$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d5bad90-fae9-34f8-8084-ed1e769fe5dd.roa File: 2d5bad90-fae9-34f8-8084-ed1e769fe5dd.roa (raw, json) Hash identifier: EqR40aW2xagKCEhN/W3k4n/3Lebk9A7q0sJ91RUEjL4= Subject key identifier: AF:A2:4F:A4:B7:41:7C:4A:7E:06:93:D1:7D:02:BA:94:A6:FF:9B:55 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B8DE31EB60B8FADCD49BF4C00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d5bad90-fae9-34f8-8084-ed1e769fe5dd.roa Signing time: Fri 17 Oct 2025 18:14:18 +0000 ROA not before: Fri 17 Oct 2025 18:14:18 +0000 ROA not after: Thu 15 Jan 2026 19:14:18 +0000 asID: 18526 IP address blocks: 166.0.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:e3:1e:b6:0b:8f:ad:cd:49:bf:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 17 18:14:18 2025 GMT Not After : Jan 15 19:14:18 2026 GMT Subject: CN=a0d7962f-0953-4cd0-8dd3-1dfa3c833cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:ae:82:8c:3f:64:02:42:32:4e:34:ea:88: 38:2d:dd:e6:15:cf:21:e1:66:fe:6e:c2:58:76:a1: 4f:d9:b0:8c:d6:00:6b:63:fc:b0:7c:f0:67:07:7c: 88:4d:f1:16:ce:d0:71:36:3f:3c:aa:31:47:a5:17: 46:c6:a1:f8:9b:2d:14:ed:e3:c6:d6:c3:db:bb:4a: 17:3b:61:fb:a5:80:f2:85:26:9f:de:ff:fd:18:1c: d5:05:87:c4:bd:ea:09:a5:60:7c:e8:f8:36:49:23: 16:8e:48:45:e9:2e:db:76:3f:db:8f:4a:86:19:6e: 07:35:4d:4d:0c:b8:2f:e8:d5:44:ae:ab:25:a0:d0: 75:63:7e:a8:9a:5b:57:04:b6:17:ca:23:b0:78:88: 59:49:ec:69:3a:75:ad:a3:cc:41:ed:1e:8a:8b:e0: e9:0f:91:dc:a1:d9:6e:d9:41:82:fa:1a:66:41:fd: e2:5b:c0:d6:7a:dd:aa:60:8d:f4:e0:14:5a:46:4e: 36:b5:71:21:e9:f4:fa:b0:5d:ee:fd:8d:42:67:0c: c9:6f:0d:aa:a2:eb:81:aa:90:fc:45:04:b6:2a:12: 1b:ab:f5:c3:ac:53:1a:58:a2:a3:0a:b1:f0:fb:a4: 25:9d:b3:a5:9a:1d:89:ca:0f:e4:74:40:09:5d:04: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A2:4F:A4:B7:41:7C:4A:7E:06:93:D1:7D:02:BA:94:A6:FF:9B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2d5bad90-fae9-34f8-8084-ed1e769fe5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:88:e8:a7:65:1f:c6:1a:aa:a0:00:2e:53:ef:7c:83:bc:6b: 14:cd:0a:df:fa:95:76:fc:6a:91:f3:43:9c:01:8c:0b:5a:6d: 6a:20:37:c8:37:52:dd:d0:c1:5f:5c:ca:fa:cc:1a:22:0d:e5: 97:33:99:2f:41:8a:5e:40:00:fe:e0:e8:fa:bc:b1:49:44:5c: f1:97:51:f2:e3:5c:17:f0:69:5d:67:e4:44:e8:43:5d:21:7a: e3:e2:39:19:1c:c1:9a:c3:ba:37:02:80:c6:82:f4:1c:4f:e4: 94:2c:09:b7:2a:8d:59:16:b8:4b:04:b9:35:67:90:3d:c1:22: df:51:37:c8:36:97:b5:4e:c5:0d:f4:da:2f:0a:09:25:08:3e: 46:f2:19:31:c4:4c:1c:50:9d:06:ba:0b:91:7e:98:b7:ab:d1: f7:99:75:14:91:95:da:a0:a7:4f:10:04:6c:53:84:c9:67:26: a9:fc:89:14:dc:6d:73:dc:82:f0:6d:84:d0:03:ce:ee:74:d8: 3f:d7:71:52:5c:73:6d:33:4c:d0:c0:23:ed:17:bf:be:c2:ee: 82:e0:a6:37:91:8d:82:c3:41:34:40:72:d0:54:43:8e:1a:68: e6:53:66:55:40:34:9d:20:10:dc:01:7b:16:82:ea:0f:bd:cb: 19:9c:59:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuN4x62C4+tzUm/TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxNzE4MTQxOFoXDTI2MDExNTE5MTQxOFowLzEtMCsGA1UEAxMk YTBkNzk2MmYtMDk1My00Y2QwLThkZDMtMWRmYTNjODMzY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNmugow/ZAJCMk406og4Ld3mFc8h4Wb+bsJY dqFP2bCM1gBrY/ywfPBnB3yITfEWztBxNj88qjFHpRdGxqH4my0U7ePG1sPbu0oX O2H7pYDyhSaf3v/9GBzVBYfEveoJpWB86Pg2SSMWjkhF6S7bdj/bj0qGGW4HNU1N DLgv6NVErqsloNB1Y36omltXBLYXyiOweIhZSexpOnWto8xB7R6Ki+DpD5Hcodlu 2UGC+hpmQf3iW8DWet2qYI304BRaRk42tXEh6fT6sF3u/Y1CZwzJbw2qouuBqpD8 RQS2KhIbq/XDrFMaWKKjCrHw+6QlnbOlmh2Jyg/kdEAJXQQOmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+iT6S3QXxKfgaT0X0CupSm/5tVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmQ1YmFkOTAtZmFlOS0z NGY4LTgwODQtZWQxZTc2OWZlNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByI6KdlH8YaqqAALlPvfIO8axTNCt/6lXb8apHzQ5wBjAtabWogN8g3 Ut3QwV9cyvrMGiIN5ZczmS9Bil5AAP7g6Pq8sUlEXPGXUfLjXBfwaV1n5EToQ10h euPiORkcwZrDujcCgMaC9BxP5JQsCbcqjVkWuEsEuTVnkD3BIt9RN8g2l7VOxQ30 2i8KCSUIPkbyGTHETBxQnQa6C5F+mLer0feZdRSRldqgp08QBGxThMlnJqn8iRTc bXPcgvBthNADzu502D/XcVJcc20zTNDAI+0Xv77C7oLgpjeRjYLDQTRActBUQ44a aOZTZlVANJ0gENwBexaC6g+9yxmcWXM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:06 2025 by rpki-client