$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa File: d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa (raw, json) Hash identifier: Mno4m8KSMxYk9aN8yyk1/HwhE5ruf+F0PHu040a7oWQ= Subject key identifier: 40:8D:66:75:19:4C:CE:EA:75:87:0E:42:20:0E:06:88:8E:B0:6E:39 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F4328584D4A8F979D421E549E1FE8EF80 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 4809 IP address blocks: 66.102.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:97:9d:42:1e:54:9e:1f:e8:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=1eaab6f8-c9cc-4f0c-a653-8cca2d0ef95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:02:24:a7:7d:82:33:e7:4a:4c:dd:10:d2:f0: ed:b2:fb:ac:52:7a:6b:7a:a0:65:cb:24:d2:c1:48: 13:d2:2f:bd:b3:1f:85:af:1d:a4:ce:77:12:5e:16: 08:48:43:e2:5b:d4:2b:f9:a4:f2:1d:84:6d:6a:c6: ab:49:d6:c9:40:be:26:2b:72:2e:c5:5b:0a:43:56: af:8e:92:cc:84:f9:de:6c:74:23:50:ff:8e:03:61: 1b:36:94:93:ea:62:f8:35:2e:e9:d5:4d:2c:65:a2: ac:19:46:c3:5b:c6:27:67:05:46:3a:cf:ab:7e:b3: c1:91:0f:62:0c:fc:49:98:3e:3b:bc:65:11:72:a8: 85:2a:a1:e6:b8:f6:92:6d:45:46:c4:79:a0:44:b7: b0:b5:01:9a:9f:63:04:2f:21:35:69:77:38:05:cd: 6e:e9:57:c2:78:87:58:b7:cd:fe:18:1e:83:d3:ed: b4:ca:07:cd:48:33:20:09:aa:c8:f8:40:4b:94:e8: 1f:e2:a7:0b:a0:b1:bb:8a:2e:03:55:54:4d:14:d0: de:88:f5:ae:ab:7d:2f:27:11:43:44:f9:db:90:5c: 93:4b:7b:a3:02:54:b4:b9:85:70:a9:1e:e5:c5:ad: 35:c7:b1:5a:36:56:27:4a:76:5c:20:74:5d:a1:62: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8D:66:75:19:4C:CE:EA:75:87:0E:42:20:0E:06:88:8E:B0:6E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d432243f-b3e0-34c4-b2f4-5e13c2165a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 66.102.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:dc:10:2a:ef:89:5f:51:39:4d:c9:ae:80:2a:3d:fc:dc:3a: 89:c3:aa:4f:0f:36:04:2e:8c:06:38:64:b0:ed:29:3b:90:d8: 2f:db:e0:86:8b:01:88:66:9c:f9:8d:d5:11:fc:9c:86:15:70: 1f:1a:dd:e6:7a:d5:10:51:e9:08:91:49:60:7c:b3:33:03:7e: fd:17:41:7e:7e:2a:29:96:cd:55:11:0b:db:23:fe:26:f8:c4: fd:95:ac:a2:3c:81:59:2d:6f:6c:76:2d:9e:b8:bc:2d:7b:00: e4:8b:e4:b9:c6:2e:da:ac:9e:ea:2c:94:f0:8a:43:07:e3:04: 6e:1c:04:b5:79:a5:69:a9:2d:e9:ae:07:3e:2f:8c:09:c3:21: ce:a4:63:b3:2f:32:b0:b1:03:81:29:ec:c3:70:2f:a4:b0:94: 95:fe:d8:2f:b6:8b:53:a8:39:0c:47:75:26:f5:c6:77:a9:6b: cc:57:9d:8d:f1:c0:5b:99:f1:a4:a7:a7:35:aa:62:d5:a5:ab: 97:ec:d8:95:da:df:c9:ef:81:17:8c:e6:3f:c9:01:fa:0d:68: 11:f5:af:f4:54:da:90:18:74:7c:9c:cc:88:23:11:b3:ce:41: 99:99:4e:14:23:85:f3:44:18:dc:24:6c:e5:ea:31:d2:86:dd: 21:ff:4b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5edQh5Unh/o74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MWVhYWI2ZjgtYzljYy00ZjBjLWE2NTMtOGNjYTJkMGVmOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAIkp32CM+dKTN0Q0vDtsvusUnpreqBlyyTS wUgT0i+9sx+Frx2kzncSXhYISEPiW9Qr+aTyHYRtasarSdbJQL4mK3IuxVsKQ1av jpLMhPnebHQjUP+OA2EbNpST6mL4NS7p1U0sZaKsGUbDW8YnZwVGOs+rfrPBkQ9i DPxJmD47vGURcqiFKqHmuPaSbUVGxHmgRLewtQGan2MELyE1aXc4Bc1u6VfCeIdY t83+GB6D0+20ygfNSDMgCarI+EBLlOgf4qcLoLG7ii4DVVRNFNDeiPWuq30vJxFD RPnbkFyTS3ujAlS0uYVwqR7lxa01x7FaNlYnSnZcIHRdoWIZUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECNZnUZTM7qdYcOQiAOBoiOsG45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvZDQzMjI0M2YtYjNlMC0z NGM0LWIyZjQtNWUxM2MyMTY1YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmb5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7cECrviV9ROU3JroAqPfzcOonDqk8PNgQujAY4ZLDtKTuQ2C/b4IaL AYhmnPmN1RH8nIYVcB8a3eZ61RBR6QiRSWB8szMDfv0XQX5+KimWzVURC9sj/ib4 xP2VrKI8gVktb2x2LZ64vC17AOSL5LnGLtqsnuoslPCKQwfjBG4cBLV5pWmpLemu Bz4vjAnDIc6kY7MvMrCxA4Ep7MNwL6SwlJX+2C+2i1OoOQxHdSb1xnepa8xXnY3x wFuZ8aSnpzWqYtWlq5fs2JXa38nvgReM5j/JAfoNaBH1r/RU2pAYdHyczIgjEbPO QZmZThQjhfNEGNwkbOXqMdKG3SH/S/Y= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:13 2026 by rpki-client