$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99a706f9-7891-3712-b04d-4752ce7fdf40.roa File: 99a706f9-7891-3712-b04d-4752ce7fdf40.roa (raw, json) Hash identifier: TYmr5f+L2PfSkvcMirzlX0MoOE0VQnhWOGfFcEWb8j8= Subject key identifier: 49:33:D2:A6:A6:15:8F:AD:A6:F8:60:34:59:04:C2:13:2A:C2:84:8F Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8BC74F88267E71A79F580 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99a706f9-7891-3712-b04d-4752ce7fdf40.roa Signing time: Tue 15 Jul 2025 20:27:07 +0000 ROA not before: Tue 15 Jul 2025 20:27:07 +0000 ROA not after: Mon 13 Oct 2025 20:27:07 +0000 asID: 44559 IP address blocks: 166.1.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:bc:74:f8:82:67:e7:1a:79:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:07 2025 GMT Not After : Oct 13 20:27:07 2025 GMT Subject: CN=ddf1f2a0-9370-467b-b7d0-9608a66ea6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:86:e8:5d:4a:69:6b:04:ee:be:16:ec:5f: 10:fd:ce:27:bd:3b:49:9e:21:dc:f7:5b:29:7c:1d: ac:4c:c0:69:42:1d:e5:f8:2b:71:e8:1c:e2:22:ad: 94:07:05:98:17:80:8b:38:e5:31:2f:f7:f4:e8:e8: 86:7b:39:c0:95:da:86:51:c8:03:55:ac:93:a6:17: 2a:b0:4c:7d:a8:8b:e4:71:6a:aa:ef:3d:c6:fb:3b: b4:13:d6:4a:50:7d:dc:69:f4:07:bb:fd:fc:dd:23: a6:0d:8c:7e:5c:5e:48:a7:a2:0a:04:85:43:2d:59: c3:ae:65:16:0e:11:6e:86:cb:42:ea:41:7d:7f:cf: 14:2b:9c:4b:82:38:4e:d2:83:c8:fb:8d:f6:7e:24: 03:67:78:54:3d:b7:55:a7:9f:3a:92:f7:64:77:9d: 2f:1e:24:7f:09:1f:bb:6e:47:5f:9a:fb:d7:1c:e5: 0b:32:de:f3:f7:f4:8d:f6:05:49:e3:09:36:5a:35: 96:5d:6b:d3:17:38:1a:93:6b:41:fb:81:de:94:86: f4:1f:ca:ed:97:ef:01:33:4a:7d:eb:9c:26:a2:38: 8b:a7:da:6d:87:f6:98:e2:5e:ec:c7:9e:f9:22:28: 71:c0:ab:00:5f:f8:2f:c8:cc:2d:a3:7d:10:a0:33: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:33:D2:A6:A6:15:8F:AD:A6:F8:60:34:59:04:C2:13:2A:C2:84:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/99a706f9-7891-3712-b04d-4752ce7fdf40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:8a:22:fb:cb:42:ad:91:8e:ee:be:45:bb:21:c0:5b:e9:7a: c1:68:69:2b:86:b5:2c:f3:b8:bf:a4:de:5a:8e:d2:0e:52:89: ea:5c:ff:fe:75:0a:20:ea:97:aa:66:94:d4:01:a0:d1:cf:9b: 36:c5:20:b3:8a:7f:0d:63:e4:ea:37:e6:23:b4:d8:53:9c:05: 2c:0e:a0:7b:47:dc:83:ba:78:aa:d2:ac:83:cc:3d:f4:16:b5: 45:a8:cc:8f:80:f8:d6:e5:59:9b:96:d3:e6:33:93:21:87:7a: 9b:74:1f:de:c9:51:86:bd:75:94:4c:11:08:3a:45:1c:73:f5: 0c:47:87:50:9e:b3:e3:56:ea:81:b4:60:a8:1a:ae:20:ad:22: aa:48:4f:7b:6c:5e:33:99:7e:69:48:64:72:25:3f:f1:4a:47: e4:38:24:bb:ae:ac:3d:94:ee:d6:09:58:94:cd:0a:d6:47:39: 63:a0:5e:07:d2:dc:16:7d:96:38:f8:b1:1a:91:66:54:ef:18: ef:47:e5:6b:81:ac:d5:ae:ba:e1:79:07:96:a9:ac:70:5f:58: cd:ef:3a:a7:5c:45:df:e1:62:58:af:03:81:58:f4:1a:32:88: e7:bf:61:6b:7e:eb:8b:f4:61:0b:b4:69:e7:9f:40:5f:51:c7: ee:35:f9:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuLx0+IJn5xp59YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwN1oXDTI1MTAxMzIwMjcwN1owLzEtMCsGA1UEAxMk ZGRmMWYyYTAtOTM3MC00NjdiLWI3ZDAtOTYwOGE2NmVhNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxCG6F1KaWsE7r4W7F8Q/c4nvTtJniHc91sp fB2sTMBpQh3l+Ctx6BziIq2UBwWYF4CLOOUxL/f06OiGeznAldqGUcgDVayTphcq sEx9qIvkcWqq7z3G+zu0E9ZKUH3cafQHu/383SOmDYx+XF5Ip6IKBIVDLVnDrmUW DhFuhstC6kF9f88UK5xLgjhO0oPI+432fiQDZ3hUPbdVp586kvdkd50vHiR/CR+7 bkdfmvvXHOULMt7z9/SN9gVJ4wk2WjWWXWvTFzgak2tB+4HelIb0H8rtl+8BM0p9 65wmojiLp9pth/aY4l7sx575IihxwKsAX/gvyMwto30QoDPVOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkz0qamFY+tpvhgNFkEwhMqwoSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTlhNzA2ZjktNzg5MS0z NzEyLWIwNGQtNDc1MmNlN2ZkZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaKIvvLQq2Rju6+RbshwFvpesFoaSuGtSzzuL+k3lqO0g5Siepc//51 CiDql6pmlNQBoNHPmzbFILOKfw1j5Oo35iO02FOcBSwOoHtH3IO6eKrSrIPMPfQW tUWozI+A+NblWZuW0+YzkyGHept0H97JUYa9dZRMEQg6RRxz9QxHh1Ces+NW6oG0 YKgariCtIqpIT3tsXjOZfmlIZHIlP/FKR+Q4JLuurD2U7tYJWJTNCtZHOWOgXgfS 3BZ9ljj4sRqRZlTvGO9H5WuBrNWuuuF5B5aprHBfWM3vOqdcRd/hYlivA4FY9Boy iOe/YWt+64v0YQu0aeefQF9Rx+41+Vo= -----END CERTIFICATE-----Generated at Mon Jul 21 08:40:51 2025 by rpki-client