$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71f6927a-5330-3055-bdd7-8efe2c061e0a.roa File: 71f6927a-5330-3055-bdd7-8efe2c061e0a.roa (raw, json) Hash identifier: JhYGfJvXW8Ua0wjQB34bdNiOfW1+g0aG4gTj5Y2Xflo= Subject key identifier: 68:7C:AB:02:8A:E8:3C:58:B9:92:3D:72:8E:AE:32:91:86:E7:39:2B Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8BCBF446732839B55C100 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71f6927a-5330-3055-bdd7-8efe2c061e0a.roa Signing time: Tue 15 Jul 2025 20:27:07 +0000 ROA not before: Tue 15 Jul 2025 20:27:07 +0000 ROA not after: Mon 13 Oct 2025 20:27:07 +0000 asID: 44559 IP address blocks: 166.1.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:bc:bf:44:67:32:83:9b:55:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:07 2025 GMT Not After : Oct 13 20:27:07 2025 GMT Subject: CN=8bc44dc5-dc67-465b-bed6-4d4e59bdc906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:39:18:1d:ab:43:eb:c5:ce:6e:9b:7a:f9: 2d:cf:b8:a1:19:f9:24:d5:dc:4c:8f:41:6f:0d:54: b3:48:ac:af:b2:99:22:19:6c:b2:86:7b:3b:9e:c1: 15:8a:2c:2b:c8:8f:ad:70:74:dc:9b:18:a8:a8:2e: 88:03:ad:1b:18:a9:fb:5c:96:46:41:44:92:01:81: cc:71:81:dd:66:ef:2f:2c:99:bd:dd:cc:a4:de:79: 0c:55:64:1b:45:0c:d8:ad:ee:02:8e:e7:55:39:e0: ef:c8:59:96:d0:86:75:e1:f1:10:30:63:22:36:f7: 1a:fd:2c:f1:cd:9a:06:30:c6:a8:61:82:57:7a:50: 3f:ea:ab:19:bc:52:23:ef:44:1d:c9:48:8c:bd:b0: 4e:40:b6:66:ed:2b:c2:4e:bf:03:d4:a9:09:8b:be: 82:fa:47:a1:d0:5e:75:71:19:eb:50:fb:4b:d1:bf: 02:ec:9d:e8:d6:93:09:5d:0a:34:f9:e9:a8:f6:98: bc:2c:7c:cf:c9:12:91:d2:1f:57:29:40:a5:a3:fa: 66:d9:4b:9f:5d:3c:56:ec:b6:3e:1a:e6:cc:ed:de: 6a:55:ef:85:17:13:ff:96:17:42:55:f8:b3:36:ed: 44:ba:c0:3c:d8:a9:5d:42:20:97:e9:c8:ad:14:95: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:AB:02:8A:E8:3C:58:B9:92:3D:72:8E:AE:32:91:86:E7:39:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/71f6927a-5330-3055-bdd7-8efe2c061e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:41:28:39:07:cc:a5:20:f3:df:fc:22:25:0e:cc:e0:aa:05: 41:aa:1d:24:59:d1:66:a9:fd:17:5d:d7:ca:eb:5b:b9:b7:0b: ca:7e:55:34:48:de:9e:64:97:ec:5b:95:be:98:f4:63:dc:4c: e3:d6:57:fb:9a:9b:fc:e1:3d:bf:0f:dc:3f:ad:26:96:22:be: 87:67:b9:8d:5d:11:24:07:77:f5:84:91:94:b7:ac:2b:ad:6a: 01:a6:3b:fa:8b:53:f7:e2:3b:bd:ab:c8:72:74:ad:a7:f7:11: 4b:1b:a6:43:90:db:d6:43:5b:f0:2e:c1:8f:72:51:83:09:45: e8:ec:4e:fb:95:b8:ae:af:6d:f5:53:b8:47:c1:0b:c4:9d:a8: 14:75:7b:a8:80:77:cd:bb:db:f0:8e:3f:c7:77:3c:22:1a:32: 9f:ad:70:55:68:86:b3:a7:90:22:85:19:57:08:71:b0:9c:f2: c1:ea:55:c4:57:40:85:41:f0:28:85:37:5a:a7:9a:f2:78:c9: 6d:30:57:58:56:e6:fe:85:03:3d:3a:59:ac:d9:5d:16:35:dd: 6f:0d:97:5a:21:0e:24:bd:bc:ce:e9:6e:01:6b:a4:eb:74:63: 9f:f3:0f:c1:89:40:1e:4f:bf:27:c2:bf:1c:55:9c:8d:8a:dc: 0d:81:5a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuLy/RGcyg5tVwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwN1oXDTI1MTAxMzIwMjcwN1owLzEtMCsGA1UEAxMk OGJjNDRkYzUtZGM2Ny00NjViLWJlZDYtNGQ0ZTU5YmRjOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm245GB2rQ+vFzm6bevktz7ihGfkk1dxMj0Fv DVSzSKyvspkiGWyyhns7nsEViiwryI+tcHTcmxioqC6IA60bGKn7XJZGQUSSAYHM cYHdZu8vLJm93cyk3nkMVWQbRQzYre4CjudVOeDvyFmW0IZ14fEQMGMiNvca/Szx zZoGMMaoYYJXelA/6qsZvFIj70QdyUiMvbBOQLZm7SvCTr8D1KkJi76C+keh0F51 cRnrUPtL0b8C7J3o1pMJXQo0+emo9pi8LHzPyRKR0h9XKUClo/pm2UufXTxW7LY+ GubM7d5qVe+FFxP/lhdCVfizNu1EusA82KldQiCX6citFJXeSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh8qwKK6DxYuZI9co6uMpGG5zkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNzFmNjkyN2EtNTMzMC0z MDU1LWJkZDctOGVmZTJjMDYxZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENBKDkHzKUg89/8IiUOzOCqBUGqHSRZ0Wap/Rdd18rrW7m3C8p+VTRI 3p5kl+xblb6Y9GPcTOPWV/uam/zhPb8P3D+tJpYivodnuY1dESQHd/WEkZS3rCut agGmO/qLU/fiO72ryHJ0raf3EUsbpkOQ29ZDW/AuwY9yUYMJRejsTvuVuK6vbfVT uEfBC8SdqBR1e6iAd8272/COP8d3PCIaMp+tcFVohrOnkCKFGVcIcbCc8sHqVcRX QIVB8CiFN1qnmvJ4yW0wV1hW5v6FAz06WazZXRY13W8Nl1ohDiS9vM7pbgFrpOt0 Y5/zD8GJQB5PvyfCvxxVnI2K3A2BWvE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:13:49 2025 by rpki-client