$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503e7f0c-8552-3d70-8096-1df753c84fe3.roa File: 503e7f0c-8552-3d70-8096-1df753c84fe3.roa (raw, json) Hash identifier: noyA14vcW9B8jL7Y5Wd8JpXku+ZR+Xx+BWbk+eBgCbI= Subject key identifier: E9:2B:D7:B1:21:5B:8D:F2:D7:37:98:A5:54:C7:0F:91:5D:22:08:84 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AF250688E9F4A7999DBA9A900 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503e7f0c-8552-3d70-8096-1df753c84fe3.roa Signing time: Sat 23 Aug 2025 00:48:24 +0000 ROA not before: Sat 23 Aug 2025 00:48:24 +0000 ROA not after: Fri 21 Nov 2025 01:48:24 +0000 asID: 401152 IP address blocks: 166.0.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:50:68:8e:9f:4a:79:99:db:a9:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 23 00:48:24 2025 GMT Not After : Nov 21 01:48:24 2025 GMT Subject: CN=5ff10d3d-bbf2-4566-b0ef-5ea1520ee4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:1e:5f:6c:18:af:5e:cc:86:5e:2c:89:ef: 4e:43:b9:0c:82:8e:39:da:ca:e4:c7:64:29:03:20: dc:c1:fa:6d:a2:be:9d:4e:de:99:77:64:e4:02:6b: 8e:88:22:13:50:ba:67:f3:72:8f:41:92:46:48:ea: ed:e3:fe:ed:90:a2:c1:1e:9c:6a:d8:ca:b9:48:fa: f5:bf:5f:4b:e5:98:a3:6a:ab:05:4d:4b:0d:5c:f3: 77:7a:39:b6:57:0d:a1:90:52:70:f9:fb:16:92:56: 33:07:7c:30:59:4c:a3:34:b3:cb:1a:ea:95:d5:70: b7:77:7c:a3:b2:51:8d:f8:0f:be:51:ec:9e:6a:c0: 79:ff:40:02:0e:59:4e:1f:3a:7b:9c:24:fe:70:af: c2:99:ec:65:6d:0d:66:ac:ae:ee:40:11:76:c1:10: a0:b7:c3:b8:4a:93:68:1d:9b:76:f2:11:03:1b:bc: 05:f3:af:5d:45:1c:63:f3:eb:12:56:f3:34:7d:31: f4:e2:53:5f:4a:ae:73:58:9e:5f:28:14:4e:04:55: 4d:5a:78:8b:80:31:e3:9b:81:ae:4e:9a:ca:c9:57: d7:b9:93:83:ff:24:07:1d:ec:2a:bb:40:7e:5a:33: 19:10:e0:11:ae:b1:74:38:2e:6c:90:52:6c:fa:4d: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2B:D7:B1:21:5B:8D:F2:D7:37:98:A5:54:C7:0F:91:5D:22:08:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503e7f0c-8552-3d70-8096-1df753c84fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bc:7b:d0:78:0f:10:32:97:6d:55:86:91:45:cd:8b:ec:d7: da:bd:93:62:d0:6d:a4:44:12:93:26:24:9b:ca:55:d4:22:aa: dc:68:4c:59:69:7f:54:a0:75:f4:72:a4:1c:a5:6e:07:81:c0: a6:a6:78:a5:d3:0a:b4:c4:cc:58:a4:ea:c7:d8:4b:f5:e5:b0: 09:9f:d2:c5:3e:6d:fd:a3:bd:3c:eb:1a:87:92:ed:9a:6a:b2: dd:00:b4:45:a4:73:a5:f7:96:ba:97:7a:13:83:17:aa:ab:c7: f7:3b:4d:45:b0:44:16:2a:5f:e9:0e:77:69:f4:01:0c:65:c5: db:5a:d7:f3:2e:e1:d6:cf:ee:a5:8b:e9:94:07:1f:cf:e3:b4: 05:60:21:c4:28:fc:ea:84:e6:63:2c:9e:55:37:3b:de:61:50: fc:ab:ba:08:c0:f4:a9:ef:d1:9f:ba:6d:c0:97:c4:8f:8c:0c: 38:fe:6f:71:1e:d2:fe:48:7e:2b:44:df:e2:f0:ea:ba:c0:85: 66:3f:04:41:76:12:9b:79:91:74:8c:70:08:0b:7f:4e:44:65: 54:ec:13:45:1c:59:df:8e:ff:a1:7e:46:48:95:65:8e:cb:11: 49:83:61:fb:f8:1b:dd:eb:b1:06:1d:a4:4c:8a:79:7c:d2:f8: 98:49:ff:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryUGiOn0p5mdupqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgyMzAwNDgyNFoXDTI1MTEyMTAxNDgyNFowLzEtMCsGA1UEAxMk NWZmMTBkM2QtYmJmMi00NTY2LWIwZWYtNWVhMTUyMGVlNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYIeX2wYr17Mhl4sie9OQ7kMgo452srkx2Qp AyDcwfptor6dTt6Zd2TkAmuOiCITULpn83KPQZJGSOrt4/7tkKLBHpxq2Mq5SPr1 v19L5ZijaqsFTUsNXPN3ejm2Vw2hkFJw+fsWklYzB3wwWUyjNLPLGuqV1XC3d3yj slGN+A++UeyeasB5/0ACDllOHzp7nCT+cK/CmexlbQ1mrK7uQBF2wRCgt8O4SpNo HZt28hEDG7wF869dRRxj8+sSVvM0fTH04lNfSq5zWJ5fKBROBFVNWniLgDHjm4Gu TprKyVfXuZOD/yQHHewqu0B+WjMZEOARrrF0OC5skFJs+k298wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkr17EhW43y1zeYpVTHD5FdIgiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTAzZTdmMGMtODU1Mi0z ZDcwLTgwOTYtMWRmNzUzYzg0ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi8e9B4DxAyl21VhpFFzYvs19q9k2LQbaREEpMmJJvKVdQiqtxoTFlp f1SgdfRypBylbgeBwKameKXTCrTEzFik6sfYS/XlsAmf0sU+bf2jvTzrGoeS7Zpq st0AtEWkc6X3lrqXehODF6qrx/c7TUWwRBYqX+kOd2n0AQxlxdta1/Mu4dbP7qWL 6ZQHH8/jtAVgIcQo/OqE5mMsnlU3O95hUPyrugjA9Knv0Z+6bcCXxI+MDDj+b3Ee 0v5IfitE3+Lw6rrAhWY/BEF2Ept5kXSMcAgLf05EZVTsE0UcWd+O/6F+RkiVZY7L EUmDYfv4G93rsQYdpEyKeXzS+JhJ/18= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:04 2025 by rpki-client