$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ecb2e1-a9a6-31ad-a31c-ad8f69fb21fd.roa File: 55ecb2e1-a9a6-31ad-a31c-ad8f69fb21fd.roa (raw, json) Hash identifier: X4t4WCnfV7KwsISzJJIHrJzuttCME1iewmKVsIJN5e0= Subject key identifier: 72:36:1D:30:E8:1A:DA:E3:D0:FD:32:65:1E:2B:04:37:31:C0:76:AA Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B0FA6C175E71414A4F2F9D6E0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ecb2e1-a9a6-31ad-a31c-ad8f69fb21fd.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8881 IP address blocks: 166.0.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c1:75:e7:14:14:a4:f2:f9:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=c64b809c-938b-4b40-ba7d-04b65aee0fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:22:49:f7:9f:46:68:09:e0:94:0b:97:20: ba:70:88:84:5c:cb:25:4c:fe:6c:41:99:f9:d2:c4: 66:b5:d5:5d:ba:b0:3d:0b:6f:f5:28:d0:f5:03:3a: e3:81:6b:42:30:6d:59:a9:a5:e3:15:a0:f1:96:66: 2a:6c:0c:10:75:af:31:82:80:eb:ff:24:b7:2e:b7: 2f:40:5b:3d:14:40:09:3b:ed:cd:d0:98:a7:4f:6b: 2a:c3:76:67:99:68:ab:16:63:9f:9f:f1:ee:9d:b3: c1:03:c8:ae:8f:f6:06:78:4e:2a:e3:59:ef:5a:73: df:68:45:1d:19:79:85:8d:c0:55:e7:2e:ba:21:ce: d7:0a:5b:c1:a7:15:be:f5:4a:19:f4:63:d3:81:d9: 56:f4:87:ef:14:d5:92:e3:c2:7e:a3:a7:0d:a4:e9: 62:06:9c:ec:ec:85:a4:a2:2e:1d:c2:44:75:94:c8: b3:9a:98:82:70:30:39:af:62:11:ed:8f:d5:79:0e: 71:f0:ff:21:56:5f:46:4f:06:9b:81:12:6e:41:c9: 8a:71:0b:8f:69:05:de:a7:cf:f1:48:b7:b0:94:32: 5a:c9:b8:6b:c3:ac:5c:17:0f:c3:06:92:32:04:ac: aa:77:f8:79:6b:6a:b4:65:fb:c4:2d:66:85:85:9c: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:36:1D:30:E8:1A:DA:E3:D0:FD:32:65:1E:2B:04:37:31:C0:76:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/55ecb2e1-a9a6-31ad-a31c-ad8f69fb21fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e2:7d:c3:a0:bf:c1:6e:04:0a:da:55:bc:4e:12:7e:a2:dd: 08:f5:ea:cd:f6:13:3c:bd:f9:82:3f:87:97:1e:af:f7:4d:c5: 44:6e:cd:ef:d7:5e:28:e7:85:48:60:e0:c2:09:26:00:41:7b: 17:df:f8:37:cf:65:0a:3f:cb:39:05:8c:52:c0:ec:1b:c3:c3: 0f:64:fa:55:52:a0:3c:ea:a5:6f:5e:56:66:47:52:aa:44:9f: bc:50:79:ea:ba:f2:06:ad:49:80:28:15:67:3b:79:71:27:0a: 43:bc:b5:f4:53:a3:13:f9:47:1c:99:96:11:68:36:67:87:2d: b3:9b:1f:ab:d5:22:66:f5:63:f6:76:88:7a:3c:e8:83:3a:f0: b9:dd:a8:4f:55:88:b5:2e:b1:0d:85:e9:c1:d5:55:a6:de:93: cb:95:88:d4:f1:f5:1c:84:c7:d1:b5:8e:4d:3e:37:ce:5c:0c: 5d:75:a9:cd:78:2a:1a:5c:49:0f:47:cc:a2:95:24:98:2b:ee: 3d:1a:23:38:a1:b4:4b:96:43:54:e7:ca:0c:01:fe:a3:ab:3b: a4:e4:99:0e:be:7a:ed:8f:6f:2c:39:f5:fd:74:b8:ab:cf:05: b6:35:79:4f:d4:96:5d:b6:bb:c7:b5:60:8f:e5:0b:4d:2f:0a: 58:7a:bf:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsF15xQUpPL51uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk YzY0YjgwOWMtOTM4Yi00YjQwLWJhN2QtMDRiNjVhZWUwZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQkiSfefRmgJ4JQLlyC6cIiEXMslTP5sQZn5 0sRmtdVdurA9C2/1KND1AzrjgWtCMG1ZqaXjFaDxlmYqbAwQda8xgoDr/yS3Lrcv QFs9FEAJO+3N0JinT2sqw3ZnmWirFmOfn/HunbPBA8iuj/YGeE4q41nvWnPfaEUd GXmFjcBV5y66Ic7XClvBpxW+9UoZ9GPTgdlW9IfvFNWS48J+o6cNpOliBpzs7IWk oi4dwkR1lMizmpiCcDA5r2IR7Y/VeQ5x8P8hVl9GTwabgRJuQcmKcQuPaQXep8/x SLewlDJaybhrw6xcFw/DBpIyBKyqd/h5a2q0ZfvELWaFhZwrKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI2HTDoGtrj0P0yZR4rBDcxwHaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTVlY2IyZTEtYTlhNi0z MWFkLWEzMWMtYWQ4ZjY5ZmIyMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjifcOgv8FuBAraVbxOEn6i3Qj16s32Ezy9+YI/h5cer/dNxURuze/X XijnhUhg4MIJJgBBexff+DfPZQo/yzkFjFLA7BvDww9k+lVSoDzqpW9eVmZHUqpE n7xQeeq68gatSYAoFWc7eXEnCkO8tfRToxP5RxyZlhFoNmeHLbObH6vVImb1Y/Z2 iHo86IM68LndqE9ViLUusQ2F6cHVVabek8uViNTx9RyEx9G1jk0+N85cDF11qc14 KhpcSQ9HzKKVJJgr7j0aIzihtEuWQ1TnygwB/qOrO6TkmQ6+eu2Pbyw59f10uKvP BbY1eU/Ull22u8e1YI/lC00vClh6v0M= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:42 2025 by rpki-client