$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa File: 7d36ea96-e1a3-346d-96f7-d02e19249321.roa (raw, json) Hash identifier: H70jwn27VbMfzJYuyVWpPBZjtzl1LiLSeZliG3ctj90= Subject key identifier: D5:EC:86:7C:5F:74:60:69:97:66:03:25:9E:6E:AB:B9:9E:B1:14:AD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584AD3A10EB3CED9D2DAA4806D40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 396163 IP address blocks: 166.0.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0e:b3:ce:d9:d2:da:a4:80:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=b2c9b3e4-c932-4d2d-8a72-b0ce4952f170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f2:2d:39:38:ea:3f:07:03:46:d6:51:60:f6: b4:b5:bc:32:09:05:59:86:24:4f:35:72:2f:17:f9: 3e:a6:52:1c:ef:ba:08:cd:31:14:2c:40:cf:57:6d: 39:db:a3:dc:4b:bd:81:27:d1:a9:75:88:f4:32:5a: 3a:3b:7d:e4:a2:a1:90:95:4d:e6:7a:c0:36:80:0b: 28:bd:f8:c9:ca:e3:a9:e4:41:81:1c:59:11:53:c8: 49:fb:2b:eb:ea:5d:e1:22:91:ab:c0:62:28:ac:6f: 0a:de:88:23:5b:c2:f2:72:cf:2c:6e:dc:a6:6a:c9: c3:d1:d2:5f:ba:da:e0:73:50:cf:9b:63:79:67:63: ef:13:fb:85:7c:d9:d6:c7:b4:0d:7a:53:bb:a4:9e: bb:f2:1a:44:2b:f2:b9:9d:6b:48:a5:d1:db:6e:1c: 3a:11:50:a5:e4:04:d7:b4:ea:0a:1b:fc:31:4a:57: fa:5a:51:c7:17:5a:3f:5f:b7:6a:e1:ce:ad:84:00: fb:9f:21:1a:cb:36:8d:96:02:73:f5:f4:b3:f1:ed: 7c:c8:46:96:82:4a:93:cd:f1:5a:12:f7:6e:e9:ec: 67:34:f0:98:6b:12:45:87:d6:36:1e:25:27:08:25: 3f:ba:37:53:b3:3e:8b:19:fc:34:2a:42:be:ef:79: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EC:86:7C:5F:74:60:69:97:66:03:25:9E:6E:AB:B9:9E:B1:14:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7d36ea96-e1a3-346d-96f7-d02e19249321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:99:15:28:c2:9b:88:24:89:70:15:4f:9c:d5:62:40:3d:c5: a5:fc:16:37:32:9e:ca:9c:40:00:cc:72:dd:f3:59:f0:80:bd: 98:6c:fe:c3:01:88:2b:a0:bf:d8:32:02:c8:f7:88:cd:fa:89: 2f:81:3e:34:2d:26:aa:06:a9:00:03:41:d8:c0:ef:7b:d9:0f: ca:f9:38:72:6f:a6:f4:8a:b0:7f:ab:54:af:f7:18:89:4d:71: 25:18:7b:ab:4a:0c:d4:bd:69:82:d8:45:88:e5:7b:a2:fd:55: d6:e3:23:65:87:9d:fb:e3:57:4d:51:27:9c:a5:aa:4a:5b:a4: 0c:3a:10:41:11:98:09:d6:9c:6f:f3:d7:0e:45:bb:46:69:8e: db:cb:3f:6d:d1:94:59:a2:d4:a0:1f:72:05:08:4f:31:34:12: 77:dc:12:ca:f6:ce:9d:a3:f8:7b:e4:c7:bf:59:4b:3f:cc:ed: be:02:de:3c:7e:c4:8e:29:b7:b2:71:bf:4b:7c:90:c2:fc:0f: d0:aa:34:7e:f0:0e:96:48:82:07:72:06:0c:45:89:74:66:3f: 74:6a:65:96:e1:19:e7:f2:ef:8c:1d:3d:ca:36:32:70:af:b2: 60:3f:52:72:e9:28:90:be:16:64:6a:a8:2c:63:42:2a:31:1c: 01:15:67:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToQ6zztnS2qSAbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YjJjOWIzZTQtYzkzMi00ZDJkLThhNzItYjBjZTQ5NTJmMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fItOTjqPwcDRtZRYPa0tbwyCQVZhiRPNXIv F/k+plIc77oIzTEULEDPV20526PcS72BJ9GpdYj0Mlo6O33koqGQlU3mesA2gAso vfjJyuOp5EGBHFkRU8hJ+yvr6l3hIpGrwGIorG8K3ogjW8Lycs8sbtymasnD0dJf utrgc1DPm2N5Z2PvE/uFfNnWx7QNelO7pJ678hpEK/K5nWtIpdHbbhw6EVCl5ATX tOoKG/wxSlf6WlHHF1o/X7dq4c6thAD7nyEayzaNlgJz9fSz8e18yEaWgkqTzfFa Evdu6exnNPCYaxJFh9Y2HiUnCCU/ujdTsz6LGfw0KkK+73lvMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXshnxfdGBpl2YDJZ5uq7mesRStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2QzNmVhOTYtZTFhMy0z NDZkLTk2ZjctZDAyZTE5MjQ5MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpgBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+ZFSjCm4gkiXAVT5zVYkA9xaX8FjcynsqcQADMct3zWfCAvZhs/sMB iCugv9gyAsj3iM36iS+BPjQtJqoGqQADQdjA73vZD8r5OHJvpvSKsH+rVK/3GIlN cSUYe6tKDNS9aYLYRYjle6L9VdbjI2WHnfvjV01RJ5ylqkpbpAw6EEERmAnWnG/z 1w5Fu0ZpjtvLP23RlFmi1KAfcgUITzE0EnfcEsr2zp2j+Hvkx79ZSz/M7b4C3jx+ xI4pt7Jxv0t8kML8D9CqNH7wDpZIggdyBgxFiXRmP3RqZZbhGefy74wdPco2MnCv smA/UnLpKJC+FmRqqCxjQioxHAEVZ9Q= -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:44 2025 by rpki-client