$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be591f76-1d36-3417-b319-8895e74b7ce5.roa File: be591f76-1d36-3417-b319-8895e74b7ce5.roa (raw, json) Hash identifier: cgkympFZY8kn7TddVw1Lcgh74CHzuqIoX79pUp55Cy8= Subject key identifier: 28:14:4B:0C:CA:B4:49:45:C9:B5:E3:EC:00:9C:23:10:7F:10:33:9C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B679802EF4FFC7253C4B15500 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be591f76-1d36-3417-b319-8895e74b7ce5.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 166.1.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:98:02:ef:4f:fc:72:53:c4:b1:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f745f6e6-f89b-459e-bc1c-02ddf1a3aac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6b:07:e6:f9:da:6e:6c:d4:23:15:7c:ff:50: 9d:b1:01:fc:52:ec:af:ad:c8:a4:87:f1:a4:00:d8: f9:24:0e:46:fa:5e:08:4c:a9:c5:8a:67:1d:33:aa: dc:d7:c1:d4:1b:c2:7e:d6:35:6b:39:0a:0a:46:67: 1a:55:0c:bb:7b:7b:85:ab:41:8a:d9:62:6a:61:2e: e2:8f:5c:72:7d:b9:0a:23:29:e1:5d:d3:9e:73:cd: f5:ed:37:dd:86:17:b3:63:f8:21:d6:3e:48:8c:78: 55:40:90:a7:74:da:23:62:05:e6:e3:07:64:77:b4: f0:8c:14:cf:bf:70:a9:2e:15:6b:90:a2:32:61:4f: aa:af:1e:04:2c:0f:8a:2d:57:49:5f:63:42:f4:e0: fd:2e:3a:46:32:2a:1f:24:c2:cf:df:92:d2:78:0a: d5:c4:25:22:92:5f:89:3b:50:7f:02:6a:ed:8d:cf: dd:6d:41:e3:a7:91:ee:1c:b1:dd:2c:0f:49:95:43: fb:16:a4:56:1a:26:bf:33:3a:e3:73:3c:8e:aa:8b: 0e:3a:f3:cc:2c:3f:8b:9a:f8:63:01:be:1b:57:a1: 57:25:c8:a8:4e:26:29:a5:96:29:9b:17:85:7f:c5: 73:e6:d6:38:3c:ed:dc:47:7a:2e:30:c3:21:6f:17: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:14:4B:0C:CA:B4:49:45:C9:B5:E3:EC:00:9C:23:10:7F:10:33:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be591f76-1d36-3417-b319-8895e74b7ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f2:78:4b:8a:63:ab:bb:2c:e9:5d:17:ed:46:80:a9:dd:19: a0:28:8b:c1:fa:ac:f3:2d:83:95:83:c2:14:af:83:16:47:c1: 28:77:3a:b3:ff:aa:eb:3a:65:92:f8:90:89:16:aa:5e:a7:c9: ac:86:56:b1:89:4a:ef:55:ba:8c:46:b7:10:b3:e9:c9:03:96: 42:4c:5e:a7:ac:ec:9c:50:80:e4:0b:3a:fb:14:6a:bc:f6:9c: 14:f0:7c:a4:8e:d7:5a:b2:8b:f0:ec:6f:02:ee:60:77:fe:10: ee:88:8a:94:8b:c9:17:4b:5e:40:65:b4:46:09:c7:32:6e:b4: c7:ce:18:f6:f4:b9:ab:29:df:5d:f7:b5:27:24:fe:ed:8a:10: 75:8b:2e:b6:cc:59:bd:52:89:e9:09:08:3a:76:02:70:cb:d1: 1a:99:02:d4:df:10:02:1d:59:6f:c0:d4:c2:25:4f:fe:b2:55: 50:c5:4a:57:bb:44:aa:8f:30:bc:84:0d:87:1b:40:a2:d5:fe: d3:9e:de:7f:cc:65:f1:39:dc:f0:e0:50:d7:5e:12:a3:52:79: 9b:8e:bd:f9:e0:df:9f:62:e1:e3:d7:f8:a7:96:c3:b7:d2:16: bd:b5:3d:b5:46:e4:92:a7:52:8d:20:bb:5f:e8:08:89:e2:4b: 59:01:f1:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnmALvT/xyU8SxVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjc0NWY2ZTYtZjg5Yi00NTllLWJjMWMtMDJkZGYxYTNhYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WsH5vnabmzUIxV8/1CdsQH8Uuyvrcikh/Gk ANj5JA5G+l4ITKnFimcdM6rc18HUG8J+1jVrOQoKRmcaVQy7e3uFq0GK2WJqYS7i j1xyfbkKIynhXdOec8317TfdhhezY/gh1j5IjHhVQJCndNojYgXm4wdkd7TwjBTP v3CpLhVrkKIyYU+qrx4ELA+KLVdJX2NC9OD9LjpGMiofJMLP35LSeArVxCUikl+J O1B/Amrtjc/dbUHjp5HuHLHdLA9JlUP7FqRWGia/MzrjczyOqosOOvPMLD+Lmvhj Ab4bV6FXJcioTiYppZYpmxeFf8Vz5tY4PO3cR3ouMMMhbxe++QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgUSwzKtElFybXj7ACcIxB/EDOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmU1OTFmNzYtMWQzNi0z NDE3LWIzMTktODg5NWU3NGI3Y2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3yeEuKY6u7LOldF+1GgKndGaAoi8H6rPMtg5WDwhSvgxZHwSh3OrP/ qus6ZZL4kIkWql6nyayGVrGJSu9VuoxGtxCz6ckDlkJMXqes7JxQgOQLOvsUarz2 nBTwfKSO11qyi/DsbwLuYHf+EO6IipSLyRdLXkBltEYJxzJutMfOGPb0uasp3133 tSck/u2KEHWLLrbMWb1SiekJCDp2AnDL0RqZAtTfEAIdWW/A1MIlT/6yVVDFSle7 RKqPMLyEDYcbQKLV/tOe3n/MZfE53PDgUNdeEqNSeZuOvfng359i4ePX+KeWw7fS Fr21PbVG5JKnUo0gu1/oCIniS1kB8XY= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:43 2025 by rpki-client