$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c33b4c7-c9e6-31d5-94a6-4e56206ec20e.roa File: 1c33b4c7-c9e6-31d5-94a6-4e56206ec20e.roa (raw, json) Hash identifier: aEvr+yud0US7DVWw+wKTj2Y74W+TUM1kvQ6PpZokKeg= Subject key identifier: 2B:C8:E3:C0:95:FF:D7:DA:36:C3:39:A7:F5:AF:90:29:34:A8:F6:99 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B2066DF185F946189276F9C80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c33b4c7-c9e6-31d5-94a6-4e56206ec20e.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 207645 IP address blocks: 166.1.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:df:18:5f:94:61:89:27:6f:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=e3a95a0f-9433-4d98-9724-360d3a6335c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a3:50:51:8a:b4:15:c2:58:41:af:a9:48:b0: 84:20:66:b4:62:d6:45:fa:c0:1d:75:5e:e8:79:b0: 56:61:5f:d2:a3:8e:fa:63:33:6f:e1:ad:cd:7c:42: 49:7a:52:d4:53:ed:40:33:79:8a:b3:d5:76:62:42: d0:a8:7e:ac:fa:5a:b3:d9:b5:8c:99:0b:c7:9a:ec: 4a:1f:7e:f1:62:93:d7:3a:6f:a3:2d:01:d3:30:21: b1:56:0e:95:45:38:6d:0d:d2:02:0e:00:2a:32:f8: 30:c1:56:90:c5:3d:15:cd:04:7a:31:db:a3:91:1b: ff:d6:71:75:d1:11:fe:cb:71:0b:e3:c3:72:3d:cc: 3b:72:2a:57:38:f2:d8:65:1b:8e:0c:f1:ed:31:c7: 05:32:7a:5d:4c:2a:4a:72:7a:25:95:16:11:7e:8e: f1:b7:63:94:13:49:7d:4f:b9:b5:40:3a:43:89:1a: 08:26:f1:8f:70:e1:5e:d8:dd:b5:b8:15:91:fb:61: a2:63:fa:6b:e0:59:b7:96:57:9b:59:bc:23:bc:b5: 1d:4c:54:f5:cd:eb:02:1e:e7:21:de:c6:08:76:04: de:31:8e:ff:60:b2:ff:3b:a7:b1:53:ea:85:39:7c: c6:59:a7:64:ef:19:d9:d6:12:b6:52:3f:38:9f:74: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C8:E3:C0:95:FF:D7:DA:36:C3:39:A7:F5:AF:90:29:34:A8:F6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c33b4c7-c9e6-31d5-94a6-4e56206ec20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:68:50:fb:2b:c0:83:bc:1e:2c:d9:5d:6c:60:5e:64:03:2b: a7:de:99:9a:86:ed:fb:1a:5c:b5:77:a2:58:7f:2c:b9:b6:55: f4:fb:ea:bc:73:7b:2f:4b:fd:7a:7f:25:26:8b:8f:57:32:0e: 73:8f:50:8e:57:70:1a:42:72:83:07:f0:81:2d:3c:3e:7a:16: 37:68:ee:72:07:a3:76:21:b8:b9:c5:f6:40:33:12:db:a5:40: 9d:43:34:7c:e2:eb:7b:8c:2a:5a:db:1e:ab:75:4f:b8:4a:74: 1c:a6:b2:82:37:bf:b8:fb:fc:29:43:65:07:1a:50:fc:80:b9: d6:06:f4:d1:ce:4e:df:bc:74:99:f2:a0:65:e4:59:1c:e9:a6: ba:61:79:e8:e1:91:1d:da:2b:51:6e:23:db:14:98:3c:8a:c1: aa:05:22:78:f9:87:13:d2:e5:3e:e5:6e:f8:a0:ee:75:65:5c: ad:40:99:73:cd:88:67:9a:24:c4:29:c5:c3:14:55:35:3f:fc: 95:4a:be:79:66:3b:75:b4:c0:9a:93:cf:f7:37:46:e3:ae:cc: bb:14:b3:82:80:30:c2:5b:d5:82:6e:0b:0c:81:2e:98:36:1a: f5:b5:6a:c5:16:df:5d:72:9a:f8:81:da:6f:69:98:34:47:f1: a3:64:1a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZt8YX5RhiSdvnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTNhOTVhMGYtOTQzMy00ZDk4LTk3MjQtMzYwZDNhNjMzNWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaNQUYq0FcJYQa+pSLCEIGa0YtZF+sAddV7o ebBWYV/So476YzNv4a3NfEJJelLUU+1AM3mKs9V2YkLQqH6s+lqz2bWMmQvHmuxK H37xYpPXOm+jLQHTMCGxVg6VRThtDdICDgAqMvgwwVaQxT0VzQR6MdujkRv/1nF1 0RH+y3EL48NyPcw7cipXOPLYZRuODPHtMccFMnpdTCpKcnollRYRfo7xt2OUE0l9 T7m1QDpDiRoIJvGPcOFe2N21uBWR+2GiY/pr4Fm3llebWbwjvLUdTFT1zesCHuch 3sYIdgTeMY7/YLL/O6exU+qFOXzGWadk7xnZ1hK2Uj84n3QkQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvI48CV/9faNsM5p/WvkCk0qPaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMWMzM2I0YzctYzllNi0z MWQ1LTk0YTYtNGU1NjIwNmVjMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpgF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5oUPsrwIO8HizZXWxgXmQDK6femZqG7fsaXLV3olh/LLm2VfT76rxz ey9L/Xp/JSaLj1cyDnOPUI5XcBpCcoMH8IEtPD56Fjdo7nIHo3YhuLnF9kAzEtul QJ1DNHzi63uMKlrbHqt1T7hKdBymsoI3v7j7/ClDZQcaUPyAudYG9NHOTt+8dJny oGXkWRzpprpheejhkR3aK1FuI9sUmDyKwaoFInj5hxPS5T7lbvig7nVlXK1AmXPN iGeaJMQpxcMUVTU//JVKvnlmO3W0wJqTz/c3RuOuzLsUs4KAMMJb1YJuCwyBLpg2 GvW1asUW311ymviB2m9pmDRH8aNkGsE= -----END CERTIFICATE-----Generated at Thu Oct 16 12:35:28 2025 by rpki-client