$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/636306d6-aaf7-3e7c-b019-03a25278c65d.roa File: 636306d6-aaf7-3e7c-b019-03a25278c65d.roa (raw, json) Hash identifier: 54gYHOcWsyQgBLO5jGo0qZvDJdD5umUgFztc6o5ENlw= Subject key identifier: EE:EF:56:D4:7E:B5:4D:5F:AE:A1:B9:15:13:D2:D6:B6:E6:54:22:28 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584B67980808A80224C85AE6DA60 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/636306d6-aaf7-3e7c-b019-03a25278c65d.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 166.1.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:98:08:08:a8:02:24:c8:5a:e6:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4a06a4bf-0769-46c4-bc29-b9ec5013d90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1b:ea:46:d0:fa:2a:57:7d:31:0b:5c:4a:9b: 38:43:7c:70:d9:77:73:48:45:ec:ec:0b:ca:27:f8: 5d:1e:36:62:5f:4e:86:d6:c7:dd:61:9f:a7:bd:01: 52:d2:e0:d6:62:5c:2c:de:e0:8d:db:7e:d5:ff:72: fd:84:00:fd:e0:09:b8:86:83:9c:60:5c:32:9c:8d: cb:78:14:78:fe:f3:e3:b9:5d:15:8b:9a:f6:19:46: 20:9f:ef:4b:d1:bd:5e:d6:55:03:5d:26:0a:08:87: 49:bd:8f:99:85:da:3d:d6:ea:ec:83:a2:c8:46:36: 56:dd:bf:38:55:45:2a:85:7c:04:90:89:02:50:7f: 54:8a:4a:40:18:9f:c6:7a:b3:ab:b6:22:23:4b:bd: 4c:d7:ed:43:a4:10:eb:18:a0:f3:9d:df:5e:a1:ef: 8a:e4:ae:29:78:95:d8:d5:65:88:9b:c1:29:70:10: 56:51:b7:d0:aa:e7:cb:25:68:de:35:a4:39:5c:d1: e5:eb:85:2e:6b:30:36:1a:16:8f:5d:54:6d:24:65: bd:c3:97:ad:dc:6f:b2:d6:22:76:ab:29:69:bd:e8: 34:f5:93:a5:4d:b6:3d:c8:a0:d3:75:37:0b:5c:ed: 6f:f6:20:7b:83:2d:d7:cd:23:7a:e8:da:ae:3f:b7: a4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EF:56:D4:7E:B5:4D:5F:AE:A1:B9:15:13:D2:D6:B6:E6:54:22:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/636306d6-aaf7-3e7c-b019-03a25278c65d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c1:1c:e0:ea:11:70:ff:0d:5a:46:db:41:31:ac:10:9e:fe: 63:bd:b8:69:ac:83:8b:36:e9:d7:34:3c:b4:82:ad:2f:b8:0d: f0:fc:7b:be:62:1a:60:b2:3b:e6:ef:6b:15:35:14:bc:e0:dc: 9c:88:94:6f:e2:be:3c:ef:32:40:d3:aa:d9:8d:c9:41:b4:8e: a7:5b:d5:bd:74:ec:89:3f:45:82:c5:77:a3:4e:05:97:03:b0: e4:a0:18:4b:d2:9b:3c:bc:ca:ad:01:f4:94:9f:61:e5:78:2b: 86:04:17:3a:35:ed:cb:59:3f:54:cf:ce:93:d2:6f:b5:29:b2: 75:79:66:86:6d:db:c6:cc:e4:12:ba:57:cb:e4:65:3a:7d:92: 0e:50:32:9f:7c:f4:dd:70:a6:b4:ee:3a:e7:7e:8c:42:dc:13: 46:18:44:3e:5c:80:66:2e:eb:2b:98:12:40:03:02:fd:bb:9f: c2:82:62:ff:22:93:bb:23:fb:9e:08:1e:fd:c7:91:0e:32:39: bf:45:49:6b:22:33:26:f7:ed:22:c4:99:5f:00:75:5c:4d:4b: 36:ac:b6:83:dd:2c:ae:12:22:3e:38:76:f5:0b:05:26:b0:c6: 6c:ae:03:44:3f:83:b5:be:46:4d:4d:54:b6:1a:97:a2:b3:5f: 0e:d7:ac:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnmAgIqAIkyFrm2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGEwNmE0YmYtMDc2OS00NmM0LWJjMjktYjllYzUwMTNkOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxvqRtD6Kld9MQtcSps4Q3xw2XdzSEXs7AvK J/hdHjZiX06G1sfdYZ+nvQFS0uDWYlws3uCN237V/3L9hAD94Am4hoOcYFwynI3L eBR4/vPjuV0Vi5r2GUYgn+9L0b1e1lUDXSYKCIdJvY+Zhdo91ursg6LIRjZW3b84 VUUqhXwEkIkCUH9UikpAGJ/GerOrtiIjS71M1+1DpBDrGKDznd9eoe+K5K4peJXY 1WWIm8EpcBBWUbfQqufLJWjeNaQ5XNHl64UuazA2GhaPXVRtJGW9w5et3G+y1iJ2 qylpveg09ZOlTbY9yKDTdTcLXO1v9iB7gy3XzSN66NquP7ekNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7vVtR+tU1frqG5FRPS1rbmVCIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjM2MzA2ZDYtYWFmNy0z ZTdjLWIwMTktMDNhMjUyNzhjNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTBHODqEXD/DVpG20ExrBCe/mO9uGmsg4s26dc0PLSCrS+4DfD8e75i GmCyO+bvaxU1FLzg3JyIlG/ivjzvMkDTqtmNyUG0jqdb1b107Ik/RYLFd6NOBZcD sOSgGEvSmzy8yq0B9JSfYeV4K4YEFzo17ctZP1TPzpPSb7UpsnV5ZoZt28bM5BK6 V8vkZTp9kg5QMp989N1wprTuOud+jELcE0YYRD5cgGYu6yuYEkADAv27n8KCYv8i k7sj+54IHv3HkQ4yOb9FSWsiMyb37SLEmV8AdVxNSzastoPdLK4SIj44dvULBSaw xmyuA0Q/g7W+Rk1NVLYal6KzXw7XrNY= -----END CERTIFICATE-----Generated at Sun Nov 2 16:45:41 2025 by rpki-client