$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bb24533-8552-31af-b1fc-924a60936d8f.roa File: 2bb24533-8552-31af-b1fc-924a60936d8f.roa (raw, json) Hash identifier: zqiSj9jE3/NEQ55hNGWCHkERsx+HuK9OSRMA8XuEyvg= Subject key identifier: 5F:66:50:90:9F:98:65:4E:71:51:09:E4:22:04:A0:EA:22:04:19:56 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B79BCAB699A6CC14AEA12D680 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bb24533-8552-31af-b1fc-924a60936d8f.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 401152 IP address blocks: 166.0.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ab:69:9a:6c:c1:4a:ea:12:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=95810947-860c-4843-aef4-656177b8fb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9d:26:94:60:45:89:fe:2f:8e:31:96:dc:76: af:cb:90:04:82:f9:f3:47:d5:e2:46:82:5a:7c:9e: 6c:f6:10:3f:f9:e8:6b:74:a9:34:ce:a2:54:b9:04: 61:53:8b:18:e4:93:84:92:20:d8:16:7e:1c:40:c4: 5b:f1:32:96:08:b8:20:84:8a:27:da:8c:28:87:5f: c9:ae:3f:5c:0c:d5:a3:fa:79:c5:fe:8f:7d:7f:ff: c8:7f:0f:b7:a2:f6:be:5a:36:ab:60:77:0a:4d:cf: 49:81:69:0c:4f:96:99:a2:8e:39:12:0c:10:07:96: 55:62:81:f9:72:3d:fb:4c:e8:36:8c:76:c7:5e:18: 60:9d:e1:42:9d:12:e7:67:ad:71:56:ce:e2:9f:94: ce:45:7f:4d:da:d7:33:bb:1f:b1:26:ab:99:00:26: e4:4d:1a:f6:d8:4b:9f:be:b2:74:05:79:db:dd:e5: 68:05:64:b1:a3:f6:0c:6a:32:43:a7:e1:23:42:03: df:bf:53:fc:40:f3:9b:51:fd:d1:7b:c3:57:51:8c: 79:80:dd:ec:f1:61:24:6e:e5:f1:71:52:f5:33:93: 75:0a:a6:3e:47:4d:d1:38:ea:5d:b8:bc:8a:76:ed: be:98:85:61:7b:9d:84:68:ef:4e:a3:41:0e:0e:69: 1d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:66:50:90:9F:98:65:4E:71:51:09:E4:22:04:A0:EA:22:04:19:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2bb24533-8552-31af-b1fc-924a60936d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:91:77:3f:44:41:ba:f5:d0:c6:56:ad:ca:6a:d3:7c:28:e0: 64:56:d5:da:8b:83:74:e2:e4:d8:13:92:84:28:82:a4:92:81: c9:3c:99:ab:cd:1a:9d:77:ef:c7:90:d2:04:1e:ea:e5:52:b8: ea:06:22:25:66:e3:8a:67:33:98:ed:c4:cd:82:9a:ba:75:2d: d6:9d:9d:a6:25:0e:59:35:cf:b5:62:9b:bf:8d:3f:fa:31:7b: e1:ab:92:06:24:9e:2f:85:f0:d7:23:1d:9b:ea:c6:b1:88:9f: 91:78:96:19:7d:00:96:41:c1:32:2e:28:3a:0b:c4:27:3e:21: ff:f6:8c:83:ef:5e:06:de:37:13:53:d0:c0:90:0f:30:69:47: 79:fb:aa:d3:28:e1:7f:12:d7:df:e9:61:67:2f:b5:6a:73:96: 82:c2:88:c9:52:e0:11:74:61:e7:26:4c:e2:24:d1:59:d5:a1: b8:ef:44:d1:8b:6c:83:2a:7e:be:aa:4d:07:4c:c1:b3:a9:db: c4:02:65:69:e3:ec:26:7d:21:fd:3a:36:a0:bb:41:66:45:3a: 7f:c7:a0:fe:a8:fc:cb:24:54:f6:56:1f:46:d7:56:96:61:a1: 7a:35:df:de:16:d3:a1:84:92:96:c7:05:c3:29:bc:bd:32:1c: b9:80:62:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vKtpmmzBSuoS1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OTU4MTA5NDctODYwYy00ODQzLWFlZjQtNjU2MTc3YjhmYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ0mlGBFif4vjjGW3Havy5AEgvnzR9XiRoJa fJ5s9hA/+ehrdKk0zqJUuQRhU4sY5JOEkiDYFn4cQMRb8TKWCLgghIon2owoh1/J rj9cDNWj+nnF/o99f//Ifw+3ova+WjarYHcKTc9JgWkMT5aZoo45EgwQB5ZVYoH5 cj37TOg2jHbHXhhgneFCnRLnZ61xVs7in5TORX9N2tczux+xJquZACbkTRr22Euf vrJ0BXnb3eVoBWSxo/YMajJDp+EjQgPfv1P8QPObUf3Re8NXUYx5gN3s8WEkbuXx cVL1M5N1CqY+R03ROOpduLyKdu2+mIVhe52EaO9Oo0EODmkdxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9mUJCfmGVOcVEJ5CIEoOoiBBlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmJiMjQ1MzMtODU1Mi0z MWFmLWIxZmMtOTI0YTYwOTM2ZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpgDOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqRdz9EQbr10MZWrcpq03wo4GRW1dqLg3Ti5NgTkoQogqSSgck8mavN Gp1378eQ0gQe6uVSuOoGIiVm44pnM5jtxM2Cmrp1LdadnaYlDlk1z7Vim7+NP/ox e+GrkgYkni+F8NcjHZvqxrGIn5F4lhl9AJZBwTIuKDoLxCc+If/2jIPvXgbeNxNT 0MCQDzBpR3n7qtMo4X8S19/pYWcvtWpzloLCiMlS4BF0YecmTOIk0VnVobjvRNGL bIMqfr6qTQdMwbOp28QCZWnj7CZ9If06NqC7QWZFOn/HoP6o/MskVPZWH0bXVpZh oXo1394W06GEkpbHBcMpvL0yHLmAYsg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:05:08 2025 by rpki-client