$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65ffa2e4-b278-35f1-ad96-51cedf173ad2.roa File: 65ffa2e4-b278-35f1-ad96-51cedf173ad2.roa (raw, json) Hash identifier: hQF+/3HHaQNzLbfSNuLQUn1tNEUfQ3WyUq6aGtd6sl8= Subject key identifier: 30:A8:0C:55:82:89:75:8A:49:EA:49:68:D6:9B:F2:64:10:EC:88:6A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B6798032AEE9451F03B3E6440 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65ffa2e4-b278-35f1-ad96-51cedf173ad2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 166.1.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:98:03:2a:ee:94:51:f0:3b:3e:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=cf5597a9-d77d-4c15-84ba-6b581d2dc736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:8b:bc:e4:7d:4c:62:92:4c:ce:0e:1f:ea: 49:c7:36:7c:b7:38:fd:8f:83:e0:73:e0:a2:13:ee: 02:14:f3:4c:68:05:28:6a:76:e6:19:47:f2:25:07: cb:94:9a:bd:c0:c2:42:55:1d:20:8d:1d:57:a5:4f: 24:75:a9:b9:cd:46:61:5d:59:f5:69:1c:ff:81:58: f3:09:b5:a2:67:75:74:ca:12:bc:65:d8:7c:05:63: fc:b5:11:fa:0d:b0:60:a5:c3:29:6c:92:d9:1d:11: 70:73:05:50:44:62:c4:75:7e:13:1f:d7:76:01:77: 6d:2b:b0:df:76:f8:3c:4d:eb:6c:16:da:72:08:32: a3:f6:6c:0b:3c:57:cc:3e:e7:1b:98:90:43:0e:1b: ef:22:8d:ef:e5:c5:f1:01:74:d3:e0:4b:b0:74:55: cc:d1:e7:d6:3f:2e:e3:1e:9f:e5:e7:18:48:f2:16: b0:95:a0:02:26:1d:c7:e3:e8:d3:42:98:05:dc:81: 2a:70:10:52:c4:4e:62:cc:af:89:c9:33:11:86:19: 6f:37:12:c5:e5:68:04:f9:82:b6:47:ce:06:16:7c: 69:cd:fd:d2:7e:cb:b5:ef:a2:68:e5:02:d4:4e:5c: d8:bd:14:d9:29:16:3b:e5:f8:58:cf:25:04:a9:7d: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A8:0C:55:82:89:75:8A:49:EA:49:68:D6:9B:F2:64:10:EC:88:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/65ffa2e4-b278-35f1-ad96-51cedf173ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:45:81:33:85:f6:bc:4d:0b:4d:9e:ff:b7:e1:29:81:d6:3b: a6:31:3c:ea:ac:34:b1:b9:10:5a:59:73:08:c9:6c:bd:ca:10: 4c:83:f4:bd:f4:38:0f:93:aa:fa:5d:32:9a:9d:36:5b:bc:29: 99:76:5f:96:46:40:ba:4d:62:e8:d3:25:1b:08:1e:d7:42:de: 25:db:4f:cd:57:98:77:c1:20:33:10:a4:b2:4f:91:20:09:65: 55:b0:3a:d6:67:74:c3:a1:19:85:ca:b5:d6:89:96:ca:70:6d: 97:f2:9e:18:d8:03:8e:30:84:98:b8:a5:c8:dc:90:27:92:38: 28:ee:e2:fe:ca:fc:9f:36:50:6c:49:eb:98:06:f2:e6:cf:08: c8:df:3b:3c:67:d6:51:e6:9b:c5:28:e4:f8:50:70:90:65:65: ce:67:36:22:f3:eb:10:36:de:93:42:b1:2d:bf:8e:12:66:d3: d4:89:7b:ce:4d:26:60:12:4a:78:1b:f1:b0:1e:89:81:00:a5: 32:f0:f2:6c:72:72:da:42:69:26:40:1d:2e:70:40:57:47:12: 5d:7d:1b:d9:2c:4f:56:7b:01:b5:e3:df:62:96:3c:e0:5d:52: 0e:3f:42:3b:3e:54:9f:21:bb:c9:66:06:64:f6:a4:40:cd:3d: 35:72:c8:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnmAMq7pRR8Ds+ZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y1NTk3YTktZDc3ZC00YzE1LTg0YmEtNmI1ODFkMmRjNzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdqLvOR9TGKSTM4OH+pJxzZ8tzj9j4Pgc+Ci E+4CFPNMaAUoanbmGUfyJQfLlJq9wMJCVR0gjR1XpU8kdam5zUZhXVn1aRz/gVjz CbWiZ3V0yhK8Zdh8BWP8tRH6DbBgpcMpbJLZHRFwcwVQRGLEdX4TH9d2AXdtK7Df dvg8TetsFtpyCDKj9mwLPFfMPucbmJBDDhvvIo3v5cXxAXTT4EuwdFXM0efWPy7j Hp/l5xhI8hawlaACJh3H4+jTQpgF3IEqcBBSxE5izK+JyTMRhhlvNxLF5WgE+YK2 R84GFnxpzf3Sfsu176Jo5QLUTlzYvRTZKRY75fhYzyUEqX0KgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCoDFWCiXWKSepJaNab8mQQ7IhqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjVmZmEyZTQtYjI3OC0z NWYxLWFkOTYtNTFjZWRmMTczYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1FgTOF9rxNC02e/7fhKYHWO6YxPOqsNLG5EFpZcwjJbL3KEEyD9L30 OA+TqvpdMpqdNlu8KZl2X5ZGQLpNYujTJRsIHtdC3iXbT81XmHfBIDMQpLJPkSAJ ZVWwOtZndMOhGYXKtdaJlspwbZfynhjYA44whJi4pcjckCeSOCju4v7K/J82UGxJ 65gG8ubPCMjfOzxn1lHmm8Uo5PhQcJBlZc5nNiLz6xA23pNCsS2/jhJm09SJe85N JmASSngb8bAeiYEApTLw8mxyctpCaSZAHS5wQFdHEl19G9ksT1Z7AbXj32KWPOBd Ug4/Qjs+VJ8hu8lmBmT2pEDNPTVyyJ0= -----END CERTIFICATE-----Generated at Sun Oct 19 20:16:20 2025 by rpki-client