$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/636306d6-aaf7-3e7c-b019-03a25278c65d.roa File: 636306d6-aaf7-3e7c-b019-03a25278c65d.roa (raw, json) Hash identifier: IW9c7/Sc4nL/qLzyPi4dsrAbWRU6wYvculZDZnWhKSY= Subject key identifier: 1A:5F:96:74:F8:A0:BE:BB:83:95:B0:4A:3D:2D:DE:59:EF:A8:1E:77 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8C0A31C23577C77619F80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/636306d6-aaf7-3e7c-b019-03a25278c65d.roa Signing time: Tue 15 Jul 2025 20:27:09 +0000 ROA not before: Tue 15 Jul 2025 20:27:09 +0000 ROA not after: Mon 13 Oct 2025 20:27:09 +0000 asID: 44559 IP address blocks: 166.1.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:c0:a3:1c:23:57:7c:77:61:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:09 2025 GMT Not After : Oct 13 20:27:09 2025 GMT Subject: CN=aed76d5c-3069-4b42-a25f-56f3caabfe5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:73:e2:0c:41:43:e3:1c:46:3d:b3:db:43:31: 0b:32:7b:46:e1:cf:63:6f:e8:49:43:49:15:d1:69: 15:fa:78:87:1d:57:94:4e:56:67:83:f9:25:59:cf: a3:be:54:e6:34:13:d3:23:ec:a6:b0:86:6e:d8:78: 6a:a3:40:4e:e8:1a:ec:67:71:ce:94:20:d7:f9:29: a7:2f:3c:d3:04:7d:23:e3:33:b4:7f:ec:a8:6e:7b: 1d:8b:8b:67:b9:2c:f0:a9:81:8d:b5:24:12:ef:5e: ee:11:35:32:e8:d0:7e:3f:47:fb:7c:de:3f:04:a7: f9:46:61:32:6b:17:94:82:54:25:0d:19:7a:a4:47: 3a:9d:12:f7:36:8b:57:a4:22:21:10:c4:93:67:46: a1:3b:af:56:2a:c2:eb:2d:29:4f:93:48:68:59:c3: e0:84:fa:e1:a6:8e:52:46:9c:6d:dc:4a:cf:ad:19: 67:71:6f:ae:f2:1c:6d:98:c7:56:f8:50:00:f8:ac: d3:42:3a:61:a3:12:78:10:71:28:35:d9:5f:b8:e0: bc:df:ef:28:fb:15:8f:a6:18:4d:23:a1:fe:0f:b1: f1:c5:cc:ed:05:57:47:b5:21:5a:dd:6a:e3:4f:91: a2:bc:dd:7a:dd:d3:cf:71:23:89:ec:d2:bb:06:96: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5F:96:74:F8:A0:BE:BB:83:95:B0:4A:3D:2D:DE:59:EF:A8:1E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/636306d6-aaf7-3e7c-b019-03a25278c65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3c:31:45:e1:64:e4:ee:2f:97:7b:8f:72:cd:4f:78:53:bf: 0e:77:f3:94:15:d0:42:ff:e1:e2:3d:15:c5:27:57:4d:bb:35: ee:3f:72:09:e6:35:03:36:85:e7:ba:27:ca:81:92:48:5b:07: 50:76:e8:ac:71:a3:dc:42:f6:2f:94:05:0b:53:95:90:14:b1: d7:2a:61:75:93:96:77:96:24:67:aa:5e:85:92:79:04:f0:f1: ce:a9:4e:21:0c:76:14:89:db:34:f0:b7:27:4f:a3:e8:1b:cf: 22:5c:77:12:b6:ce:51:0b:cf:ec:1c:91:89:02:64:97:0a:37: f1:c4:ac:71:fb:80:83:65:b8:73:bd:45:fc:11:e3:7e:de:a2: 3c:a4:8a:af:d1:78:6f:c8:02:e8:c3:7c:f1:a1:21:68:5a:77: 52:e1:d6:b0:b0:03:a4:ec:df:f2:1a:8f:b7:e2:16:47:e1:fd: 82:26:d4:8a:2e:17:64:26:41:10:f2:cd:4b:96:f9:6b:62:9c: 3b:1d:3f:14:62:93:76:79:a9:fe:b3:b6:56:96:c3:ff:ec:88: d9:55:72:d2:21:03:de:47:78:bf:1d:25:d4:13:0c:88:ad:be: e7:85:f4:e8:77:80:91:a2:28:a1:3d:df:f9:a5:3e:47:83:9e: 88:3c:28:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuMCjHCNXfHdhn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwOVoXDTI1MTAxMzIwMjcwOVowLzEtMCsGA1UEAxMk YWVkNzZkNWMtMzA2OS00YjQyLWEyNWYtNTZmM2NhYWJmZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXPiDEFD4xxGPbPbQzELMntG4c9jb+hJQ0kV 0WkV+niHHVeUTlZng/klWc+jvlTmNBPTI+ymsIZu2Hhqo0BO6BrsZ3HOlCDX+Smn LzzTBH0j4zO0f+yobnsdi4tnuSzwqYGNtSQS717uETUy6NB+P0f7fN4/BKf5RmEy axeUglQlDRl6pEc6nRL3NotXpCIhEMSTZ0ahO69WKsLrLSlPk0hoWcPghPrhpo5S Rpxt3ErPrRlncW+u8hxtmMdW+FAA+KzTQjphoxJ4EHEoNdlfuOC83+8o+xWPphhN I6H+D7HxxcztBVdHtSFa3WrjT5GivN163dPPcSOJ7NK7Bpb8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpflnT4oL67g5WwSj0t3lnvqB53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjM2MzA2ZDYtYWFmNy0z ZTdjLWIwMTktMDNhMjUyNzhjNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY8MUXhZOTuL5d7j3LNT3hTvw5385QV0EL/4eI9FcUnV027Ne4/cgnm NQM2hee6J8qBkkhbB1B26Kxxo9xC9i+UBQtTlZAUsdcqYXWTlneWJGeqXoWSeQTw 8c6pTiEMdhSJ2zTwtydPo+gbzyJcdxK2zlELz+wckYkCZJcKN/HErHH7gINluHO9 RfwR437eojykiq/ReG/IAujDfPGhIWhad1Lh1rCwA6Ts3/Iaj7fiFkfh/YIm1Iou F2QmQRDyzUuW+WtinDsdPxRik3Z5qf6ztlaWw//siNlVctIhA95HeL8dJdQTDIit vueF9Oh3gJGiKKE93/mlPkeDnog8KCY= -----END CERTIFICATE-----Generated at Mon Jul 21 08:34:07 2025 by rpki-client