$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa File: 8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa (raw, json) Hash identifier: 2CY8SK4SeKltN8SZj3Ruc8HDy48Sjxd3DnggSe5LenE= Subject key identifier: DE:BC:A8:C3:F1:B8:05:50:26:D9:87:A8:1A:BF:A9:47:0E:3B:51:41 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A94D0DCD553E8D07AB41F0700 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 58061 IP address blocks: 166.1.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:dc:d5:53:e8:d0:7a:b4:1f:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=492d987c-c859-4a02-9b78-13d41865d973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0f:2b:0f:48:3b:68:68:7a:b5:52:f0:de:cc: a7:3b:d2:e9:33:bd:8f:2c:58:ad:45:e6:e2:49:b0: 9d:fe:b2:9d:e3:ba:44:d0:1f:56:28:fe:50:06:e0: 0e:47:0e:42:ff:bc:94:95:64:71:2a:f5:f0:e7:30: 8b:48:fd:3e:5e:67:a3:29:07:e9:b7:75:11:83:3c: 83:bb:1a:11:dc:1b:1e:61:17:e9:8f:a0:5f:40:8b: 56:3c:88:b6:2c:67:c1:26:ee:53:80:72:01:46:8d: 1f:82:7d:49:14:5c:d7:97:9d:56:dd:33:66:e0:72: be:56:3b:89:8c:92:a5:4c:5c:86:85:6e:ae:fc:d3: e0:e9:18:9d:e3:e7:f6:83:cb:fe:7b:46:b5:79:25: ce:e9:04:88:a5:55:0c:93:4a:fd:d3:89:65:dc:4f: 84:9a:22:ac:2f:79:4f:98:53:ec:82:e5:e2:2d:d8: f2:78:0e:01:fb:30:b7:b5:b2:35:48:79:5e:82:43: 59:39:ec:42:80:05:76:0d:30:1c:80:df:f7:4c:a9: 6c:35:71:e7:bc:47:0b:06:2f:48:a5:22:b3:dc:0c: d7:eb:0d:76:8d:87:02:70:f0:52:26:ee:27:ba:0f: aa:6e:0d:fa:21:8a:79:ce:ff:fd:ea:8c:60:64:02: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BC:A8:C3:F1:B8:05:50:26:D9:87:A8:1A:BF:A9:47:0E:3B:51:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8f1ee71c-f8d7-373a-a07c-07aa43551a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3c:d3:fd:60:77:68:a9:a4:6e:6b:8f:4c:f4:70:84:e4:3d: 6c:98:06:1b:9d:35:ba:d2:39:b3:b5:10:a1:29:70:53:0a:ac: c7:b3:a6:a2:bc:66:12:6c:7c:e5:be:23:8e:f1:ad:dd:cb:02: 44:00:06:5b:13:57:1a:3d:ae:1c:43:74:85:b6:da:83:50:9a: 94:db:f2:ee:56:5b:90:d2:c1:4e:1a:b4:52:c5:52:8d:75:f6: c4:6d:e7:f2:c2:c3:72:7c:1f:f5:cd:35:ea:1f:13:10:6b:9a: d2:03:bb:f3:81:b4:64:da:1a:00:98:91:f1:f0:d9:38:22:9e: e5:01:10:82:8c:ca:39:b4:70:c1:f2:80:70:9f:44:54:08:90: 3b:83:8e:79:4d:51:8c:fa:71:08:b2:4b:5b:7c:b5:c4:b1:f9: 77:31:52:e5:a6:dc:1d:f8:da:21:f0:31:32:31:d7:bd:17:80: cd:cf:50:87:a7:75:ea:ba:44:02:75:14:c5:60:f5:2b:68:11: ef:cd:02:5e:ac:c9:3e:f6:89:6f:ff:6a:08:3d:65:dd:d7:08: 8b:61:cf:d6:03:70:21:8c:9b:41:e8:11:e3:c7:b9:54:25:20: cf:88:90:df:d8:fd:ea:7b:6f:5f:70:aa:25:0d:8f:1e:dd:0f: 2d:ce:f8:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NzVU+jQerQfBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk NDkyZDk4N2MtYzg1OS00YTAyLTliNzgtMTNkNDE4NjVkOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg8rD0g7aGh6tVLw3synO9LpM72PLFitRebi SbCd/rKd47pE0B9WKP5QBuAORw5C/7yUlWRxKvXw5zCLSP0+XmejKQfpt3URgzyD uxoR3BseYRfpj6BfQItWPIi2LGfBJu5TgHIBRo0fgn1JFFzXl51W3TNm4HK+VjuJ jJKlTFyGhW6u/NPg6Rid4+f2g8v+e0a1eSXO6QSIpVUMk0r904ll3E+EmiKsL3lP mFPsguXiLdjyeA4B+zC3tbI1SHlegkNZOexCgAV2DTAcgN/3TKlsNXHnvEcLBi9I pSKz3AzX6w12jYcCcPBSJu4nug+qbg36IYp5zv/96oxgZAI64QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN68qMPxuAVQJtmHqBq/qUcOO1FBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGYxZWU3MWMtZjhkNy0z NzNhLWEwN2MtMDdhYTQzNTUxYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc80/1gd2ippG5rj0z0cITkPWyYBhudNbrSObO1EKEpcFMKrMezpqK8 ZhJsfOW+I47xrd3LAkQABlsTVxo9rhxDdIW22oNQmpTb8u5WW5DSwU4atFLFUo11 9sRt5/LCw3J8H/XNNeofExBrmtIDu/OBtGTaGgCYkfHw2TginuUBEIKMyjm0cMHy gHCfRFQIkDuDjnlNUYz6cQiyS1t8tcSx+XcxUuWm3B342iHwMTIx170XgM3PUIen deq6RAJ1FMVg9StoEe/NAl6syT72iW//agg9Zd3XCIthz9YDcCGMm0HoEePHuVQl IM+IkN/Y/ep7b19wqiUNjx7dDy3O+K0= -----END CERTIFICATE-----Generated at Wed Jul 23 12:24:24 2025 by rpki-client