$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b33a614-1723-34f7-98fc-9084d02119d2.roa File: 0b33a614-1723-34f7-98fc-9084d02119d2.roa (raw, json) Hash identifier: Dd7mBOzSAAMijwd5zsJ2ilF1rUVFFBZqmfz2MLE4pwM= Subject key identifier: 40:C0:B2:8A:FC:B7:2D:46:46:77:87:CB:DE:E1:C3:2A:9F:1E:67:E3 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B679801A1EF3107237C3E7000 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b33a614-1723-34f7-98fc-9084d02119d2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 166.1.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:98:01:a1:ef:31:07:23:7c:3e:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=44c9cd0b-d7ec-4fae-be87-ec51e991d025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:97:e8:60:6c:07:72:67:76:5e:d4:28:1e:69: e1:f1:8d:50:cd:47:d1:dd:c1:c9:b0:21:61:bc:f8: 63:76:1d:18:2f:e2:52:9b:79:5b:72:4a:49:0e:25: 0c:b6:31:87:85:3b:f6:55:e6:4e:6d:97:b9:d8:04: 2a:8c:ce:ed:1e:8d:65:23:35:3f:a8:3b:bd:dd:8a: 4a:79:b9:f8:ab:b2:bf:85:37:07:f6:e0:4b:09:d2: dd:c3:4a:42:75:fd:23:6a:0d:af:18:83:cd:3c:1f: db:a2:3c:3a:b2:f7:bf:4a:7c:16:de:3f:75:a2:39: bf:aa:55:b6:05:cc:4f:e9:b1:c8:1e:af:78:b2:17: fb:b3:a4:2e:6e:65:53:97:ac:de:6d:88:8d:58:64: fd:f6:82:90:c7:e7:76:d3:c7:9d:18:a0:1f:a4:e3: 78:0e:d7:11:41:6a:52:6a:64:1f:e2:cc:76:81:d3: f3:ca:a7:4a:11:ad:e3:6d:ff:1f:1c:d9:ad:dd:89: fa:bf:21:4e:33:b0:b2:41:ea:c8:a4:8f:ae:a4:7a: 43:e3:41:8c:d7:60:3e:46:48:22:76:e5:ac:19:c9: af:e3:ce:b8:9a:70:cc:ae:21:81:7c:73:81:39:3d: e5:63:d8:02:58:7c:39:d4:c2:82:cc:a5:3e:67:4b: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C0:B2:8A:FC:B7:2D:46:46:77:87:CB:DE:E1:C3:2A:9F:1E:67:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0b33a614-1723-34f7-98fc-9084d02119d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fa:55:68:17:03:14:2b:85:0b:39:77:8d:4f:b9:7e:a3:1a: 14:37:0a:3c:0b:78:ad:cf:44:f8:68:9f:d7:b1:a0:98:41:fb: 55:40:89:f7:13:d8:80:00:6d:69:7e:b1:49:cd:45:25:f4:09: ba:09:5d:2d:8b:c5:c1:8a:78:0c:ce:0c:a9:77:ea:44:16:88: 64:de:8e:df:8e:5a:43:cd:8a:7b:69:a5:bc:74:2e:97:de:25: ba:08:ff:45:34:ad:bf:be:e4:27:ae:c1:82:3d:c6:02:98:28: a0:57:92:5f:70:35:e6:94:c3:53:26:55:8e:dc:c7:a5:db:94: a4:1d:95:3d:21:52:c9:32:1e:af:d5:7a:25:98:ec:67:dd:4f: 00:b0:2c:a4:a1:f0:85:30:03:cc:a8:44:c5:30:16:12:d1:cb: 1c:48:51:3e:df:b6:cf:89:83:54:95:e5:94:66:28:8f:8e:f0: f7:23:71:5a:17:94:81:ce:75:7e:69:0d:c2:fe:89:0d:67:6b: 66:6b:26:85:65:62:8c:0a:49:f2:79:31:f8:68:78:8a:3a:3a: 69:17:08:d6:41:da:59:b6:25:b5:fb:68:30:42:64:e7:ec:a6: 59:58:84:91:41:2f:fa:9f:67:c1:24:83:e9:9b:24:e3:99:ae: 72:da:c9:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnmAGh7zEHI3w+cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDRjOWNkMGItZDdlYy00ZmFlLWJlODctZWM1MWU5OTFkMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZfoYGwHcmd2XtQoHmnh8Y1QzUfR3cHJsCFh vPhjdh0YL+JSm3lbckpJDiUMtjGHhTv2VeZObZe52AQqjM7tHo1lIzU/qDu93YpK ebn4q7K/hTcH9uBLCdLdw0pCdf0jag2vGIPNPB/bojw6sve/SnwW3j91ojm/qlW2 BcxP6bHIHq94shf7s6QubmVTl6zebYiNWGT99oKQx+d208edGKAfpON4DtcRQWpS amQf4sx2gdPzyqdKEa3jbf8fHNmt3Yn6vyFOM7CyQerIpI+upHpD40GM12A+Rkgi duWsGcmv4864mnDMriGBfHOBOT3lY9gCWHw51MKCzKU+Z0tmuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDAsor8ty1GRneHy97hwyqfHmfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGIzM2E2MTQtMTcyMy0z NGY3LTk4ZmMtOTA4NGQwMjExOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD6VWgXAxQrhQs5d41PuX6jGhQ3CjwLeK3PRPhon9exoJhB+1VAifcT 2IAAbWl+sUnNRSX0CboJXS2LxcGKeAzODKl36kQWiGTejt+OWkPNintppbx0Lpfe JboI/0U0rb++5CeuwYI9xgKYKKBXkl9wNeaUw1MmVY7cx6XblKQdlT0hUskyHq/V eiWY7GfdTwCwLKSh8IUwA8yoRMUwFhLRyxxIUT7fts+Jg1SV5ZRmKI+O8PcjcVoX lIHOdX5pDcL+iQ1na2ZrJoVlYowKSfJ5MfhoeIo6OmkXCNZB2lm2JbX7aDBCZOfs pllYhJFBL/qfZ8Ekg+mbJOOZrnLayRo= -----END CERTIFICATE-----Generated at Sun Oct 19 22:29:40 2025 by rpki-client