$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f78d097-e4fd-3131-8734-73a4e2b0c5d1.roa File: 6f78d097-e4fd-3131-8734-73a4e2b0c5d1.roa (raw, json) Hash identifier: WfnmiROX5b7rqEgryUugRe7pgmpDmYAlJGb1CDkUZRo= Subject key identifier: 18:C4:92:F1:0A:AB:75:9D:B4:0B:77:C9:0C:34:6C:D5:1D:C1:A4:BD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BD9597CC464D7C83FF3001180 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f78d097-e4fd-3131-8734-73a4e2b0c5d1.roa Signing time: Thu 13 Nov 2025 18:58:25 +0000 ROA not before: Thu 13 Nov 2025 18:58:25 +0000 ROA not after: Wed 11 Feb 2026 18:58:25 +0000 asID: 215728 IP address blocks: 166.0.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d9:59:7c:c4:64:d7:c8:3f:f3:00:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 13 18:58:25 2025 GMT Not After : Feb 11 18:58:25 2026 GMT Subject: CN=ae86ebac-ee3d-4035-82af-89ecd1a5e959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0e:7f:a3:9c:fe:37:73:1a:a2:c2:b9:fa:c4: 7d:f5:4c:8c:0b:ee:44:5c:60:b2:aa:3a:09:6e:d3: ae:a3:e0:6f:34:b2:f5:b8:d3:6c:f3:66:4f:48:52: 7c:bf:7f:78:13:5f:9c:dc:7d:b9:c5:69:b2:97:56: fc:50:47:13:67:67:4b:1d:21:5a:18:96:32:19:4d: df:f5:7f:f8:ae:0d:e2:b4:4e:75:10:c0:53:5b:a5: 80:bf:9a:d6:10:68:73:87:26:9b:54:a3:af:3c:a3: ca:4c:79:1f:98:f3:d3:94:93:3b:f2:e7:c2:d5:f4: ed:c4:8b:36:7c:32:ea:d9:e3:62:52:07:42:61:ce: 48:6f:15:5a:68:0d:f2:54:58:23:e7:4f:fc:ad:e2: 8d:8d:c6:c9:32:fd:ca:1d:03:41:91:95:40:aa:bf: 09:cf:df:ad:0b:94:73:9a:de:f2:53:dd:4f:52:49: 0a:19:68:5c:63:3c:fa:66:a4:dc:0d:1f:3a:e0:4d: ec:7f:a9:12:21:88:c4:3e:3c:52:25:c4:d9:ae:27: c2:46:f9:e3:5d:7b:df:4a:17:87:c6:19:09:f7:73: 5e:b1:5d:2d:9a:bf:e3:2c:79:89:5b:b2:75:81:4a: 2f:c4:7a:6a:1d:32:a7:86:e1:63:15:8d:01:f8:bd: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C4:92:F1:0A:AB:75:9D:B4:0B:77:C9:0C:34:6C:D5:1D:C1:A4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f78d097-e4fd-3131-8734-73a4e2b0c5d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5e:fa:5c:12:29:c8:a4:ec:29:60:bf:c3:93:eb:0c:9d:51: 4d:c9:8e:5b:fe:cf:df:8a:46:ee:a2:17:b0:6a:a0:3f:67:5e: cb:ba:eb:a7:cd:81:d6:11:52:20:25:86:35:3a:db:04:00:57: b2:c1:a8:f0:91:3e:75:56:b7:cc:e1:ca:89:68:67:ab:70:ab: 60:97:c0:9a:0f:a5:dd:b4:5e:c3:b6:90:e5:60:f5:81:58:4b: a7:01:dd:51:f5:86:71:08:32:52:00:c2:48:70:bf:db:95:9e: 74:85:f0:8c:a3:ed:35:b5:b6:f4:5e:f9:e8:07:0b:3a:f0:4e: 6d:22:2c:d2:8b:73:f3:1a:f0:a6:00:07:c5:be:6e:94:dc:db: 2f:36:db:d4:c0:b8:4f:a6:2c:36:22:d8:70:1c:b2:ea:81:90: 06:5e:2e:6b:d9:d7:6c:67:27:12:06:18:c0:56:6e:a4:89:0f: 06:51:51:d6:44:46:f4:01:c5:e8:65:8a:7d:bf:15:22:29:cb: 38:eb:96:4e:1b:9b:c0:37:6e:8a:7e:71:1f:68:7b:90:0e:70: b2:4d:f4:18:2a:91:3a:5e:a8:b3:08:a3:56:d1:49:b6:cf:27: 1b:39:27:32:b5:b1:9c:32:fc:03:9d:73:e9:5f:c5:fb:11:ca: 4c:12:79:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvZWXzEZNfIP/MAEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTExMzE4NTgyNVoXDTI2MDIxMTE4NTgyNVowLzEtMCsGA1UEAxMk YWU4NmViYWMtZWUzZC00MDM1LTgyYWYtODllY2QxYTVlOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA5/o5z+N3MaosK5+sR99UyMC+5EXGCyqjoJ btOuo+BvNLL1uNNs82ZPSFJ8v394E1+c3H25xWmyl1b8UEcTZ2dLHSFaGJYyGU3f 9X/4rg3itE51EMBTW6WAv5rWEGhzhyabVKOvPKPKTHkfmPPTlJM78ufC1fTtxIs2 fDLq2eNiUgdCYc5IbxVaaA3yVFgj50/8reKNjcbJMv3KHQNBkZVAqr8Jz9+tC5Rz mt7yU91PUkkKGWhcYzz6ZqTcDR864E3sf6kSIYjEPjxSJcTZrifCRvnjXXvfSheH xhkJ93NesV0tmr/jLHmJW7J1gUovxHpqHTKnhuFjFY0B+L0xRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjEkvEKq3WdtAt3yQw0bNUdwaS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNmY3OGQwOTctZTRmZC0z MTMxLTg3MzQtNzNhNGUyYjBjNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1e+lwSKcik7Clgv8OT6wydUU3Jjlv+z9+KRu6iF7BqoD9nXsu666fN gdYRUiAlhjU62wQAV7LBqPCRPnVWt8zhyoloZ6twq2CXwJoPpd20XsO2kOVg9YFY S6cB3VH1hnEIMlIAwkhwv9uVnnSF8Iyj7TW1tvRe+egHCzrwTm0iLNKLc/Ma8KYA B8W+bpTc2y8229TAuE+mLDYi2HAcsuqBkAZeLmvZ12xnJxIGGMBWbqSJDwZRUdZE RvQBxehlin2/FSIpyzjrlk4bm8A3bop+cR9oe5AOcLJN9BgqkTpeqLMIo1bRSbbP Jxs5JzK1sZwy/AOdc+lfxfsRykwSeRg= -----END CERTIFICATE-----Generated at Sun Nov 16 13:59:35 2025 by rpki-client