$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d36a67b-c86d-3cf4-a48b-e434de06f68b.roa File: 9d36a67b-c86d-3cf4-a48b-e434de06f68b.roa (raw, json) Hash identifier: sZIfYGeaG2ux2nr7+oIq+nHzjZVv3hdD85YBtl+lzEc= Subject key identifier: 3A:3F:24:10:0B:BC:5B:F9:3D:CA:68:56:20:C9:DC:BE:92:EA:92:9C Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8BEF5382F980434570180 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d36a67b-c86d-3cf4-a48b-e434de06f68b.roa Signing time: Tue 15 Jul 2025 20:27:08 +0000 ROA not before: Tue 15 Jul 2025 20:27:08 +0000 ROA not after: Mon 13 Oct 2025 20:27:08 +0000 asID: 44559 IP address blocks: 166.1.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:be:f5:38:2f:98:04:34:57:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:08 2025 GMT Not After : Oct 13 20:27:08 2025 GMT Subject: CN=1fa770bb-9860-4a64-9097-389dd4f454cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:20:33:4d:73:b4:39:4d:cd:76:47:01:d7: b4:df:04:0f:2e:6d:95:5a:47:ce:55:f0:67:b4:91: 7c:21:f1:4e:15:d5:86:4e:f7:32:0e:b1:e4:2b:20: f0:7a:25:4a:d7:f2:ca:bb:fe:ea:6a:b4:87:ae:41: 7d:bd:b0:32:b7:f7:a0:26:43:d8:4a:c7:b1:00:c3: 46:c3:dd:b4:fb:7d:37:1a:2a:31:dc:6f:65:b7:e6: ff:ad:b9:57:26:44:c6:c6:2b:3f:e8:bc:c9:7e:ed: 80:77:00:19:8f:a5:c1:f2:99:dc:64:e6:76:a8:2f: 5f:86:2d:cc:c3:17:c8:68:92:1e:b9:c7:71:94:0f: a5:37:5e:ca:3e:c1:79:ac:ce:99:9c:86:af:0a:f7: e3:24:ee:01:e8:b3:2b:21:17:62:b7:50:42:f9:f3: 5b:ad:57:cd:ec:3d:ac:88:60:e6:fc:9c:26:d0:17: 20:c7:ce:24:c7:1e:d8:3e:bd:88:be:34:bc:0d:41: 37:0d:fe:a5:85:9f:a9:a0:08:00:8d:2a:75:f4:26: a2:76:d1:d7:49:8c:41:7d:d8:9c:71:92:32:a2:4e: 2f:25:8a:4a:64:67:bb:10:52:95:63:e8:0a:5a:d5: c8:d1:2f:4d:37:40:54:a8:4c:b5:ba:1d:e7:7b:dc: 4e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3F:24:10:0B:BC:5B:F9:3D:CA:68:56:20:C9:DC:BE:92:EA:92:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d36a67b-c86d-3cf4-a48b-e434de06f68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:24:96:34:30:36:25:e6:93:8d:c5:27:ee:f6:3e:21:ba:11: 33:2a:4a:39:30:c2:a8:3f:12:81:44:54:79:86:6d:3f:8c:aa: 7b:f9:42:70:62:1e:73:ce:ad:ff:e9:c7:7c:f5:82:96:76:9a: 0d:70:af:4f:3a:ab:25:9b:e7:85:b0:2c:87:b3:1b:35:cb:87: 5d:55:f7:e6:a6:6a:f5:f9:dc:2a:cf:80:11:26:88:3f:58:c6: 86:2b:40:b0:d4:cb:3f:b5:fa:5e:1c:2e:4c:63:74:36:73:19: 89:d6:39:d9:0c:e9:ea:90:0a:8b:ae:10:ba:1a:fe:5e:82:03: c8:61:37:94:42:3f:23:1d:3e:28:ba:9f:c6:da:76:1d:39:87: 6b:36:d5:2d:f5:b4:12:5a:a2:3a:9f:e9:bf:03:a9:15:75:8c: c0:bb:6c:d6:02:d7:d9:b4:81:8c:4d:ce:f1:53:53:b3:f9:85: dd:86:72:cc:69:92:5a:18:e5:bb:32:da:47:3e:6a:08:21:2b: 3c:da:59:2b:62:1e:58:0f:84:89:cc:10:88:f7:ed:da:b9:28: 5b:4b:26:f4:c6:38:e3:ef:97:6f:8a:d9:ed:e1:cf:6f:46:ce: ee:74:64:56:b4:a1:d2:70:5f:fb:cf:a4:df:52:ea:63:c1:9c: 0d:9d:b0:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuL71OC+YBDRXAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwOFoXDTI1MTAxMzIwMjcwOFowLzEtMCsGA1UEAxMk MWZhNzcwYmItOTg2MC00YTY0LTkwOTctMzg5ZGQ0ZjQ1NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QIgM01ztDlNzXZHAde03wQPLm2VWkfOVfBn tJF8IfFOFdWGTvcyDrHkKyDweiVK1/LKu/7qarSHrkF9vbAyt/egJkPYSsexAMNG w920+303Giox3G9lt+b/rblXJkTGxis/6LzJfu2AdwAZj6XB8pncZOZ2qC9fhi3M wxfIaJIeucdxlA+lN17KPsF5rM6ZnIavCvfjJO4B6LMrIRdit1BC+fNbrVfN7D2s iGDm/Jwm0Bcgx84kxx7YPr2IvjS8DUE3Df6lhZ+poAgAjSp19CaidtHXSYxBfdic cZIyok4vJYpKZGe7EFKVY+gKWtXI0S9NN0BUqEy1uh3ne9xOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo/JBALvFv5PcpoViDJ3L6S6pKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOWQzNmE2N2ItYzg2ZC0z Y2Y0LWE0OGItZTQzNGRlMDZmNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8kljQwNiXmk43FJ+72PiG6ETMqSjkwwqg/EoFEVHmGbT+Mqnv5QnBi HnPOrf/px3z1gpZ2mg1wr086qyWb54WwLIezGzXLh11V9+amavX53CrPgBEmiD9Y xoYrQLDUyz+1+l4cLkxjdDZzGYnWOdkM6eqQCouuELoa/l6CA8hhN5RCPyMdPii6 n8badh05h2s21S31tBJaojqf6b8DqRV1jMC7bNYC19m0gYxNzvFTU7P5hd2Gcsxp kloY5bsy2kc+agghKzzaWStiHlgPhInMEIj37dq5KFtLJvTGOOPvl2+K2e3hz29G zu50ZFa0odJwX/vPpN9S6mPBnA2dsGY= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:12 2025 by rpki-client