$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa File: dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa (raw, json) Hash identifier: 7Q+ewBPxuapUFkY+ZfqmVrrfnNxIwN4BKatu24Y36Ig= Subject key identifier: 70:49:D4:E7:8E:7B:67:6F:3D:00:07:40:F9:C5:1E:9A:8D:46:0E:63 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B7427535CD0EF75AA62209538 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 6939 IP address blocks: 166.0.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:53:5c:d0:ef:75:aa:62:20:95:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=d8256b09-8ce3-42b1-8614-8fa98ed6c8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:56:59:9a:ab:d0:13:35:01:63:de:a0:d6:f2: 68:15:ea:d2:20:ab:c0:8b:3a:69:03:35:5b:15:26: ad:fe:c5:d7:44:2a:33:35:ae:67:2c:a2:1d:8e:45: 98:90:2f:7a:f0:02:b2:83:31:17:42:7d:27:c0:3f: 30:cd:f4:3b:7e:c2:37:4d:5a:b8:49:4f:b5:ed:99: 27:5b:41:0b:ae:df:d1:2e:be:69:b8:8f:63:17:07: 30:63:d9:92:4a:7d:37:f0:60:34:5e:10:a7:48:fe: 66:90:90:de:69:ca:1b:cf:74:25:8a:cc:b1:18:81: 98:d3:74:80:c9:1a:72:e9:f2:f1:2e:ac:87:e0:f4: 5b:11:5c:17:b6:54:75:2a:9b:30:dd:97:95:01:7d: a5:ff:cd:a8:3a:cd:ef:d4:7a:d5:37:13:c7:14:80: 09:bc:5e:2e:23:2e:36:58:85:f0:d4:5d:04:a7:a5: 06:e6:90:40:9c:7f:57:0e:b0:73:6c:00:ea:2a:29: 96:dc:7a:31:f8:54:c0:c3:7c:a3:27:5b:de:e8:11: 36:a5:38:a7:e7:90:88:93:13:9f:16:07:85:20:97: 58:a1:37:02:cc:93:aa:dd:94:c1:85:92:a5:4e:3c: 72:47:9c:3d:fc:1c:5a:58:8b:b0:3b:8a:ec:98:f5: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:49:D4:E7:8E:7B:67:6F:3D:00:07:40:F9:C5:1E:9A:8D:46:0E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:88:2f:e7:7f:60:57:02:02:90:cc:05:46:66:7a:0f:33:6f: 32:b5:17:ed:39:94:d9:f8:80:1f:fc:da:99:f5:85:07:9f:27: d4:37:0a:e3:03:82:2e:52:00:f2:8a:92:33:4e:64:ae:bf:a7: a6:60:4d:2b:9e:ec:f1:0e:e2:cb:b1:87:3c:3b:0e:80:4a:72: 64:f3:d6:54:f1:70:8d:ae:e1:e7:2a:e7:75:ad:7c:76:69:d3: c7:fd:91:2f:93:41:32:ed:c4:a2:60:f5:3f:83:3a:94:f9:49: 29:d4:db:5b:a1:44:4c:cc:0d:1d:f3:8e:0e:25:f1:49:d2:57: 8f:fa:71:b0:5a:99:4f:06:51:4e:54:8d:4f:a7:54:12:38:ca: d5:44:74:f3:9f:88:95:e4:3e:df:4f:84:5e:06:68:c0:61:fc: 52:40:50:57:81:d1:20:b6:66:60:82:45:ce:fa:aa:66:6f:68: e3:04:63:09:f9:2e:bc:af:ae:ed:c7:a3:59:b5:17:75:98:3e: 65:60:6d:f5:43:c9:9b:1d:55:16:ff:ca:cb:8e:41:9d:12:31: 8b:20:e0:06:1c:35:87:c6:91:bd:55:ce:b9:ac:cc:f9:e8:63: 23:9b:f7:31:64:bc:79:ff:48:fb:03:b0:14:86:b9:0d:30:f5: 99:9b:45:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J1Nc0O91qmIglTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk ZDgyNTZiMDktOGNlMy00MmIxLTg2MTQtOGZhOThlZDZjOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVZZmqvQEzUBY96g1vJoFerSIKvAizppAzVb FSat/sXXRCozNa5nLKIdjkWYkC968AKygzEXQn0nwD8wzfQ7fsI3TVq4SU+17Zkn W0ELrt/RLr5puI9jFwcwY9mSSn038GA0XhCnSP5mkJDeacobz3QlisyxGIGY03SA yRpy6fLxLqyH4PRbEVwXtlR1Kpsw3ZeVAX2l/82oOs3v1HrVNxPHFIAJvF4uIy42 WIXw1F0Ep6UG5pBAnH9XDrBzbADqKimW3Hox+FTAw3yjJ1ve6BE2pTin55CIkxOf FgeFIJdYoTcCzJOq3ZTBhZKlTjxyR5w9/BxaWIuwO4rsmPX5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBJ1OeOe2dvPQAHQPnFHpqNRg5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGZhOWVjMTQtZjhlNi0z NzVlLWEwNGQtZDc2NjRmZGZmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeIL+d/YFcCApDMBUZmeg8zbzK1F+05lNn4gB/82pn1hQefJ9Q3CuMD gi5SAPKKkjNOZK6/p6ZgTSue7PEO4suxhzw7DoBKcmTz1lTxcI2u4ecq53WtfHZp 08f9kS+TQTLtxKJg9T+DOpT5SSnU21uhREzMDR3zjg4l8UnSV4/6cbBamU8GUU5U jU+nVBI4ytVEdPOfiJXkPt9PhF4GaMBh/FJAUFeB0SC2ZmCCRc76qmZvaOMEYwn5 Lryvru3Ho1m1F3WYPmVgbfVDyZsdVRb/ysuOQZ0SMYsg4AYcNYfGkb1VzrmszPno YyOb9zFkvHn/SPsDsBSGuQ0w9ZmbRdg= -----END CERTIFICATE-----Generated at Mon Oct 20 01:14:15 2025 by rpki-client