$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/642f3b30-ff45-3861-ad37-3fa834bc38d6.roa File: 642f3b30-ff45-3861-ad37-3fa834bc38d6.roa (raw, json) Hash identifier: p3vz/TtdVNiI7yl2SxbVjbEyt+hW5kp7Kwf6D9DUXDA= Subject key identifier: 29:98:7C:7A:46:83:DA:6E:B4:5E:88:CF:24:93:FF:12:56:9D:5D:C9 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8BCA314D56F4152857F80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/642f3b30-ff45-3861-ad37-3fa834bc38d6.roa Signing time: Tue 15 Jul 2025 20:27:07 +0000 ROA not before: Tue 15 Jul 2025 20:27:07 +0000 ROA not after: Mon 13 Oct 2025 20:27:07 +0000 asID: 44559 IP address blocks: 166.1.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:bc:a3:14:d5:6f:41:52:85:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:07 2025 GMT Not After : Oct 13 20:27:07 2025 GMT Subject: CN=ff94bf1d-caec-4395-953c-39a8c160955c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:8a:82:6d:67:c8:19:02:5c:86:fd:d8:d3: 31:93:2d:a2:22:c5:f9:8a:1f:52:b3:fb:f4:cb:8f: d9:3f:ad:74:06:40:05:cb:f1:9c:76:dd:2e:ce:04: 42:32:90:07:1b:bd:8c:15:bf:bc:5b:8d:56:a8:25: 9c:3c:38:11:29:80:37:11:18:29:30:8f:41:0d:c4: 9a:47:7c:3b:0b:4c:d9:05:7a:5b:c7:6f:2c:db:48: d5:db:f5:b9:11:5b:9a:4f:bf:26:d1:db:15:59:f0: c5:de:e5:cb:c2:44:4d:53:52:e7:20:e9:75:af:96: a2:7e:7b:dc:d3:f8:79:07:00:d3:ad:85:2d:53:13: c6:9f:bb:4d:e7:3e:69:a2:81:72:92:5f:aa:59:ac: 88:14:da:e1:4a:8c:2b:bd:a3:e3:99:0c:9b:8c:6c: df:db:92:99:d0:8d:b3:ff:61:20:d6:d7:63:c5:b7: 22:fb:2e:5c:29:6d:2c:58:50:85:80:8a:29:80:c0: 57:2e:50:f3:9e:f0:5c:fe:14:41:3e:32:95:64:16: 60:2d:74:fd:bf:41:93:1f:7b:b8:96:cd:69:44:73: 72:07:02:0e:2e:76:cd:45:4a:83:b2:42:f9:2a:86: 11:8d:dd:d3:ce:b2:c8:68:c3:91:bd:50:08:55:5b: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:98:7C:7A:46:83:DA:6E:B4:5E:88:CF:24:93:FF:12:56:9D:5D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/642f3b30-ff45-3861-ad37-3fa834bc38d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5e:19:82:16:0e:29:06:0d:e2:b7:1c:8e:ec:b5:46:56:fb: c5:76:df:9e:3d:b0:67:66:9c:89:e2:2c:ff:94:70:a6:50:ef: a2:3c:04:db:14:46:e6:34:3f:d5:05:2b:9e:25:44:56:da:aa: 0c:0f:92:38:46:97:5b:66:17:cd:e6:e9:ea:e1:4d:69:f1:ae: 77:f2:20:86:5d:0a:8a:95:d2:8b:26:94:fd:7c:d0:29:12:f7: c8:0a:fe:46:71:4b:65:59:f5:1a:76:5a:37:e0:54:ec:7a:e1: a2:65:c5:20:ba:d6:28:22:06:99:a6:39:d0:d8:b5:77:56:01: 92:91:2c:e8:ba:08:f8:e7:11:f5:1e:7b:f0:e2:a6:64:f4:7d: 7c:c0:a8:37:bf:08:09:8c:64:93:7c:06:94:9b:19:c3:34:5d: 71:f3:8a:27:2a:32:c3:e1:f1:22:4b:69:10:9b:a3:ae:f9:fc: ad:1d:41:ac:48:74:a5:dc:bb:30:de:a9:eb:c1:fe:b1:04:51: 94:b5:a3:78:5b:bc:eb:64:7c:3e:97:02:86:d6:26:69:76:0d: eb:e9:c6:1b:dd:8d:43:f1:d0:e5:66:6a:e3:0f:fd:66:43:75: a4:75:4f:b5:fd:ef:b9:42:26:31:05:61:98:59:d0:dc:93:27: 50:8b:de:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuLyjFNVvQVKFf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwN1oXDTI1MTAxMzIwMjcwN1owLzEtMCsGA1UEAxMk ZmY5NGJmMWQtY2FlYy00Mzk1LTk1M2MtMzlhOGMxNjA5NTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeOKgm1nyBkCXIb92NMxky2iIsX5ih9Ss/v0 y4/ZP610BkAFy/Gcdt0uzgRCMpAHG72MFb+8W41WqCWcPDgRKYA3ERgpMI9BDcSa R3w7C0zZBXpbx28s20jV2/W5EVuaT78m0dsVWfDF3uXLwkRNU1LnIOl1r5aifnvc 0/h5BwDTrYUtUxPGn7tN5z5pooFykl+qWayIFNrhSowrvaPjmQybjGzf25KZ0I2z /2Eg1tdjxbci+y5cKW0sWFCFgIopgMBXLlDznvBc/hRBPjKVZBZgLXT9v0GTH3u4 ls1pRHNyBwIOLnbNRUqDskL5KoYRjd3TzrLIaMORvVAIVVuDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmYfHpGg9putF6IzyST/xJWnV3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjQyZjNiMzAtZmY0NS0z ODYxLWFkMzctM2ZhODM0YmMzOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADReGYIWDikGDeK3HI7stUZW+8V23549sGdmnIniLP+UcKZQ76I8BNsU RuY0P9UFK54lRFbaqgwPkjhGl1tmF83m6erhTWnxrnfyIIZdCoqV0osmlP180CkS 98gK/kZxS2VZ9Rp2WjfgVOx64aJlxSC61igiBpmmOdDYtXdWAZKRLOi6CPjnEfUe e/DipmT0fXzAqDe/CAmMZJN8BpSbGcM0XXHziicqMsPh8SJLaRCbo675/K0dQaxI dKXcuzDeqevB/rEEUZS1o3hbvOtkfD6XAobWJml2DevpxhvdjUPx0OVmauMP/WZD daR1T7X977lCJjEFYZhZ0NyTJ1CL3so= -----END CERTIFICATE-----Generated at Mon Jul 21 08:35:20 2025 by rpki-client