$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be591f76-1d36-3417-b319-8895e74b7ce5.roa File: be591f76-1d36-3417-b319-8895e74b7ce5.roa (raw, json) Hash identifier: pPDD6ZEd8DC29LG4PXKfMm/o34lpJcaOvpaDBaRZ+Vc= Subject key identifier: 85:01:31:38:8A:DA:1D:1B:2B:02:98:7A:CE:9F:72:C5:58:68:5C:0D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8BBD0B9C01AAD092AFB40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be591f76-1d36-3417-b319-8895e74b7ce5.roa Signing time: Tue 15 Jul 2025 20:27:06 +0000 ROA not before: Tue 15 Jul 2025 20:27:06 +0000 ROA not after: Mon 13 Oct 2025 20:27:06 +0000 asID: 44559 IP address blocks: 166.1.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:bb:d0:b9:c0:1a:ad:09:2a:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:06 2025 GMT Not After : Oct 13 20:27:06 2025 GMT Subject: CN=9702c30c-a6f5-4b34-b302-c7fdd40b0041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:ed:7b:18:83:af:c0:76:de:c9:d1:1d:86: 68:c1:45:73:f0:d7:94:27:8b:02:57:3b:35:08:20: 3b:a0:e2:57:dd:8c:01:ac:7c:91:93:60:5e:eb:51: 45:aa:9c:5f:88:71:5c:19:31:52:d5:84:62:58:8d: e7:db:aa:92:05:e9:e1:ec:bd:30:7e:9f:b7:4c:2a: 93:da:b0:55:3b:ce:01:dd:7c:39:6b:b9:01:b3:bb: 41:d8:12:83:15:ff:2d:54:c2:6c:da:30:7b:2a:7e: 1e:ad:64:62:17:ea:7c:00:c2:3c:21:f6:b4:09:af: b2:c5:72:aa:c4:40:47:ca:2b:90:f6:38:74:92:fa: 22:63:02:3d:ec:8c:d9:cb:f7:2f:42:bb:79:ea:64: 4f:e5:9c:0e:17:a3:09:ce:23:67:6d:db:1b:93:1c: 0b:0f:fb:6a:ea:1e:32:03:3f:23:36:9a:fa:cc:28: 8f:05:b2:cd:c1:86:b0:53:5a:a9:a5:d7:92:2c:1c: e5:1c:67:73:0b:bc:c7:65:34:c4:82:96:f5:57:05: 23:e7:a0:2a:e7:74:02:87:4a:8d:41:32:99:b0:c7: c9:d6:05:e8:53:52:b6:ca:9a:aa:02:59:a4:3c:0e: de:50:58:00:fd:6f:b9:5b:42:fd:37:95:8d:86:44: 66:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:31:38:8A:DA:1D:1B:2B:02:98:7A:CE:9F:72:C5:58:68:5C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/be591f76-1d36-3417-b319-8895e74b7ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:57:f4:38:fa:3a:02:b7:de:63:5f:4c:84:fb:a6:07:93:2e: b3:c9:48:43:ee:9a:be:d6:f6:45:55:87:d5:2d:45:03:1f:34: 10:16:50:95:df:20:88:e8:a3:ae:0b:ea:08:43:64:e0:fa:08: 8c:4f:7e:e5:e7:54:23:f1:b3:61:a4:2e:ca:b2:12:76:d9:7b: aa:55:07:69:66:28:33:cd:b6:4b:76:3f:b7:20:52:18:03:8d: 11:73:0d:ca:fd:f3:3d:cf:26:2b:82:1b:24:5a:05:20:e9:4f: 01:5c:f1:f7:07:0d:35:d3:31:33:fd:46:77:41:5b:d8:2d:52: 95:e5:0e:da:32:96:88:04:63:8f:cc:d1:61:d7:8a:f0:4f:e0: 3f:88:4e:f8:e8:53:95:1e:5a:a1:71:ac:c7:b7:ce:e1:8c:89: b6:3d:6f:d3:06:78:a1:e6:82:9a:08:36:20:ff:8a:72:dc:d8: 91:a3:2e:53:31:f4:50:42:77:7e:4e:36:e7:36:78:b8:bb:0e: d6:c0:d9:cc:2f:02:c0:b4:d7:9c:2b:2f:0a:d2:fe:30:71:14: 1e:af:12:5c:1f:bb:84:2c:4d:57:6b:82:a8:be:54:9f:28:81: 10:75:f3:2e:76:18:21:05:6f:50:35:a9:71:36:bd:af:63:11: 99:7c:91:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuLvQucAarQkq+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwNloXDTI1MTAxMzIwMjcwNlowLzEtMCsGA1UEAxMk OTcwMmMzMGMtYTZmNS00YjM0LWIzMDItYzdmZGQ0MGIwMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgftexiDr8B23snRHYZowUVz8NeUJ4sCVzs1 CCA7oOJX3YwBrHyRk2Be61FFqpxfiHFcGTFS1YRiWI3n26qSBenh7L0wfp+3TCqT 2rBVO84B3Xw5a7kBs7tB2BKDFf8tVMJs2jB7Kn4erWRiF+p8AMI8Ifa0Ca+yxXKq xEBHyiuQ9jh0kvoiYwI97IzZy/cvQrt56mRP5ZwOF6MJziNnbdsbkxwLD/tq6h4y Az8jNpr6zCiPBbLNwYawU1qppdeSLBzlHGdzC7zHZTTEgpb1VwUj56Aq53QCh0qN QTKZsMfJ1gXoU1K2ypqqAlmkPA7eUFgA/W+5W0L9N5WNhkRmEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUBMTiK2h0bKwKYes6fcsVYaFwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmU1OTFmNzYtMWQzNi0z NDE3LWIzMTktODg5NWU3NGI3Y2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1X9Dj6OgK33mNfTIT7pgeTLrPJSEPumr7W9kVVh9UtRQMfNBAWUJXf IIjoo64L6ghDZOD6CIxPfuXnVCPxs2GkLsqyEnbZe6pVB2lmKDPNtkt2P7cgUhgD jRFzDcr98z3PJiuCGyRaBSDpTwFc8fcHDTXTMTP9RndBW9gtUpXlDtoylogEY4/M 0WHXivBP4D+ITvjoU5UeWqFxrMe3zuGMibY9b9MGeKHmgpoINiD/inLc2JGjLlMx 9FBCd35ONuc2eLi7DtbA2cwvAsC015wrLwrS/jBxFB6vElwfu4QsTVdrgqi+VJ8o gRB18y52GCEFb1A1qXE2va9jEZl8kYM= -----END CERTIFICATE-----Generated at Mon Jul 21 08:35:40 2025 by rpki-client