$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/921b8ff8-7340-3d5f-8b4c-6f57e4db017f.roa File: 921b8ff8-7340-3d5f-8b4c-6f57e4db017f.roa (raw, json) Hash identifier: Few2xtksyLk7T6JtyMvywW1/KMvM2dUML861Yli4yU8= Subject key identifier: A5:20:8D:30:B6:7B:E1:B2:A4:0F:6A:21:EB:58:86:7C:2F:C6:BA:F3 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8C095860678859460B360 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/921b8ff8-7340-3d5f-8b4c-6f57e4db017f.roa Signing time: Tue 15 Jul 2025 20:27:09 +0000 ROA not before: Tue 15 Jul 2025 20:27:09 +0000 ROA not after: Mon 13 Oct 2025 20:27:09 +0000 asID: 44559 IP address blocks: 166.1.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:c0:95:86:06:78:85:94:60:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:09 2025 GMT Not After : Oct 13 20:27:09 2025 GMT Subject: CN=2fea9179-1827-47b4-8563-e57267713379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4a:8b:4f:c0:01:67:9a:ec:6f:4f:37:8c:07: 31:c3:65:f7:28:42:28:77:fd:97:d6:36:55:82:33: 84:6b:78:54:5f:73:bb:37:14:bc:92:37:28:59:2a: 37:81:36:6c:1b:dd:a3:95:f3:61:2c:2d:e5:2c:9c: dc:49:99:86:8f:41:2b:e0:31:66:55:3a:33:a1:85: 67:53:e3:c9:9d:be:87:08:48:28:ed:d4:80:be:e6: 42:a8:30:5f:d6:33:7e:60:5e:48:be:a4:5c:06:b2: bb:1c:1a:11:a8:5a:15:09:85:0f:87:8c:5e:d5:29: 04:4d:70:1d:02:41:70:ad:8b:ae:d7:03:8d:f2:64: 42:81:00:35:be:09:8f:a9:40:90:1a:f8:39:b9:28: 24:86:a7:04:a5:ec:50:06:f2:a8:33:70:b0:0c:13: f6:7a:a0:13:b4:d2:b5:b4:cf:5a:ca:67:28:86:57: 34:ba:6b:83:9e:90:d4:14:7b:9a:3b:47:75:83:18: 20:73:e8:a9:dc:3e:e6:40:f8:f0:30:3b:ec:15:82: 24:f5:41:94:2d:77:5c:a9:26:f6:73:99:e6:51:ab: 9a:f4:de:02:8f:39:21:e1:f9:62:c7:b8:8e:bf:c4: 8e:cc:a4:a9:58:e8:e7:48:63:95:63:8c:90:d9:bc: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:20:8D:30:B6:7B:E1:B2:A4:0F:6A:21:EB:58:86:7C:2F:C6:BA:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/921b8ff8-7340-3d5f-8b4c-6f57e4db017f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:31:d2:f0:bf:40:1b:d5:fd:42:99:d4:9b:cd:2d:99:7b:2e: 31:ab:57:80:3a:13:68:b2:28:5c:08:fa:87:4d:67:8e:73:41: 55:e2:86:0f:cc:8c:78:be:9c:b1:b9:27:1b:d3:1b:0c:4a:2f: 03:b7:70:dd:54:7e:8c:02:5e:66:9a:37:62:f5:8f:cc:1c:d3: 39:80:5f:74:bf:fe:fb:46:5f:71:e9:4a:af:34:d8:9d:02:1c: 2d:fc:61:76:1a:09:28:40:7b:29:b3:72:53:dd:8c:7c:5b:1f: e4:b1:e0:a1:ae:ab:b0:cb:a1:d5:9c:b6:e7:53:8f:64:38:b5: 6d:1b:b6:f0:db:76:4c:29:b4:29:01:ec:a2:c9:4d:f3:dc:19: 24:75:89:72:fa:ab:13:c1:28:f5:e3:80:91:48:29:9e:26:f4: 5d:bc:3f:e9:82:37:50:ef:59:83:fc:a3:e1:07:12:bf:7e:c2: de:6b:64:aa:de:b0:7d:0e:31:c1:45:49:01:1c:02:b7:d1:33: a2:4a:67:57:7e:32:f1:6f:61:e4:4a:e5:86:2e:5f:74:af:b3: f9:80:ab:6b:8a:67:bf:98:d9:cd:0e:b7:ca:96:d1:95:fd:9f: d9:f2:99:7f:e5:e5:c0:d7:7b:45:9c:0c:2b:eb:6a:24:38:1b: bf:0e:89:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuMCVhgZ4hZRgs2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwOVoXDTI1MTAxMzIwMjcwOVowLzEtMCsGA1UEAxMk MmZlYTkxNzktMTgyNy00N2I0LTg1NjMtZTU3MjY3NzEzMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUqLT8ABZ5rsb083jAcxw2X3KEIod/2X1jZV gjOEa3hUX3O7NxS8kjcoWSo3gTZsG92jlfNhLC3lLJzcSZmGj0Er4DFmVTozoYVn U+PJnb6HCEgo7dSAvuZCqDBf1jN+YF5IvqRcBrK7HBoRqFoVCYUPh4xe1SkETXAd AkFwrYuu1wON8mRCgQA1vgmPqUCQGvg5uSgkhqcEpexQBvKoM3CwDBP2eqATtNK1 tM9aymcohlc0umuDnpDUFHuaO0d1gxggc+ip3D7mQPjwMDvsFYIk9UGULXdcqSb2 c5nmUaua9N4Cjzkh4flix7iOv8SOzKSpWOjnSGOVY4yQ2bxVRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUgjTC2e+GypA9qIetYhnwvxrrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTIxYjhmZjgtNzM0MC0z ZDVmLThiNGMtNmY1N2U0ZGIwMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEx0vC/QBvV/UKZ1JvNLZl7LjGrV4A6E2iyKFwI+odNZ45zQVXihg/M jHi+nLG5JxvTGwxKLwO3cN1UfowCXmaaN2L1j8wc0zmAX3S//vtGX3HpSq802J0C HC38YXYaCShAeymzclPdjHxbH+Sx4KGuq7DLodWctudTj2Q4tW0btvDbdkwptCkB 7KLJTfPcGSR1iXL6qxPBKPXjgJFIKZ4m9F28P+mCN1DvWYP8o+EHEr9+wt5rZKre sH0OMcFFSQEcArfRM6JKZ1d+MvFvYeRK5YYuX3Svs/mAq2uKZ7+Y2c0Ot8qW0ZX9 n9nymX/l5cDXe0WcDCvraiQ4G78OiZ0= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:47 2025 by rpki-client