$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1219f43a-1acb-3787-b2db-0d886861c7c0.roa File: 1219f43a-1acb-3787-b2db-0d886861c7c0.roa (raw, json) Hash identifier: TZNNKg7MtpRqp267D0yybmNgmLMCpdH+qHzZNJZKnbY= Subject key identifier: B4:72:47:D6:9F:FE:4A:B1:A3:CB:84:BB:C1:D6:38:72:5D:CB:CA:8C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B92DD415B26590A43413478C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1219f43a-1acb-3787-b2db-0d886861c7c0.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 58061 IP address blocks: 166.1.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:41:5b:26:59:0a:43:41:34:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=33b88a69-08f9-451a-a659-7eda8b765ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:fc:82:f4:c1:ca:04:15:bb:cd:88:d7:08: 57:2a:12:d3:2e:32:40:1d:45:80:2a:53:a8:e2:0c: 4c:6c:c3:0d:10:3b:df:a6:e5:72:f2:1f:0c:7c:72: 0b:ac:ea:34:e1:2c:2a:3b:3f:a2:a7:4c:e3:03:75: 76:63:45:f3:4a:cb:45:ca:af:a3:ec:bb:0a:8d:aa: d3:8e:f1:50:42:a4:05:4a:bd:69:69:79:ad:9f:53: f6:d8:7d:b5:94:37:28:91:79:a7:d9:6b:9b:e9:5c: 36:76:e0:17:4b:34:dd:37:d5:3d:6f:c4:24:65:db: d6:2d:20:63:9a:79:68:fc:4c:99:d1:27:bf:0b:0d: 51:37:3a:52:b9:3d:35:b4:ce:f2:cd:5c:c6:ac:99: e9:68:73:65:4f:90:13:f3:8b:63:88:ca:e9:54:7e: 69:18:e2:c1:f2:f1:33:c3:be:20:12:04:33:df:64: be:0f:9f:ef:ea:b5:dd:98:5b:98:85:e6:f5:8c:24: 1a:2a:24:de:ef:84:5d:ea:de:1b:91:a5:de:96:2d: f4:66:f4:a5:06:8d:4e:6f:a3:cc:f0:b4:a5:cb:9a: e5:67:ec:1a:91:18:e6:42:8b:c1:bb:40:47:ba:72: 5c:3e:c9:7c:36:fc:a6:51:58:56:6c:ac:46:33:87: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:72:47:D6:9F:FE:4A:B1:A3:CB:84:BB:C1:D6:38:72:5D:CB:CA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1219f43a-1acb-3787-b2db-0d886861c7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b4:e3:e5:f9:a4:28:3c:59:bb:15:f8:64:12:38:fd:a5:54: c2:6f:0a:ee:e9:db:1c:8b:1e:7c:9b:60:e2:43:ae:54:0d:57: b0:4a:94:79:10:19:ed:6a:d4:58:27:eb:39:ca:d3:ed:51:f5: f3:fd:54:f1:0d:8e:f9:54:5d:d9:d9:0d:ba:b6:7a:4b:8b:60: e2:88:ec:a6:30:ac:0b:b6:60:fc:26:7a:b5:53:a8:fa:55:6e: b4:88:d4:76:74:c3:83:71:b4:0d:92:c1:42:e8:7f:26:c4:bb: 44:eb:61:ee:f2:2c:23:14:14:37:11:7b:9c:08:fa:28:91:c1: 4f:6b:b1:cf:93:22:06:14:fb:8d:9b:78:c5:20:38:2f:80:99: 15:6d:48:b8:50:aa:73:c7:ef:2b:ef:a1:73:1f:5c:ff:e6:c8: ac:f8:a8:72:94:3d:da:07:9a:29:89:30:8b:00:95:fa:61:3a: da:5b:69:77:b5:54:9f:9d:17:d1:7d:a4:78:72:e3:0d:33:85: 02:5e:61:47:4a:9b:65:c8:78:08:c2:ce:76:7c:b6:9c:70:99: 46:3f:cf:63:c9:49:e5:f7:6a:d1:f8:66:f4:bd:96:4f:41:86: e8:85:d3:ce:9b:03:54:3f:00:74:87:ab:51:7b:d4:93:dd:ef: e0:72:0d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3UFbJlkKQ0E0eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MzNiODhhNjktMDhmOS00NTFhLWE2NTktN2VkYThiNzY1Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr/8gvTBygQVu82I1whXKhLTLjJAHUWAKlOo 4gxMbMMNEDvfpuVy8h8MfHILrOo04SwqOz+ip0zjA3V2Y0XzSstFyq+j7LsKjarT jvFQQqQFSr1paXmtn1P22H21lDcokXmn2Wub6Vw2duAXSzTdN9U9b8QkZdvWLSBj mnlo/EyZ0Se/Cw1RNzpSuT01tM7yzVzGrJnpaHNlT5AT84tjiMrpVH5pGOLB8vEz w74gEgQz32S+D5/v6rXdmFuYheb1jCQaKiTe74Rd6t4bkaXeli30ZvSlBo1Ob6PM 8LSly5rlZ+wakRjmQovBu0BHunJcPsl8NvymUVhWbKxGM4fFOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRyR9af/kqxo8uEu8HWOHJdy8qMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTIxOWY0M2EtMWFjYi0z Nzg3LWIyZGItMGQ4ODY4NjFjN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG04+X5pCg8WbsV+GQSOP2lVMJvCu7p2xyLHnybYOJDrlQNV7BKlHkQ Ge1q1Fgn6znK0+1R9fP9VPENjvlUXdnZDbq2ekuLYOKI7KYwrAu2YPwmerVTqPpV brSI1HZ0w4NxtA2SwULofybEu0TrYe7yLCMUFDcRe5wI+iiRwU9rsc+TIgYU+42b eMUgOC+AmRVtSLhQqnPH7yvvoXMfXP/myKz4qHKUPdoHmimJMIsAlfphOtpbaXe1 VJ+dF9F9pHhy4w0zhQJeYUdKm2XIeAjCznZ8tpxwmUY/z2PJSeX3atH4ZvS9lk9B huiF086bA1Q/AHSHq1F71JPd7+ByDaM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:37 2025 by rpki-client