$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa File: f4c68815-3d15-31ef-8c79-3e658ae8e571.roa (raw, json) Hash identifier: pMqSPfjmKltD9Vgppt8U1UuVilMKS1okxrPozn1lG20= Subject key identifier: 36:DE:51:41:C8:0D:4B:1C:21:75:4A:0C:B2:BD:DA:DA:EF:19:7B:A5 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B636739C7714C15074EFE6400 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 197450 IP address blocks: 166.0.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:39:c7:71:4c:15:07:4e:fe:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=01927f56-ec9c-4094-8923-441148932234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:a7:49:ea:9c:83:86:1e:ad:ea:d9:3d:3f: 95:d3:74:e6:e4:a2:29:07:ab:9e:b3:43:11:98:e1: 70:f5:04:32:d6:7b:57:64:42:c3:c9:a7:a0:9c:47: 76:ab:6f:7c:33:e6:0b:ac:dc:2b:ce:db:c1:9e:e7: 96:46:03:ef:c3:4a:b6:69:dc:0b:e1:5c:77:12:68: b3:f1:0f:94:74:9a:17:6b:86:c0:37:7f:90:b6:49: 37:aa:74:f2:5f:dc:8d:2b:6c:e8:9d:f8:77:6d:9b: 60:60:ac:fc:b8:5c:3a:3f:8c:03:ca:63:29:c8:02: bb:a9:ad:7d:5b:a6:23:02:6a:e8:d7:a2:d4:eb:68: 94:db:f3:f9:67:cb:96:96:2e:f5:bb:50:9c:f5:6c: 42:8b:76:4c:b9:3b:01:c1:77:53:b5:8b:07:8a:1d: da:c4:a7:8f:55:f3:d9:4a:8f:ae:89:8a:f5:bd:a3: a7:ca:a8:3b:13:4e:df:59:d4:e4:c0:b0:b4:8e:d0: 92:a8:f1:9f:3a:ad:7e:e3:3c:bf:54:9f:cf:99:93: 76:cd:89:6d:92:d9:0b:76:5d:f6:d3:96:c3:9d:81: 50:e5:9a:c0:05:49:42:da:35:1e:ea:41:d6:7c:58: cc:68:e6:be:dd:4a:57:e3:45:3f:4e:cb:8b:1d:42: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DE:51:41:C8:0D:4B:1C:21:75:4A:0C:B2:BD:DA:DA:EF:19:7B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f4c68815-3d15-31ef-8c79-3e658ae8e571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c6:ed:31:55:56:c3:b0:69:98:6c:a0:9d:4b:76:a3:2b:8e: a1:2c:e6:92:11:f5:9d:7d:df:98:8d:39:15:42:e1:9c:44:50: b1:9a:9f:c5:f9:b1:11:af:8e:49:76:43:93:1a:fc:1c:19:43: 8b:11:cd:ba:45:61:74:7a:2b:f7:d6:1c:0a:d8:7e:d5:78:f5: 28:76:c6:47:91:01:21:e6:e4:d0:91:5c:62:dd:9f:92:05:85: 02:a8:c6:fc:b5:be:56:0b:9a:b3:2d:51:51:c4:70:2f:35:79: 0f:89:ab:88:35:b5:ad:f0:2a:3d:8b:33:03:8e:77:b2:da:78: 9e:4a:04:c5:4d:aa:d4:c0:14:24:ca:46:8e:f2:4e:99:0a:43: 80:2a:5f:25:89:06:1a:26:20:5e:a7:df:16:e5:c3:eb:54:48: f2:e4:c9:5f:d1:8c:27:12:a6:ab:94:84:4f:1f:f5:eb:04:17: 1a:a7:68:64:1d:c4:18:ad:5f:3c:85:c6:61:0b:40:32:a1:42: 1c:14:fd:a7:2e:e0:a3:c0:12:ad:d1:ff:ea:6f:64:f6:c9:92: eb:78:00:90:b9:95:c1:75:80:96:29:5b:ad:48:e2:02:01:8e: da:45:c5:b7:86:77:de:79:90:26:6f:cf:15:d6:f1:2a:e4:5d: 9c:57:9f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZznHcUwVB07+ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MDE5MjdmNTYtZWM5Yy00MDk0LTg5MjMtNDQxMTQ4OTMyMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1+nSeqcg4YererZPT+V03Tm5KIpB6ues0MR mOFw9QQy1ntXZELDyaegnEd2q298M+YLrNwrztvBnueWRgPvw0q2adwL4Vx3Emiz 8Q+UdJoXa4bAN3+Qtkk3qnTyX9yNK2zonfh3bZtgYKz8uFw6P4wDymMpyAK7qa19 W6YjAmro16LU62iU2/P5Z8uWli71u1Cc9WxCi3ZMuTsBwXdTtYsHih3axKePVfPZ So+uiYr1vaOnyqg7E07fWdTkwLC0jtCSqPGfOq1+4zy/VJ/PmZN2zYltktkLdl32 05bDnYFQ5ZrABUlC2jUe6kHWfFjMaOa+3UpX40U/TsuLHUL36QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbeUUHIDUscIXVKDLK92trvGXulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZjRjNjg4MTUtM2QxNS0z MWVmLThjNzktM2U2NThhZThlNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnG7TFVVsOwaZhsoJ1LdqMrjqEs5pIR9Z1935iNORVC4ZxEULGan8X5 sRGvjkl2Q5Ma/BwZQ4sRzbpFYXR6K/fWHArYftV49Sh2xkeRASHm5NCRXGLdn5IF hQKoxvy1vlYLmrMtUVHEcC81eQ+Jq4g1ta3wKj2LMwOOd7LaeJ5KBMVNqtTAFCTK Ro7yTpkKQ4AqXyWJBhomIF6n3xblw+tUSPLkyV/RjCcSpquUhE8f9esEFxqnaGQd xBitXzyFxmELQDKhQhwU/acu4KPAEq3R/+pvZPbJkut4AJC5lcF1gJYpW61I4gIB jtpFxbeGd955kCZvzxXW8SrkXZxXnzs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:01 2025 by rpki-client