$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cec880d-7670-32d6-ba90-fbd76e814984.roa File: 5cec880d-7670-32d6-ba90-fbd76e814984.roa (raw, json) Hash identifier: mi2iUz96xkLfCbN0FCsF5IYmmlvhZDLzrjYEwCTNl1A= Subject key identifier: 1C:5A:2E:52:83:FA:82:F0:77:BF:F6:6E:FE:99:9F:1B:20:28:92:17 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B94421DE9950AF90FE0C6B2C0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cec880d-7670-32d6-ba90-fbd76e814984.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 26383 IP address blocks: 166.1.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1d:e9:95:0a:f9:0f:e0:c6:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=5fa7826a-121e-4c14-b380-fc27e3ac3e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:b4:89:51:34:13:cd:bc:c4:7d:85:4f:b4: f5:a2:d6:d2:19:e4:a8:c1:69:08:9a:2a:7d:56:53: 19:2e:f0:28:02:21:7e:40:b5:9a:a4:23:87:1d:a3: 37:8a:38:e7:99:cc:96:e6:0b:57:c5:d5:7b:38:eb: a1:79:b5:82:2c:fd:6a:2a:97:2d:47:4b:9a:bb:f8: 6f:7e:e6:f9:fa:4d:af:27:0a:d0:e7:a5:05:ec:a4: b6:a6:b4:f9:89:45:d7:4b:55:49:ea:1f:ad:e7:22: d6:4c:99:ef:e1:bd:cf:c9:8a:bb:c9:a3:ea:43:51: 3f:55:0d:9f:02:1a:10:2c:8a:ba:0a:28:42:7a:4e: 91:4e:ff:b1:ea:65:bb:4b:b7:ad:4b:ca:f4:a5:82: b5:a0:e3:b4:74:3a:45:bf:10:44:10:ec:85:75:fa: 71:cd:e7:7f:69:f5:24:53:6f:3e:3c:07:e8:ea:47: 07:c4:cc:79:d8:67:d2:55:36:91:b0:51:c9:cd:b1: 88:dc:7a:cc:33:da:de:92:a2:ea:55:3d:32:b8:bd: 5c:e2:8d:b9:eb:7a:74:62:fb:60:32:cc:68:a1:96: 34:1a:ae:66:33:d8:2c:f0:c0:fa:2a:85:6e:c5:79: 26:46:c1:cf:c5:ec:ef:f6:a9:e8:06:be:27:7a:40: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5A:2E:52:83:FA:82:F0:77:BF:F6:6E:FE:99:9F:1B:20:28:92:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5cec880d-7670-32d6-ba90-fbd76e814984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:90:42:1a:95:5d:29:02:98:ae:76:39:5e:86:17:6f:56:66: 3e:76:e3:17:66:c2:b9:03:5f:02:1f:45:14:eb:c9:23:c7:e8: ba:0b:0d:b5:1d:56:9a:1c:d1:15:ff:45:e7:64:4d:97:59:55: d6:dc:40:e7:1e:f3:f0:e8:09:99:54:c8:16:18:03:e5:dc:c0: 58:5e:32:12:7f:4b:5a:80:fd:d0:95:c8:19:ab:4f:32:b0:d2: 48:4a:af:63:f4:f7:17:4e:40:44:3e:47:ed:af:c4:2d:91:66: c9:e5:fa:27:89:a9:63:dc:a0:90:e6:53:cf:de:93:71:0f:da: 8a:86:ba:f9:54:59:78:f8:1c:2e:bf:55:b8:66:af:79:33:dd: 63:66:c5:43:e7:d6:ea:b5:54:2d:80:7b:61:ef:f6:f8:32:d4: 9c:14:90:e7:9a:ed:e2:2d:07:cc:cd:2c:11:88:46:c3:d1:07: 0f:72:06:d2:82:17:a5:17:fa:71:dc:c7:d8:88:bb:3e:7c:65: b7:aa:7c:f8:fe:c8:1e:b8:38:1b:17:1f:fd:c3:a0:02:73:95: 2d:9e:d3:44:4b:43:26:17:da:93:3e:ca:5f:3b:c5:5a:dd:2f: 6b:a6:75:e3:65:15:08:66:4f:7e:e3:18:06:1c:3c:ed:b8:34: 5d:82:74:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh3plQr5D+DGssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NWZhNzgyNmEtMTIxZS00YzE0LWIzODAtZmMyN2UzYWMzZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu++0iVE0E828xH2FT7T1otbSGeSowWkImip9 VlMZLvAoAiF+QLWapCOHHaM3ijjnmcyW5gtXxdV7OOuhebWCLP1qKpctR0uau/hv fub5+k2vJwrQ56UF7KS2prT5iUXXS1VJ6h+t5yLWTJnv4b3PyYq7yaPqQ1E/VQ2f AhoQLIq6CihCek6RTv+x6mW7S7etS8r0pYK1oOO0dDpFvxBEEOyFdfpxzed/afUk U28+PAfo6kcHxMx52GfSVTaRsFHJzbGI3HrMM9rekqLqVT0yuL1c4o2563p0Yvtg MsxooZY0Gq5mM9gs8MD6KoVuxXkmRsHPxezv9qnoBr4nekD1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxaLlKD+oLwd7/2bv6ZnxsgKJIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWNlYzg4MGQtNzY3MC0z MmQ2LWJhOTAtZmJkNzZlODE0OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOQQhqVXSkCmK52OV6GF29WZj524xdmwrkDXwIfRRTrySPH6LoLDbUd Vpoc0RX/RedkTZdZVdbcQOce8/DoCZlUyBYYA+XcwFheMhJ/S1qA/dCVyBmrTzKw 0khKr2P09xdOQEQ+R+2vxC2RZsnl+ieJqWPcoJDmU8/ek3EP2oqGuvlUWXj4HC6/ Vbhmr3kz3WNmxUPn1uq1VC2Ae2Hv9vgy1JwUkOea7eItB8zNLBGIRsPRBw9yBtKC F6UX+nHcx9iIuz58ZbeqfPj+yB64OBsXH/3DoAJzlS2e00RLQyYX2pM+yl87xVrd L2umdeNlFQhmT37jGAYcPO24NF2CdMM= -----END CERTIFICATE-----Generated at Sun Nov 2 16:49:32 2025 by rpki-client