$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f02b614-8658-3316-8670-41f8aeca3f68.roa File: 4f02b614-8658-3316-8670-41f8aeca3f68.roa (raw, json) Hash identifier: 7BeEE/c8tCLllKmrflXvl+9KiipJYDi/NNXfgd+WUjs= Subject key identifier: 2E:BA:54:CF:B2:50:B8:56:3E:47:D8:48:81:37:50:C6:77:E0:1E:A5 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B5E910B6FD148AB1DE24DF880 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f02b614-8658-3316-8670-41f8aeca3f68.roa Signing time: Tue 30 Sep 2025 19:25:56 +0000 ROA not before: Tue 30 Sep 2025 19:25:56 +0000 ROA not after: Mon 29 Dec 2025 20:25:56 +0000 asID: 401152 IP address blocks: 166.1.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:91:0b:6f:d1:48:ab:1d:e2:4d:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 30 19:25:56 2025 GMT Not After : Dec 29 20:25:56 2025 GMT Subject: CN=b2cc5ef2-468b-4f4d-b00d-e6743adf8b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:16:d5:59:91:05:4e:df:b2:4f:a4:45:a6: 1d:ba:7f:ed:e3:25:a1:f8:e7:c0:50:29:a3:74:bf: 8c:b0:03:d8:0e:43:82:0d:cc:ec:ed:15:70:da:bf: cd:98:6b:f0:42:80:5f:fd:2d:41:01:79:14:2d:cd: 55:65:4a:05:d2:9e:1a:1f:d9:e9:a7:4e:10:fa:b7: 9e:94:ac:2a:b8:b3:48:6e:c2:05:00:ce:40:98:63: b1:99:50:95:87:0c:c0:e6:4d:35:8b:83:30:cd:4c: 94:0a:b7:f3:0c:7a:25:17:8d:89:f0:02:e7:fc:05: c1:49:54:28:83:14:b5:bb:9b:85:67:8e:06:dc:70: 88:e1:9b:af:77:43:c0:e9:99:8c:1d:dd:2f:e0:36: 55:95:bd:2a:b0:1d:d3:4b:3c:7e:5b:cf:d2:5d:49: 74:cd:e9:66:26:fe:85:3f:11:9d:38:5e:22:86:d4: 0e:85:8e:ca:9a:4b:12:d1:ce:41:a6:ca:d9:ca:c5: 84:f8:a5:8a:39:86:ab:ad:a6:9e:67:e4:eb:73:0b: 1a:54:ca:0a:f0:16:7a:e5:56:71:a7:d8:09:2b:99: 18:79:ad:09:8a:f1:21:59:81:5b:90:27:76:96:79: 5d:69:2e:20:e9:70:d1:c0:80:cf:60:18:9c:a5:7b: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BA:54:CF:B2:50:B8:56:3E:47:D8:48:81:37:50:C6:77:E0:1E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4f02b614-8658-3316-8670-41f8aeca3f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6d:ef:32:a6:c0:18:7b:e7:7f:31:9d:19:b5:4d:aa:94:8a: 22:83:9f:9e:47:19:fc:9c:e7:bf:85:5d:f6:be:48:e2:55:cc: ca:76:e9:21:f9:d5:ba:e0:4d:79:4a:26:48:17:4e:54:d3:c0: b1:62:cf:df:57:44:31:a8:e2:2a:3d:e1:48:65:d0:3b:e5:d0: 56:b2:ed:8f:5e:8b:96:e9:03:61:d7:2a:88:98:37:83:4b:a0: 42:fc:78:37:16:0b:13:53:f2:22:52:f8:da:92:43:e1:af:97: e4:cb:dc:62:df:ca:00:84:a4:b5:d6:a8:8e:c6:84:ae:41:59: a8:51:84:92:b9:3e:ba:25:5c:2c:97:37:a4:3a:11:26:14:b8: 1d:a1:a1:75:07:3b:a1:a1:21:78:16:1f:4e:7e:e4:41:c0:b5: 81:3c:51:fb:99:a7:cf:62:e1:b1:18:06:5b:e1:73:86:02:73: 36:fd:c9:e1:53:73:d2:6d:af:98:72:93:6f:67:09:5a:83:b4: 65:89:54:8c:f0:98:7f:3a:ff:80:82:71:9c:3a:1f:5e:9f:07: df:0d:31:04:14:9e:28:6a:2a:16:b5:f8:f9:13:a1:a1:2b:49: 82:fb:cb:2b:30:6b:5f:d7:08:de:19:60:13:60:24:a7:42:2d: b0:cb:76:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtekQtv0UirHeJN+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDkzMDE5MjU1NloXDTI1MTIyOTIwMjU1NlowLzEtMCsGA1UEAxMk YjJjYzVlZjItNDY4Yi00ZjRkLWIwMGQtZTY3NDNhZGY4YjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqoW1VmRBU7fsk+kRaYdun/t4yWh+OfAUCmj dL+MsAPYDkOCDczs7RVw2r/NmGvwQoBf/S1BAXkULc1VZUoF0p4aH9npp04Q+ree lKwquLNIbsIFAM5AmGOxmVCVhwzA5k01i4MwzUyUCrfzDHolF42J8ALn/AXBSVQo gxS1u5uFZ44G3HCI4Zuvd0PA6ZmMHd0v4DZVlb0qsB3TSzx+W8/SXUl0zelmJv6F PxGdOF4ihtQOhY7KmksS0c5BpsrZysWE+KWKOYarraaeZ+TrcwsaVMoK8BZ65VZx p9gJK5kYea0JivEhWYFbkCd2lnldaS4g6XDRwIDPYBicpXt0nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC66VM+yULhWPkfYSIE3UMZ34B6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGYwMmI2MTQtODY1OC0z MzE2LTg2NzAtNDFmOGFlY2EzZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpgEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpt7zKmwBh7538xnRm1TaqUiiKDn55HGfyc57+FXfa+SOJVzMp26SH5 1brgTXlKJkgXTlTTwLFiz99XRDGo4io94Uhl0Dvl0Fay7Y9ei5bpA2HXKoiYN4NL oEL8eDcWCxNT8iJS+NqSQ+Gvl+TL3GLfygCEpLXWqI7GhK5BWahRhJK5ProlXCyX N6Q6ESYUuB2hoXUHO6GhIXgWH05+5EHAtYE8UfuZp89i4bEYBlvhc4YCczb9yeFT c9Jtr5hyk29nCVqDtGWJVIzwmH86/4CCcZw6H16fB98NMQQUnihqKha1+PkToaEr SYL7yyswa1/XCN4ZYBNgJKdCLbDLds4= -----END CERTIFICATE-----Generated at Sun Nov 2 16:45:32 2025 by rpki-client