$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41e2929a-8a39-3835-b361-9cc62813a36c.roa File: 41e2929a-8a39-3835-b361-9cc62813a36c.roa (raw, json) Hash identifier: 03ZuVky4sdA5tzlSmjbQ96DKg9sBWOGT7BiPSwk11CE= Subject key identifier: 08:E5:5D:E1:74:C1:E7:12:68:C5:A5:EE:19:E1:3C:BF:D2:8C:B2:31 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8BC84B1A4CD87E0464580 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41e2929a-8a39-3835-b361-9cc62813a36c.roa Signing time: Tue 15 Jul 2025 20:27:07 +0000 ROA not before: Tue 15 Jul 2025 20:27:07 +0000 ROA not after: Mon 13 Oct 2025 20:27:07 +0000 asID: 44559 IP address blocks: 166.1.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:bc:84:b1:a4:cd:87:e0:46:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:07 2025 GMT Not After : Oct 13 20:27:07 2025 GMT Subject: CN=9935fa0f-0e70-4797-9918-0da87d00b719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:29:29:8f:eb:ae:7b:7b:01:e4:13:7a:a7:9c: 65:83:29:c4:ff:16:bf:5e:8f:e7:65:f6:86:3b:2e: b9:8c:49:81:18:f4:71:a2:97:b7:a0:24:6f:db:b9: 70:fe:0c:95:ec:74:4d:ff:c6:07:e0:05:f6:14:76: 6d:77:eb:91:30:86:06:cd:f9:01:c2:cc:84:98:63: 5c:37:f3:a7:f9:53:9b:0a:09:73:c4:da:1c:6b:3b: 14:99:10:12:74:e0:34:e3:0d:f6:56:01:2a:b5:dc: 75:13:69:31:51:ed:c7:42:09:4b:f4:14:f8:03:8e: 41:44:e8:2d:34:d2:f8:fb:2d:2e:f7:e4:65:14:b7: df:d2:ba:9a:f0:14:0f:36:b6:05:e3:75:8f:ef:7d: e8:18:92:d2:b8:cb:c7:02:8b:74:5e:06:79:10:9a: 0f:72:4b:78:d0:db:b6:57:a8:72:6c:5a:bc:a7:a9: 67:17:cd:1e:df:1c:d5:56:bf:bc:ee:1b:54:14:44: c3:e9:b8:af:da:30:86:db:e0:fc:1f:92:51:e5:d2: 2c:1b:28:7a:07:e7:4d:b5:43:f5:c1:e0:7d:4b:f1: 8d:e0:9a:2e:02:88:ab:83:88:63:e5:a3:e5:da:89: 1b:3f:16:90:d3:7f:da:c3:ab:7d:ac:be:bf:91:46: 41:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E5:5D:E1:74:C1:E7:12:68:C5:A5:EE:19:E1:3C:BF:D2:8C:B2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/41e2929a-8a39-3835-b361-9cc62813a36c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:cd:b4:db:bc:c1:cb:01:b5:2c:8e:56:b9:6d:59:1b:7b:20: ec:30:62:8c:16:dd:64:86:dd:09:43:be:c1:2f:c5:5b:35:e0: 66:f5:a2:c6:27:86:ac:42:d7:91:b0:cc:08:18:9c:9b:92:e2: 73:e6:d6:70:90:2d:ac:37:ca:99:de:1f:ff:a6:40:74:d2:26: b3:fc:80:b7:a1:8d:35:26:57:88:4d:66:5d:ae:60:16:7a:d2: 88:f2:02:d7:69:98:7e:90:6b:37:08:86:8b:06:cb:92:e4:ea: 83:6c:81:eb:db:b0:af:ff:9f:5b:c4:4f:d4:fd:8d:6b:6b:51: a1:ef:9f:24:bb:d3:8d:8b:71:b9:1e:df:48:5d:45:da:fe:15: 48:90:d8:d9:34:20:8f:d0:12:3e:ed:6a:b4:2c:cf:c9:72:6d: 14:ea:2d:80:7d:79:ad:1b:12:a3:17:b6:fb:17:99:e9:f0:55: a0:e9:0a:43:94:de:9c:e3:aa:b1:6b:45:7b:6e:4c:37:83:9d: 37:2b:db:30:99:27:21:f3:59:31:2f:ee:36:e5:53:53:16:61: 42:cc:89:11:44:64:04:5a:c9:4f:7c:7a:c9:cb:45:1c:a0:1c: 65:19:1d:6f:93:d1:fd:52:79:66:30:36:dd:95:53:51:df:4a: f1:93:b9:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuLyEsaTNh+BGRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwN1oXDTI1MTAxMzIwMjcwN1owLzEtMCsGA1UEAxMk OTkzNWZhMGYtMGU3MC00Nzk3LTk5MTgtMGRhODdkMDBiNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgykpj+uue3sB5BN6p5xlgynE/xa/Xo/nZfaG Oy65jEmBGPRxope3oCRv27lw/gyV7HRN/8YH4AX2FHZtd+uRMIYGzfkBwsyEmGNc N/On+VObCglzxNocazsUmRASdOA04w32VgEqtdx1E2kxUe3HQglL9BT4A45BROgt NNL4+y0u9+RlFLff0rqa8BQPNrYF43WP733oGJLSuMvHAot0XgZ5EJoPckt40Nu2 V6hybFq8p6lnF80e3xzVVr+87htUFETD6biv2jCG2+D8H5JR5dIsGyh6B+dNtUP1 weB9S/GN4JouAoirg4hj5aPl2okbPxaQ03/aw6t9rL6/kUZBYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjlXeF0wecSaMWl7hnhPL/SjLIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDFlMjkyOWEtOGEzOS0z ODM1LWIzNjEtOWNjNjI4MTNhMzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfNtNu8wcsBtSyOVrltWRt7IOwwYowW3WSG3QlDvsEvxVs14Gb1osYn hqxC15GwzAgYnJuS4nPm1nCQLaw3ypneH/+mQHTSJrP8gLehjTUmV4hNZl2uYBZ6 0ojyAtdpmH6QazcIhosGy5Lk6oNsgevbsK//n1vET9T9jWtrUaHvnyS7042Lcbke 30hdRdr+FUiQ2Nk0II/QEj7tarQsz8lybRTqLYB9ea0bEqMXtvsXmenwVaDpCkOU 3pzjqrFrRXtuTDeDnTcr2zCZJyHzWTEv7jblU1MWYULMiRFEZARayU98esnLRRyg HGUZHW+T0f1SeWYwNt2VU1HfSvGTuSE= -----END CERTIFICATE-----Generated at Mon Jul 21 08:38:17 2025 by rpki-client