$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a30df44-4f2f-30aa-a434-d789c27d9a07.roa File: 0a30df44-4f2f-30aa-a434-d789c27d9a07.roa (raw, json) Hash identifier: ZT+wZ5wSRDIdVPGrAuN9eSd+R0MYhp1e0IfQIleLnDw= Subject key identifier: 20:AA:24:25:0D:25:52:FA:B8:85:A2:BD:1E:AA:4D:73:EC:82:9C:95 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B67980384EFD11E05D69C0780 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a30df44-4f2f-30aa-a434-d789c27d9a07.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 166.1.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:98:03:84:ef:d1:1e:05:d6:9c:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=25165e11-3dac-45d0-8be3-7674c6ef0f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:37:8e:1a:46:9e:43:43:cb:08:81:97:79: c4:5f:54:47:e3:1f:f5:02:2f:55:4e:b1:45:e6:73: 85:38:4d:26:de:0d:a8:07:b0:81:5e:20:84:93:49: ae:13:75:42:dc:4d:0a:01:df:5b:ad:c0:81:06:ab: 68:ba:89:bc:ef:ca:00:38:c2:29:db:b0:43:3e:a5: 82:62:9a:fb:58:f6:3a:a6:f1:d4:61:ec:be:b0:ed: 5d:fe:4a:35:af:15:d5:a2:f4:01:d6:16:f9:c1:46: b0:5a:af:d2:06:e2:c3:d7:38:7c:cd:3c:a6:ef:ca: 7b:94:33:da:5e:a3:50:94:db:8a:b9:d3:7d:93:57: 40:4b:de:0d:0b:85:9a:15:28:cd:4e:70:21:37:9c: c4:3e:de:88:c2:90:8e:0d:c0:cf:eb:67:f1:fc:61: a7:7d:af:21:30:87:a4:4d:01:3a:5d:6b:d9:0d:87: 5c:91:33:7a:02:0c:b6:03:18:ee:0a:cb:6a:dd:f9: d7:8d:79:9b:3e:1c:ab:83:84:dc:f7:b3:35:51:17: fe:ff:0b:90:db:33:6e:db:25:a5:7a:43:4e:5b:12: 11:aa:cc:29:bb:6c:21:bd:73:c5:b4:eb:f3:9c:e1: fa:3f:08:fc:d6:a3:fe:c6:9c:91:8a:c3:83:26:72: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AA:24:25:0D:25:52:FA:B8:85:A2:BD:1E:AA:4D:73:EC:82:9C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a30df44-4f2f-30aa-a434-d789c27d9a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:12:7e:db:bd:8e:9f:1b:49:2b:5b:60:2a:ab:3d:ef:17:78: b7:ac:ab:84:57:8b:bd:10:be:44:b4:c9:f4:10:5d:fe:6d:30: b3:81:33:55:27:e2:b0:cf:0d:2c:7d:8c:ff:09:5e:46:28:07: e4:f6:1c:46:53:e8:1d:90:61:2c:50:ef:58:19:1c:a1:6e:c6: a2:df:f4:21:44:59:85:e2:f9:1d:67:02:6e:fa:55:d8:d7:3a: db:1e:10:29:aa:67:51:f4:32:6a:43:3b:f4:17:ee:fd:a7:c4: a0:33:d5:2c:45:7d:e5:46:38:f8:f2:ae:53:ec:b9:06:15:db: b5:0d:f3:27:42:5e:fb:fe:11:3b:81:80:36:f4:c9:66:fa:4a: a2:94:b1:b9:c1:1e:54:70:80:89:ae:fc:00:06:f8:fb:d2:93: 80:4b:47:b9:29:ce:9f:3c:17:36:c3:a4:60:c4:a6:94:a2:40: 3b:ca:83:bd:2a:d8:a5:b6:91:42:2c:21:66:67:c7:d7:c5:60: ea:d2:88:12:0d:b8:52:52:0b:7c:de:d3:0c:19:52:3e:2f:e6: 31:ea:8d:f2:a8:58:95:6a:3f:bf:15:6f:36:c5:cd:df:ea:b6: 38:f4:d3:6d:17:1c:dd:76:83:74:ea:8d:1e:f8:8a:87:37:25: c1:10:8e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnmAOE79EeBdacB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MjUxNjVlMTEtM2RhYy00NWQwLThiZTMtNzY3NGM2ZWYwZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAc3jhpGnkNDywiBl3nEX1RH4x/1Ai9VTrFF 5nOFOE0m3g2oB7CBXiCEk0muE3VC3E0KAd9brcCBBqtouom878oAOMIp27BDPqWC Ypr7WPY6pvHUYey+sO1d/ko1rxXVovQB1hb5wUawWq/SBuLD1zh8zTym78p7lDPa XqNQlNuKudN9k1dAS94NC4WaFSjNTnAhN5zEPt6IwpCODcDP62fx/GGnfa8hMIek TQE6XWvZDYdckTN6Agy2AxjuCstq3fnXjXmbPhyrg4Tc97M1URf+/wuQ2zNu2yWl ekNOWxIRqswpu2whvXPFtOvznOH6Pwj81qP+xpyRisODJnJpLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCqJCUNJVL6uIWivR6qTXPsgpyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGEzMGRmNDQtNGYyZi0z MGFhLWE0MzQtZDc4OWMyN2Q5YTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsSftu9jp8bSStbYCqrPe8XeLesq4RXi70QvkS0yfQQXf5tMLOBM1Un 4rDPDSx9jP8JXkYoB+T2HEZT6B2QYSxQ71gZHKFuxqLf9CFEWYXi+R1nAm76VdjX OtseECmqZ1H0MmpDO/QX7v2nxKAz1SxFfeVGOPjyrlPsuQYV27UN8ydCXvv+ETuB gDb0yWb6SqKUsbnBHlRwgImu/AAG+PvSk4BLR7kpzp88FzbDpGDEppSiQDvKg70q 2KW2kUIsIWZnx9fFYOrSiBINuFJSC3ze0wwZUj4v5jHqjfKoWJVqP78VbzbFzd/q tjj0020XHN12g3TqjR74ioc3JcEQjrY= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:09 2025 by rpki-client