7:d5:5c:68: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D6:B2:D2:C9:03:05:83:39:7F:6F:A8:80:8C:ED:5A:EE:AA:38:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/768515db-d68f-37e8-942f-cb1febad880b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:7b:65:a6:a1:21:1f:a6:39:fc:f6:c0:fa:0b:0c:45:ec:e7: 1c:bb:ab:b8:4f:4e:d8:ca:8a:a9:ec:86:4c:9b:29:a0:a9:44: 97:a2:fb:a9:58:dd:eb:0f:46:6b:b2:63:e0:f3:5b:b2:c3:59: 69:27:c7:d2:66:93:06:e7:60:6b:f7:64:96:d9:4b:08:72:b5: ef:34:f1:bb:3c:84:1d:09:69:e6:fa:4c:9b:8f:6b:e7:99:5a: ec:d7:4d:02:de:d3:f7:2a:b4:21:6d:f5:87:78:54:74:ca:1f: f8:3a:fa:3e:90:50:29:67:3c:82:e6:21:66:4c:76:f8:02:b3: f5:8a:36:6e:5e:c6:f5:ec:0e:63:b3:6f:9a:e0:5a:cc:19:f2: 59:89:ab:ed:e0:ff:54:48:da:5b:4a:31:d6:ff:c8:da:29:6b: e1:40:51:10:e1:e0:c9:34:15:5e:91:9e:12:f0:d2:2f:e1:67: 8c:99:e1:f8:8c:27:99:52:e1:31:5b:5e:5e:5c:e9:91:90:33: 65:b5:c1:40:a7:69:7d:23:64:a3:0e:4e:12:90:4b:f0:3b:74: 2a:e6:4b:0f:96:01:3c:6c:7e:68:6c:80:3d:5b:45:91:93:22: 22:d0:26:a2:bf:29:d0:10:ff:9d:06:21:d9:3b:06:fa:44:6f: bb:37:c5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hfuBDQuwSwy54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk OTdmMDY5YjctMDQ5Yy00ZWE3LTgzYWMtNWYyODYyMzI1MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8v+pPTOwYLhu3LOslTAtSEH9SQBilCc8K1T jbKq2EDAmEgLcFlrW7rZ3LBVwLpArWVtdM3QnBlNLvDZj3FA68t5EJPCX7bb4dLi CxlFk+FTnu1sMtK8O98vatNk+hcwSkNGpJXs3+2ubVrPH9rtNJrkljCsl69JV++L QKq2xD5KE16lW0aRmANzawP73SB0/MsbbGpI0CTTnzgl9pcy6M80vyggZi2MSNTo Ps0ND/4RkKuPvNijvDAwljI85LisJ9yxgGyErEGtuvFbmtqEESxit419vD73EkTN XoqgTQygzuw5edtq1C1qtZeH4DbM/UOJVdboHVNgn9fVXGg5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/WstLJAwWDOX9vqICM7Vruqji4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvNzY4NTE1ZGItZDY4Zi0z N2U4LTk0MmYtY2IxZmViYWQ4ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQmbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM17ZaahIR+mOfz2wPoLDEXs5xy7q7hPTtjKiqnshkybKaCpRJei+6lY 3esPRmuyY+DzW7LDWWknx9JmkwbnYGv3ZJbZSwhyte808bs8hB0Jaeb6TJuPa+eZ WuzXTQLe0/cqtCFt9Yd4VHTKH/g6+j6QUClnPILmIWZMdvgCs/WKNm5exvXsDmOz b5rgWswZ8lmJq+3g/1RI2ltKMdb/yNopa+FAURDh4Mk0FV6RnhLw0i/hZ4yZ4fiM J5lS4TFbXl5c6ZGQM2W1wUCnaX0jZKMOThKQS/A7dCrmSw+WATxsfmhsgD1bRZGT IiLQJqK/KdAQ/50GIdk7BvpEb7s3xVc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:55 2025 by rpki-client