$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20ea8fa7-2c9f-3aaa-ba35-a23a18e2405f.roa File: 20ea8fa7-2c9f-3aaa-ba35-a23a18e2405f.roa (raw, json) Hash identifier: NU5DtQ224N+UOzgP6nFlbu6dxqyqAB54IqjNLzn4oWE= Subject key identifier: 15:7E:C5:89:A5:F0:D7:A0:F9:8C:54:27:4E:41:99:98:71:D5:CF:BE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B41E71EF0C5493B026EB7ED40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20ea8fa7-2c9f-3aaa-ba35-a23a18e2405f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 30633 IP address blocks: 166.0.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1e:f0:c5:49:3b:02:6e:b7:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=1da93e03-1a38-43ae-aa05-35a8c340e92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:8d:7a:65:61:95:b4:c9:9e:73:f3:27:51: 8e:82:40:0b:57:3e:2f:43:8e:e5:ee:d8:e6:78:69: e9:d1:b8:8f:5a:b7:d4:ea:22:20:4b:b7:9b:1b:6c: 43:30:a0:57:74:94:c3:3b:d1:7b:1c:84:f1:52:65: ff:f4:68:7d:48:c3:08:cc:ed:fc:d2:ca:35:96:c5: 01:f0:ec:57:8f:69:9f:bf:a9:03:cd:17:53:2b:de: 00:7d:9a:a1:72:f3:9f:28:80:d8:73:0d:34:15:b2: ff:b2:c4:43:24:9f:dc:08:96:c3:3f:96:9c:75:23: ff:42:98:b2:83:ed:86:5a:ac:bc:8d:88:3a:62:57: e4:f0:25:2f:f4:4b:09:a3:3f:96:d6:5a:3b:2c:b6: 51:58:39:60:d8:dc:c6:a4:1b:b4:b0:91:c9:bc:a4: c3:b4:8b:b0:a7:e1:d7:d7:bd:22:95:c7:f7:3e:0a: 14:81:43:fe:e6:2c:8d:e3:00:00:20:9c:9f:80:ad: c8:75:d9:16:b9:3e:04:6b:07:72:a7:1a:6c:60:2a: 51:11:74:6f:9a:d8:8b:ca:c5:22:f3:e4:ab:a2:70: 1e:a3:9b:25:ee:aa:6f:58:59:4f:02:cc:e9:19:ee: db:15:f1:16:71:7e:08:8c:8b:41:d0:fd:9a:d3:27: 1b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7E:C5:89:A5:F0:D7:A0:F9:8C:54:27:4E:41:99:98:71:D5:CF:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/20ea8fa7-2c9f-3aaa-ba35-a23a18e2405f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:20:98:f3:92:bd:b3:30:11:20:f1:b6:4e:b3:0d:79:fc:82: a8:fa:43:4e:17:d2:45:bc:b9:4b:c1:cf:14:38:90:92:c0:13: 6c:da:45:d8:3f:40:1c:d7:65:23:5a:f1:e5:43:af:c2:71:fe: b3:27:9b:79:5c:6e:70:40:4c:96:a3:93:1f:d5:fc:6f:a9:dd: b7:9a:71:41:f2:1f:92:b9:3e:ea:c7:69:72:e1:1a:e0:7b:3c: ef:35:cf:a5:d2:1c:fa:d6:08:c2:ba:b8:34:45:4c:a2:31:59: a7:ed:c0:28:53:6d:82:88:e1:6f:b1:c1:d9:b4:0d:fe:56:09: 98:ba:07:ba:56:a9:36:7e:90:bc:f9:fa:65:9d:77:f8:a2:10: 15:37:af:04:85:98:22:61:48:48:33:b0:33:4c:07:d8:ee:36: 7f:ec:00:c5:89:fe:ab:88:c5:c9:32:3e:8a:38:75:5e:9d:1d: 44:5b:d2:a3:c8:30:16:4b:23:48:d0:fc:3d:55:e2:a8:d8:92: e1:0f:0f:33:64:60:72:ee:cd:09:78:9e:46:0d:07:e1:8d:75: 34:4b:30:14:cd:77:de:d3:7a:fd:22:f3:c8:da:b1:0d:95:c2: 9e:79:7f:63:3d:a4:5b:1a:bf:be:19:7a:46:b9:b4:1a:9f:7d: 18:02:9e:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5x7wxUk7Am637UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MWRhOTNlMDMtMWEzOC00M2FlLWFhMDUtMzVhOGMzNDBlOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMONemVhlbTJnnPzJ1GOgkALVz4vQ47l7tjm eGnp0biPWrfU6iIgS7ebG2xDMKBXdJTDO9F7HITxUmX/9Gh9SMMIzO380so1lsUB 8OxXj2mfv6kDzRdTK94AfZqhcvOfKIDYcw00FbL/ssRDJJ/cCJbDP5acdSP/Qpiy g+2GWqy8jYg6Ylfk8CUv9EsJoz+W1lo7LLZRWDlg2NzGpBu0sJHJvKTDtIuwp+HX 170ilcf3PgoUgUP+5iyN4wAAIJyfgK3IddkWuT4EawdypxpsYCpREXRvmtiLysUi 8+SronAeo5sl7qpvWFlPAszpGe7bFfEWcX4IjItB0P2a0ycbUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV+xYml8Neg+YxUJ05BmZhx1c++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMjBlYThmYTctMmM5Zi0z YWFhLWJhMzUtYTIzYTE4ZTI0MDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIgmPOSvbMwESDxtk6zDXn8gqj6Q04X0kW8uUvBzxQ4kJLAE2zaRdg/ QBzXZSNa8eVDr8Jx/rMnm3lcbnBATJajkx/V/G+p3beacUHyH5K5PurHaXLhGuB7 PO81z6XSHPrWCMK6uDRFTKIxWaftwChTbYKI4W+xwdm0Df5WCZi6B7pWqTZ+kLz5 +mWdd/iiEBU3rwSFmCJhSEgzsDNMB9juNn/sAMWJ/quIxckyPoo4dV6dHURb0qPI MBZLI0jQ/D1V4qjYkuEPDzNkYHLuzQl4nkYNB+GNdTRLMBTNd97Tev0i88jasQ2V wp55f2M9pFsav74Zeka5tBqffRgCniM= -----END CERTIFICATE-----Generated at Sun Oct 19 22:29:32 2025 by rpki-client