$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d13f8e7c-4eea-3408-8aca-c9b857b887c9.roa File: d13f8e7c-4eea-3408-8aca-c9b857b887c9.roa (raw, json) Hash identifier: 1aM1LMEWsvUBD5xpG6yndEm50zfxGFW7U9nHZK+cFeA= Subject key identifier: 4B:F7:B7:EC:37:E5:C3:98:07:BE:5C:7A:B4:E4:26:E8:43:0C:52:FD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A87B8BCB09FDAD210344EAC80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d13f8e7c-4eea-3408-8aca-c9b857b887c9.roa Signing time: Tue 15 Jul 2025 20:27:07 +0000 ROA not before: Tue 15 Jul 2025 20:27:07 +0000 ROA not after: Mon 13 Oct 2025 20:27:07 +0000 asID: 44559 IP address blocks: 166.1.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:bc:b0:9f:da:d2:10:34:4e:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 15 20:27:07 2025 GMT Not After : Oct 13 20:27:07 2025 GMT Subject: CN=c02196de-7c3e-4567-8722-2284febd9ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:1c:22:12:78:bb:3b:6e:9b:d7:15:4f:6b: 0d:ad:95:66:6e:3d:c1:f2:a3:44:72:53:23:0d:ee: 23:e0:ea:b4:7b:e7:c2:7e:05:98:8a:7b:a8:f7:cf: 25:54:6b:ca:45:69:87:c8:5b:a7:f2:e1:b6:f2:0d: ca:31:19:01:98:d3:77:93:56:ed:bd:64:54:eb:61: 6e:0b:d1:1b:97:0e:ca:65:ff:0d:a2:6c:e5:67:69: 61:8c:ca:96:b8:ed:d2:fa:b1:48:3a:6f:93:4a:4c: f0:ea:b1:6c:91:f5:8c:0f:58:75:95:3f:fb:0a:4c: ea:ad:ce:8d:e8:87:84:37:16:44:bf:20:08:71:f4: 02:f8:4e:b4:28:a7:2c:66:ab:3b:c0:1b:e7:2a:cc: 4f:46:73:0f:07:99:1c:95:8e:bd:c9:29:5d:dd:4b: af:35:41:d6:e3:73:38:4a:54:20:eb:b6:1f:9a:91: 1a:62:da:d9:63:16:50:7d:36:ea:1c:f9:04:a2:0d: d1:d9:cc:bb:ef:b3:64:8e:77:9d:59:54:21:97:74: e2:5c:a0:20:90:3c:c8:2b:18:d4:f5:77:84:af:16: 7a:b7:62:f7:76:63:27:fc:0d:90:e5:cd:58:ca:ce: 0e:b5:d2:be:36:c6:d8:49:fe:3d:04:d6:6c:1c:a5: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F7:B7:EC:37:E5:C3:98:07:BE:5C:7A:B4:E4:26:E8:43:0C:52:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d13f8e7c-4eea-3408-8aca-c9b857b887c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b0:53:0b:ea:12:c6:76:3a:b1:45:34:86:e5:c7:97:3f:cd: 56:f2:82:dc:72:1c:22:62:5a:4a:51:28:31:a8:b8:b0:11:fe: ac:76:4c:01:0d:f2:6c:0e:b4:35:a2:3d:86:28:e4:6d:29:f6: 86:2a:c0:f5:06:b1:dc:14:63:15:c2:54:d6:23:ed:f2:b9:83: d1:ca:54:6a:b5:91:3b:a5:aa:ae:8b:8a:62:55:02:76:a3:e1: 1f:68:f1:a4:cf:0e:04:43:f1:be:8d:76:78:f1:97:c7:87:b3: 7e:31:c9:cc:66:98:5c:4c:60:16:35:15:bb:56:38:d9:e7:da: 04:6e:bc:a2:28:8c:3e:91:46:45:d9:4e:fb:f9:5f:36:a1:84: 73:20:dd:50:49:d9:11:99:22:09:c3:1f:90:19:18:07:bf:1f: c6:d2:31:8f:77:6e:f7:6a:fa:75:ee:8d:b7:2e:91:1e:80:ca: d5:c5:6a:7f:ae:7c:d1:54:59:b8:fa:ba:0e:cf:0f:d5:6b:0b: df:63:1a:8a:14:f0:cc:7d:2d:68:34:55:19:1c:3a:6d:26:a6: 22:72:62:e4:bc:23:e7:77:fa:df:f8:fd:36:d3:29:e0:b9:74: fe:97:47:0d:dd:7a:7e:b0:af:cd:25:6d:24:6b:f4:96:97:5c: 8f:f3:82:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuLywn9rSEDROrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcxNTIwMjcwN1oXDTI1MTAxMzIwMjcwN1owLzEtMCsGA1UEAxMk YzAyMTk2ZGUtN2MzZS00NTY3LTg3MjItMjI4NGZlYmQ5ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl4cIhJ4uztum9cVT2sNrZVmbj3B8qNEclMj De4j4Oq0e+fCfgWYinuo988lVGvKRWmHyFun8uG28g3KMRkBmNN3k1btvWRU62Fu C9Eblw7KZf8NomzlZ2lhjMqWuO3S+rFIOm+TSkzw6rFskfWMD1h1lT/7Ckzqrc6N 6IeENxZEvyAIcfQC+E60KKcsZqs7wBvnKsxPRnMPB5kclY69ySld3UuvNUHW43M4 SlQg67YfmpEaYtrZYxZQfTbqHPkEog3R2cy777NkjnedWVQhl3TiXKAgkDzIKxjU 9XeErxZ6t2L3dmMn/A2Q5c1Yys4OtdK+NsbYSf49BNZsHKWAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv3t+w35cOYB75cerTkJuhDDFL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDEzZjhlN2MtNGVlYS0z NDA4LThhY2EtYzliODU3Yjg4N2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKawUwvqEsZ2OrFFNIblx5c/zVbygtxyHCJiWkpRKDGouLAR/qx2TAEN 8mwOtDWiPYYo5G0p9oYqwPUGsdwUYxXCVNYj7fK5g9HKVGq1kTulqq6LimJVAnaj 4R9o8aTPDgRD8b6Ndnjxl8eHs34xycxmmFxMYBY1FbtWONnn2gRuvKIojD6RRkXZ Tvv5XzahhHMg3VBJ2RGZIgnDH5AZGAe/H8bSMY93bvdq+nXujbcukR6AytXFan+u fNFUWbj6ug7PD9VrC99jGooU8Mx9LWg0VRkcOm0mpiJyYuS8I+d3+t/4/TbTKeC5 dP6XRw3den6wr80lbSRr9JaXXI/zgss= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:19 2025 by rpki-client