$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c91f1866-e7d9-383b-a1a1-9a199bf4d9e7.roa File: c91f1866-e7d9-383b-a1a1-9a199bf4d9e7.roa (raw, json) Hash identifier: 2fiMLKDxPskuZNszDiyyuZ6E31G2pEQI6AQqdyLx9Mk= Subject key identifier: E3:40:C4:25:FD:74:BB:4F:E3:E7:C4:B4:3F:54:90:62:81:19:2D:81 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B91777A99635168F3B95B2D00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c91f1866-e7d9-383b-a1a1-9a199bf4d9e7.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 44477 IP address blocks: 166.1.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:7a:99:63:51:68:f3:b9:5b:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=4de46b4a-4596-4035-9ba5-f5a6de618028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:a0:a2:5e:42:6a:fb:a4:7b:5a:58:3c:1e: 62:96:2a:f6:3a:d5:37:d5:81:37:bb:b9:a9:e1:16: 7c:2d:c1:1b:d7:53:ba:4a:6d:cf:5b:b3:45:59:a2: 89:0d:47:e4:93:0a:9c:ca:7c:9d:ab:81:80:14:b6: 69:fb:11:d8:7e:05:45:03:78:20:77:7a:ce:9d:6d: 9c:13:ab:09:83:f9:51:ec:b2:b4:78:6c:ed:40:65: 98:6d:19:be:60:fe:a9:04:1d:28:c4:72:a1:e0:48: 59:4a:d4:5c:c6:d7:5b:50:2a:b0:75:0e:ae:e0:04: 76:7e:1d:61:18:95:77:81:75:2c:36:ea:3e:e9:02: 25:78:9e:1b:29:7b:df:6b:d5:3e:79:f5:f0:8f:7c: 8f:c7:85:fe:b7:b4:ae:1d:e3:26:c0:9d:90:cf:40: 40:3b:e1:dc:1a:92:dc:73:77:ff:25:cb:11:ea:6d: 15:15:65:ce:4e:04:44:44:1f:79:b0:4a:45:f1:53: d3:88:5a:bb:54:93:5d:7a:17:2e:5c:e3:20:f6:72: 14:ac:f5:13:fa:9c:80:65:d6:ac:3c:35:3f:68:e0: 10:6b:be:c6:51:fd:93:94:75:24:8f:2f:58:f5:45: 8a:8a:d1:a9:71:24:cc:dc:2c:5c:56:1a:dc:d5:11: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:40:C4:25:FD:74:BB:4F:E3:E7:C4:B4:3F:54:90:62:81:19:2D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c91f1866-e7d9-383b-a1a1-9a199bf4d9e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:17:61:8f:bb:a1:90:eb:1f:a6:80:bd:ae:45:18:12:01:be: 34:9a:86:1f:f5:fd:dd:8e:2e:43:66:07:14:e2:26:bc:f8:8d: 72:33:00:5b:b6:de:ab:2c:7a:7c:2d:26:d4:e8:4b:25:d6:89: 1d:3a:ca:76:1f:b3:2b:33:b3:7c:77:12:9d:40:ae:1a:52:bb: e7:21:90:e1:18:71:c6:c7:dc:1d:f4:0a:1f:be:9a:1e:ec:d1: 1a:dd:1f:10:d0:0c:26:d1:5e:87:7a:40:2b:55:63:4a:e3:b8: c3:4a:3d:26:8b:b6:f4:d3:38:fb:55:4d:b5:76:a1:5f:f3:3e: 3f:2f:b2:c6:ff:78:43:ac:df:4d:75:80:88:53:a8:55:a7:43: 42:16:ba:8f:95:2a:62:9a:b3:06:0a:08:2c:a7:65:ad:92:7f: ff:2d:03:9e:6f:98:8b:64:b9:e6:97:c2:b7:f6:8e:cc:33:65: 85:c3:bd:b9:1a:e4:4d:d7:42:3d:ee:17:b3:c5:ec:83:a5:5d: 91:e7:e4:9a:9e:56:49:a7:36:00:04:71:7c:f6:61:23:9a:d2: 49:38:6f:f5:4e:3f:49:4b:43:33:2e:1b:aa:c2:35:90:36:80: 75:40:a9:0e:2e:fe:ba:8e:cc:43:f4:99:e3:f5:db:59:d6:dd: 44:2e:2e:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd3qZY1Fo87lbLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk NGRlNDZiNGEtNDU5Ni00MDM1LTliYTUtZjVhNmRlNjE4MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreagol5Cavuke1pYPB5ilir2OtU31YE3u7mp 4RZ8LcEb11O6Sm3PW7NFWaKJDUfkkwqcynydq4GAFLZp+xHYfgVFA3ggd3rOnW2c E6sJg/lR7LK0eGztQGWYbRm+YP6pBB0oxHKh4EhZStRcxtdbUCqwdQ6u4AR2fh1h GJV3gXUsNuo+6QIleJ4bKXvfa9U+efXwj3yPx4X+t7SuHeMmwJ2Qz0BAO+HcGpLc c3f/JcsR6m0VFWXOTgRERB95sEpF8VPTiFq7VJNdehcuXOMg9nIUrPUT+pyAZdas PDU/aOAQa77GUf2TlHUkjy9Y9UWKitGpcSTM3CxcVhrc1RHRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONAxCX9dLtP4+fEtD9UkGKBGS2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzkxZjE4NjYtZTdkOS0z ODNiLWExYTEtOWExOTliZjRkOWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8XYY+7oZDrH6aAva5FGBIBvjSahh/1/d2OLkNmBxTiJrz4jXIzAFu2 3qssenwtJtToSyXWiR06ynYfsyszs3x3Ep1ArhpSu+chkOEYccbH3B30Ch++mh7s 0RrdHxDQDCbRXod6QCtVY0rjuMNKPSaLtvTTOPtVTbV2oV/zPj8vssb/eEOs3011 gIhTqFWnQ0IWuo+VKmKaswYKCCynZa2Sf/8tA55vmItkueaXwrf2jswzZYXDvbka 5E3XQj3uF7PF7IOlXZHn5JqeVkmnNgAEcXz2YSOa0kk4b/VOP0lLQzMuG6rCNZA2 gHVAqQ4u/rqOzEP0meP121nW3UQuLj0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:36 2025 by rpki-client